x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB]) sendmmsg$unix(r0, &(0x7f00000005c0), 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000380)) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000400)=0x1, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r2, r1}}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) 03:51:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 03:51:36 executing program 4: r0 = socket$inet6(0xa, 0x2000006, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000000c0)) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) signalfd(r1, &(0x7f0000000040)={0x4}, 0x8) [ 2554.987799] net_ratelimit: 24 callbacks suppressed [ 2554.987807] protocol 88fb is buggy, dev hsr_slave_0 [ 2554.998039] protocol 88fb is buggy, dev hsr_slave_1 [ 2555.007520] 9pnet: Insufficient options for proto=fd [ 2555.013332] audit: type=1804 audit(1547869896.946:2391): pid=10989 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2358/memory.events" dev="sda1" ino=16537 res=1 [ 2555.052862] kvm_set_msr_common: 13 callbacks suppressed [ 2555.052877] kvm [11023]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2555.102267] kvm [11023]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2555.102543] audit: type=1804 audit(1547869896.976:2392): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2358/memory.events" dev="sda1" ino=16537 res=1 03:51:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2555.163749] audit: type=1804 audit(1547869897.086:2393): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2358/memory.events" dev="sda1" ino=16537 res=1 03:51:37 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0x42) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x0, 0x0) 03:51:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='caif0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200000, 0x1) setsockopt$inet_dccp_int(r2, 0x21, 0x0, &(0x7f0000000180)=0x100000001, 0x4) 03:51:37 executing program 3: socket$alg(0x26, 0x5, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000600)) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(&(0x7f0000000500)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB]) sendmmsg$unix(r0, &(0x7f00000005c0), 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000380)) openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000400)=0x1, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r2, r1}}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) 03:51:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5003f00) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 03:51:37 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x80000) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2555.558522] kvm [11044]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2555.559870] 9pnet: Insufficient options for proto=fd 03:51:37 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400001) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = getpgrp(0xffffffffffffffff) r3 = epoll_create1(0x80000) sendmsg$nl_netfilter(r0, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2078000}, 0xc, &(0x7f0000000880)={&(0x7f00000000c0)={0x78c, 0x0, 0xb, 0x8, 0x70bd26, 0x25dfdbfc, {0xb, 0x0, 0x8}, [@generic, @typed={0x10, 0x74, @binary="eb0b52ea9af11706cadc"}, @nested={0x2ec, 0x4, [@generic="ed3f0a4e723ca50cc7e475e0b2ccd1365e06bfb81273c3706540ab1deb7c7ddef4ac58ac58e4ef2b1d63099c9163eb3ec44f6cce5e6b2ec803d55a69efb4d1904b0236222f8d54cf81e7d120e040eea6d0ed74364ce06d5a0036f113597d235a2e274e250f64a217acc04977026b3a29fd07aa64f9970ebcdeba397bf273e65d4be0382af16822f485d07ae0e7d66f25da15a186b484b383b8a134fc981538b2eff39ad106b4419831f18fd49661c33dc01f0aa07f67a4fd35d6c18965066edfd93e04e9eca9c4abb76bb35a328ccda84fa5eb442d4284d9", @generic="f8a7edcd6f5da718d19dfa1a6376889f1ffb8ff553d6964e4114399338b89ee32d3a320fde3e2fff92ea45988f18e4e0befb6e194f76d4f94af4100800ab4da6d6a4417b592e488810ca276a3134f4ad2f20c912797803f98c8b9e506d7de8351930ac3d82f26204a53d05c30217fe9c8cc3375cba544e153c7f5fe9c0429518a73985c7bca2a88c190f9261b85f6cff7cbfa0f808ed8268c689ce37043c5ed5f01106b2c0482c44e30851c121e9202b914959000f890a41cd3e43119b790500da3bfe4720cb244a14491b2485fc4fda11fe0d45127400975433ba51a2ff3364", @typed={0x14, 0x3b, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x24, 0x4, @str='mime_type^]keyringGPLvmnet0\\\x00'}, @typed={0xc4, 0x5e, @binary="06161e037c729d189ba3e91f261670937269a13918667b2a4e249133d5645aa7e725b89a92d21be531a4150889891ed5c4c507dd714b2382b03d71700aee2642a9df8793ee379e952127ad87d4406b1a462f9af92ce18c32b4d61295243650020f49f95f9d8779246bb1a4b775cb730bbc25c262609e8cd203c6f90b89ebf93d7fecb5462fc0aa78fa546845fa6754fc44760fb4faa24e3719c5f644891a461bea4b12bf2d715b931293824b26e01b2aa4170d3f5b96f4b67524bbee62"}, @generic="68743ac226a6b8d6d2fe6248aa679ab9ff66a927e7ca1e5e26cbd253c55ec5f30021", @generic="5069e884827c852d", @generic, @typed={0x8, 0x46, @ipv4=@remote}]}, @generic="afb128c35b17b7b0ae17aa3018799d17a750fac63628a4fbd94115d07aaba88c1ddf734ca8a523040f40", @nested={0xe4, 0x8b, [@generic="bf149fbf3e58f6013077ec45226c20ae0e453ee527c61090057e1c958075d6d4027131ced9c691b50e727af8855f9a8b162624c2cdbbf25420a56951861df2a99197822517ff4b8e1a0cef64eb6d4b732ac5f70338bba63aaab50bb6f7f0afd2bb5ffbe5783d9d5f2b13917f37d8145a37a8123a30c493d04c52a2d53e9a27fcacd1455355289af25f66e2e747bf99586a29566fd591bb6b21d4872b55f6a389af75efda0e5c3839bb6d4c794792ed0af01be08010ebfde40eb7c503892b921f46947a83fd877c606842ef39adee76f10e13eb1df66a1402a538f5c49dc4f2"]}, @nested={0x174, 0x2c, [@generic="10f2774907b0f464c6592f1ae6fdb52ff24e8b2a07a6e9940cebe153ed1638c3e13f8b750ee7c43577387be9ea907ba74b54c208171a84214464cef147561dc38433b484f248721a0cd5b7f8eca825a1e5e49abe77010741754953009057aec88d8e0921b0c5c476c9263b2088d5adefd1b46cc8df9796ad763574a8c59561ed5eeb3e8adee67051802293ff11deca455ac0193004f6e66a5de84cc6e8c9204f62ebce9e37af75d03cf6f80c9e66656b2308a9aa2037e53c2c1d69e01ba6645e5374e19b266334287044435457a08db8b2c389fc8d90592834a5775475182b29a111154959047adaa70d0648", @generic="93e70747ed490de5c58810d9e4cd4891c8a069ff60ea9924c03dfe1df20de442d5ec769b9e30d1ce538b922c83df44c3a830139fdd32580fd1198e68678032be51a5ab6c683a06ae5c2f93726b90153f2dcf0eb0d9bfc7c99bcb747d478f5efe6dbd4b69dd28ed22b330dd4f63a178c50514328c40e27c1147177b", @typed={0x8, 0x72, @pid=r1}]}, @typed={0x8, 0x2, @ipv4=@remote}, @generic="d4929efb8539cb137e82df61145fe158a21f5ae924b51f51453edf20b4bc1b1d0b2c2aa33f1a096f8aa0e909c147c947f7f553f5439bb87254cf0e76f51e4bfddc4065d8101bc55b70154a64906ee1c32f0ee881e0b382b31f37ea9c9e56c5396c6265690a25c26acdffe0ab3d4605d5bf2dfc36a13b0ec45e7a2fc7e046b4363c345da1944fee1c19f3f660a2e9990f139b4b5a552bc9518f4f340989a920edafd39b7e2968eefc89acba3f31fc79ec8a551716e5c7e975ad8b5399e2594819997926fe866e364d35f16dd3a245aa32c95674d7faf0ab4b0e5f3494", @nested={0x8, 0x6c, [@typed={0x4, 0x4d}]}, @nested={0x10c, 0x2a, [@typed={0x70, 0x5, @binary="c29d6098eef7fc38a7fb0f2139618f42dc568e98b13763535cd1fb6478d753d5ccdbc1372ad99e97b5c35d9254802a3496c9d1fd18aa0ab9860b40101e31747e1948a743083bd6558cb5f87311b50e9da57cb3ba5b53d44377df324451a1e792be7ec70de0511ba194"}, @typed={0x8, 0x82, @pid=r2}, @typed={0x8, 0x25, @fd=r3}, @typed={0x8, 0x20, @ipv4=@multicast1}, @typed={0x24, 0x29, @str='%.proc%]proc(self{,vboxnet1,\x00'}, @generic="0acbceffffee9ef1cdbd3c696a6fc77367e5de32813785fbd3c4425c70dd7b39e3d6792300d9cbf37d8febf59d2aab9b6150f96d1802d5810c746d4321d5e50e1d827e02ca30a79ed1bbff7097da95b6a91e", @typed={0x8, 0x3d, @ipv4=@rand_addr=0x8}]}]}, 0x78c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008045) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x400000009) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2555.600332] kvm [11044]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xc0', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 03:51:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) 03:51:37 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0xfffffffffffffeef) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e1c, @remote}, 0xffffffffffffff65) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000080)={0x81, 0x80}) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2555.820998] audit: type=1804 audit(1547869897.746:2394): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2359/memory.events" dev="sda1" ino=16738 res=1 03:51:37 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x200000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400000, 0x6) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f00000000c0)={0x0, 0x8}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0xcb, &(0x7f0000003bc0)}, 0xfffffffffffffffe}], 0x3a6, 0x0) [ 2556.027825] protocol 88fb is buggy, dev hsr_slave_0 [ 2556.032988] protocol 88fb is buggy, dev hsr_slave_1 [ 2556.038190] protocol 88fb is buggy, dev hsr_slave_0 [ 2556.043258] protocol 88fb is buggy, dev hsr_slave_1 [ 2556.062412] audit: type=1804 audit(1547869897.986:2395): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2359/memory.events" dev="sda1" ino=16738 res=1 [ 2556.103547] audit: type=1804 audit(1547869898.016:2396): pid=11049 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2359/memory.events" dev="sda1" ino=16738 res=1 [ 2556.141434] audit: type=1804 audit(1547869898.026:2397): pid=11062 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2359/memory.events" dev="sda1" ino=16738 res=1 [ 2556.347812] protocol 88fb is buggy, dev hsr_slave_0 [ 2556.352941] protocol 88fb is buggy, dev hsr_slave_1 [ 2556.358150] protocol 88fb is buggy, dev hsr_slave_0 [ 2556.363288] protocol 88fb is buggy, dev hsr_slave_1 03:51:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:51:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 03:51:38 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, 0x0) 03:51:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x0f', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:38 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000000040)}, 0x2}], 0x1, 0x0) 03:51:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5004000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x8180451f, 0x0) 03:51:38 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2556.542726] kvm [11095]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2556.615269] kvm [11095]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:38 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x90700000000000) [ 2556.756871] audit: type=1804 audit(1547869898.676:2398): pid=11106 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2360/memory.events" dev="sda1" ino=16881 res=1 03:51:38 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x80000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x101000, 0x0) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x2, 0x3, {0xa, 0x4e24, 0x0, @ipv4={[], [], @broadcast}, 0x21}}}, 0x32) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x6) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) [ 2556.945381] kvm [11125]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2556.987204] kvm [11125]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1c, &(0x7f0000000480)="0a700001000000000000005d4e021f4bf1710180000000000000efbe0ee1cc1db643fe61c1848518eb2b2db0becb78b1b1b376e569f1b59a523b22449029e831fd8f904d930efbba417c5dde000000000000000014538571d65457c9f9ca9fc07b26eca324c556620cfdf73bb3f3379ec110f3b0b67b6d2f15eae12f55fb7cda27c08cb33284880f278b2ac959602d1c50a07cc1f89d5c8df3f21bd9a4aeb2951ba078b20c15fc62859578475b14b2d29c17b3706cc6d91adc8932f61d9f7e5de322cb43f9217a35cd241988b6c8a0b8f8a023110b691a443cdb50a8a4b289bb1bd8a833c8ba47af333f7b6948fa40568e7bf370f3264cff387bd97b38d69d4638ba614887408eb4717f97b7b6336dfd2dc7b87d7aa66fb3") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffe4d, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8004) 03:51:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5001f00) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:39 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setrlimit(0xf, &(0x7f00000000c0)={0x3, 0x7}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x101, 0x4) 03:51:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 03:51:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5004800) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2557.488524] kvm [11138]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:39 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x100, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xa, 0x427ffc17, @l2={'ib', 0x3a, 'bcsh0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20004080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x3ff, @remote, 0x3}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0xfffffffffffffffb}, @in6={0xa, 0x4e22, 0x100, @mcast2, 0x5}], 0x84) listen(r0, 0x6) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2557.535343] kvm [11138]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xa0', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x6, 0x60000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000380)={'TPROXY\x00'}, &(0x7f00000003c0)=0x1e) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 03:51:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 03:51:39 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80040, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e23, @local}, 0xfffffffffffffea6) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:39 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x6c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:40 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x907000) 03:51:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 03:51:40 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x448) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200080, 0x0) write$P9_RLERROR(r2, &(0x7f00000000c0)={0x16, 0x7, 0x1, {0xd, 'self]security'}}, 0x16) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5004c00) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:40 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:51:40 executing program 4: r0 = socket$inet6(0xa, 0x6, 0xfffffffffffffffd) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2558.442179] FAULT_INJECTION: forcing a failure. [ 2558.442179] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2558.492497] CPU: 0 PID: 11210 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #32 [ 2558.499824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2558.509190] Call Trace: [ 2558.511799] dump_stack+0x1db/0x2d0 [ 2558.515450] ? dump_stack_print_info.cold+0x20/0x20 [ 2558.520480] ? total_mapcount+0x8f0/0x8f0 [ 2558.524670] should_fail.cold+0xa/0x15 [ 2558.528588] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2558.533730] ? arch_local_save_flags+0x50/0x50 [ 2558.538326] ? lock_release+0xc40/0xc40 [ 2558.542326] ? page_trans_huge_map_swapcount+0xb53/0x1230 [ 2558.547910] should_fail_alloc_page+0x50/0x60 [ 2558.552419] __alloc_pages_nodemask+0x323/0xdc0 [ 2558.557106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2558.562662] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2558.567723] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2558.573270] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2558.578827] alloc_pages_vma+0xdd/0x540 [ 2558.582820] wp_page_copy+0x258/0x1c30 [ 2558.586729] ? swp_swapcount+0x540/0x540 [ 2558.590707] cgroup: fork rejected by pids controller in /syz0 [ 2558.590809] ? pmd_pfn+0x1d0/0x1d0 [ 2558.600206] ? find_held_lock+0x35/0x120 [ 2558.604383] ? do_wp_page+0x70d/0x16b0 [ 2558.608303] ? kasan_check_read+0x11/0x20 [ 2558.612468] ? do_raw_spin_unlock+0xa0/0x330 [ 2558.617000] ? do_raw_spin_trylock+0x270/0x270 [ 2558.621595] ? __lock_acquire+0x572/0x4a30 [ 2558.625860] do_wp_page+0x715/0x16b0 [ 2558.629593] ? finish_mkwrite_fault+0x540/0x540 [ 2558.634271] ? kasan_check_read+0x11/0x20 [ 2558.638429] ? do_raw_spin_lock+0x156/0x360 [ 2558.642764] ? rwlock_bug.part.0+0x90/0x90 [ 2558.647017] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2558.652146] __handle_mm_fault+0x2c8e/0x55a0 [ 2558.656594] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2558.661445] ? check_preemption_disabled+0x48/0x290 [ 2558.666471] ? handle_mm_fault+0x3cc/0xc80 [ 2558.670848] ? lock_downgrade+0x910/0x910 [ 2558.675023] ? kasan_check_read+0x11/0x20 [ 2558.679186] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2558.684478] ? rcu_read_unlock_special+0x380/0x380 [ 2558.689419] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2558.694969] ? check_preemption_disabled+0x48/0x290 [ 2558.700005] handle_mm_fault+0x4ec/0xc80 [ 2558.704082] ? __handle_mm_fault+0x55a0/0x55a0 [ 2558.708669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2558.714217] ? vmacache_update+0x114/0x140 [ 2558.718480] __do_page_fault+0x5da/0xd60 [ 2558.722570] do_page_fault+0xe6/0x7d8 [ 2558.726393] ? vmalloc_sync_all+0x30/0x30 [ 2558.730552] ? find_held_lock+0x35/0x120 [ 2558.734627] ? __might_fault+0x12b/0x1e0 [ 2558.738723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2558.743592] page_fault+0x1e/0x30 [ 2558.747061] RIP: 0010:__put_user_4+0x1c/0x30 [ 2558.751480] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 ee 01 00 48 8b 9b 18 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 2558.770392] RSP: 0018:ffff88808633f940 EFLAGS: 00010297 [ 2558.775762] RAX: 0000000000000200 RBX: 00007fffffffeffd RCX: 0000000000709000 [ 2558.783041] RDX: 0000000000000086 RSI: ffffffff81b4ec33 RDI: 0000000000000286 [ 2558.790408] RBP: ffff88808633fa08 R08: ffff8880595aa140 R09: 0000000000000002 [ 2558.797689] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff11010c67f2c [ 2558.804971] R13: 0000000000000200 R14: ffff888085644b08 R15: 0000000000709000 [ 2558.812282] ? __might_fault+0x1a3/0x1e0 [ 2558.816392] ? n_hdlc_tty_ioctl+0x34d/0x500 [ 2558.820736] ? n_hdlc_tty_wakeup+0xd0/0xd0 [ 2558.824995] ? ldsem_down_read+0x33/0x40 [ 2558.829068] ? ldsem_down_read+0x33/0x40 [ 2558.833156] tty_ioctl+0xb53/0x16c0 [ 2558.836797] ? n_hdlc_tty_wakeup+0xd0/0xd0 [ 2558.841043] ? tty_vhangup+0x30/0x30 [ 2558.844772] ? find_held_lock+0x35/0x120 [ 2558.848848] ? __fget+0x472/0x710 [ 2558.852345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2558.857995] ? lock_downgrade+0x910/0x910 [ 2558.862148] ? kasan_check_read+0x11/0x20 [ 2558.866310] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2558.871616] ? rcu_read_unlock_special+0x380/0x380 [ 2558.876678] ? __fget+0x499/0x710 [ 2558.880178] ? iterate_fd+0x4b0/0x4b0 [ 2558.883990] ? tty_vhangup+0x30/0x30 [ 2558.887713] do_vfs_ioctl+0x107b/0x17d0 [ 2558.891715] ? memset+0x32/0x40 [ 2558.895008] ? ioctl_preallocate+0x2f0/0x2f0 [ 2558.899428] ? smack_inode_setattr+0x290/0x290 [ 2558.904020] ? __fget_light+0x2db/0x420 [ 2558.908018] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2558.913569] ? fput+0x128/0x1a0 [ 2558.916856] ? do_syscall_64+0x8c/0x800 [ 2558.920837] ? do_syscall_64+0x8c/0x800 [ 2558.924832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2558.930385] ? security_file_ioctl+0x93/0xc0 [ 2558.934821] ksys_ioctl+0xab/0xd0 [ 2558.938288] __x64_sys_ioctl+0x73/0xb0 [ 2558.942189] do_syscall_64+0x1a3/0x800 [ 2558.946086] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2558.951028] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2558.956051] ? __switch_to_asm+0x34/0x70 [ 2558.960129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2558.965004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2558.970197] RIP: 0033:0x458099 [ 2558.973395] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2558.992320] RSP: 002b:00007fbe2bcb1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2559.000051] RAX: ffffffffffffffda RBX: 00007fbe2bcb1c90 RCX: 0000000000458099 [ 2559.007326] RDX: 0000000000709000 RSI: 000000000000541b RDI: 0000000000000003 [ 2559.014622] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2559.021894] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe2bcb26d4 [ 2559.029186] R13: 00000000004c2172 R14: 00000000004d4708 R15: 0000000000000004 03:51:41 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0xa80, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x2) ioctl(r0, 0x1, &(0x7f0000000080)="0adc1f0010000000000000") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x3, 0x0) getpeername$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000140)=0x6e) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 03:51:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 03:51:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:41 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x8000000ffffffff) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@flushsa={0x38, 0x1c, 0x40c, 0x70bd2c, 0x25dfdbff, {}, [@lifetime_val={0x24, 0x9, {0x100, 0x8, 0x3d, 0x75}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) 03:51:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5006800) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:41 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x1000000000000000, @ipv4={[], [], @broadcast}, 0x40}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) 03:51:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:41 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x20800, 0x0) connect$ax25(r2, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:41 executing program 3 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:51:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) 03:51:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2559.626957] kauditd_printk_skb: 12 callbacks suppressed [ 2559.626971] audit: type=1804 audit(1547869901.546:2411): pid=11239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2363/memory.events" dev="sda1" ino=17057 res=1 [ 2559.786127] audit: type=1804 audit(1547869901.706:2412): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2363/memory.events" dev="sda1" ino=17057 res=1 [ 2559.865073] audit: type=1804 audit(1547869901.746:2413): pid=11239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2363/memory.events" dev="sda1" ino=17057 res=1 [ 2559.911499] audit: type=1804 audit(1547869901.836:2414): pid=11239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2363/memory.events" dev="sda1" ino=17057 res=1 03:51:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:51:42 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x6, @remote, 0xc6c}, 0xfea2) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x7a, "889f7804e8f7364c528c78a2f507ad98d3b8cea93c9ffaff1c47d58a2f59fa7dfd64b3a0dcbce49f8b483d1a93c58160690051b91e17a6e54fa735432b278bd0d07223dba5923ed3dd0811889d7875766e31ec72ce836ddc368e6cc30420675208965dffa7ac0ba9f4eaf73afb933f577de27b8bf38f464aed0d"}, &(0x7f00000000c0)=0x82) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="5a0000002e3d24361c2d33e0bb05d74049a51beb20234e5691e848be35bb812784b5b8cc25ef441ff4c0cd5eb1f4c0524e9c3d6e79d19112c166cef3fdaca1c38f0e8c18ed9f41f6b9763bfc682a1d7596435a759f2653c8541e77874af0"], &(0x7f0000000200)=0x70) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r4, 0x1}, 0x8) socketpair$unix(0x1, 0x20000000002, 0x0, &(0x7f0000000280)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vfio/vfio\x00', 0x80, 0x0) r5 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400208) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x227d, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000240)=0x4) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 03:51:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5006900) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:51:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2560.150115] kvm_set_msr_common: 10 callbacks suppressed [ 2560.150130] kvm [11266]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2560.187794] net_ratelimit: 16 callbacks suppressed [ 2560.187800] protocol 88fb is buggy, dev hsr_slave_0 03:51:42 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/43) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2560.197998] protocol 88fb is buggy, dev hsr_slave_1 [ 2560.203173] protocol 88fb is buggy, dev hsr_slave_0 [ 2560.208316] protocol 88fb is buggy, dev hsr_slave_1 [ 2560.244736] kvm [11266]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 03:51:42 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = semget$private(0x0, 0xca70780a83303419, 0x3) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000100)=""/97) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0xfffffffffffffffe, 0x80}, 0x8) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2560.407937] audit: type=1804 audit(1547869902.336:2415): pid=11278 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2364/memory.events" dev="sda1" ino=17180 res=1 [ 2560.517797] protocol 88fb is buggy, dev hsr_slave_0 [ 2560.523008] protocol 88fb is buggy, dev hsr_slave_1 [ 2560.528228] protocol 88fb is buggy, dev hsr_slave_0 [ 2560.534963] protocol 88fb is buggy, dev hsr_slave_1 03:51:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2560.573404] kvm [11293]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:42 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2560.679266] kvm [11293]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2560.713391] audit: type=1804 audit(1547869902.636:2416): pid=11282 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2364/memory.events" dev="sda1" ino=17180 res=1 [ 2560.850952] audit: type=1804 audit(1547869902.736:2417): pid=11278 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2364/memory.events" dev="sda1" ino=17180 res=1 03:51:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x2, 0x709000) 03:51:42 executing program 4: r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x80000) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000240)=""/65, 0x41}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000300)=""/26, 0x1a}, {&(0x7f0000000340)=""/131, 0x83}], 0x7, &(0x7f0000000480)=""/13, 0xd}, 0x40000002) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}) [ 2560.921648] audit: type=1804 audit(1547869902.766:2418): pid=11307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2364/memory.events" dev="sda1" ino=17180 res=1 [ 2560.987820] protocol 88fb is buggy, dev hsr_slave_0 [ 2560.992950] protocol 88fb is buggy, dev hsr_slave_1 03:51:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000a7000000000000003f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb572340f53f4ec5815344fdd449823415977919585156b26065e90137fb6c126cd075e46805036c2e5117c841460eab9d523c3e3890f3d065a80a6c2fdf981332a2d1e3be2c4f144105af20e0f40ffcc"], 0x1}}, 0x0) r2 = msgget(0x2, 0x2) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000180)=""/148) 03:51:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5006b00) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2561.038107] kvm [11311]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:43 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt(r0, 0x3, 0x400, &(0x7f0000000080)="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", 0x1000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001080)={r1, 0x0, 0x6, 0x8, 0x4}) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x8, 0x810) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r0, &(0x7f0000005700), 0x2db, 0x40080) [ 2561.124435] kvm [11311]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) 03:51:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2561.392551] kvm [11336]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:43 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = socket$inet(0x2, 0x80007, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x9d3a, 0x4, 0x861, 0x10000, 0x7ff}, &(0x7f0000000100)=0x14) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2561.432290] audit: type=1804 audit(1547869903.356:2419): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2365/memory.events" dev="sda1" ino=16887 res=1 [ 2561.484543] kvm [11336]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) [ 2561.667184] audit: type=1804 audit(1547869903.586:2420): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2365/memory.events" dev="sda1" ino=16887 res=1 03:51:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5409, 0x709000) 03:51:43 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=0x0, &(0x7f0000000280)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e22, @empty}}, 0x7f, 0x5, 0x3, 0x8, 0x1}, &(0x7f0000000380)=0x98) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xa000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r4, 0x40, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x0, {"8ef2ff04c4574e4f61ad3192a15cc236"}, 0xffffffffffffffff, 0x487453df, 0x9}, @ib={0x1b, 0x6, 0x5, {"4a2ae3d242f428cde5b50ae15615e3cf"}, 0x2f, 0x6934, 0x1}}}, 0x118) 03:51:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5006c00) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:43 executing program 0: fstat(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) r5 = getgid() fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010007000000000002006d1420821347026b18ec23ad46e1b00100", @ANYRES32=r0, @ANYBLOB="020010001e0ff44859ebfd17b801504a4d649db5e9d92f6d65b214c25f4daeb1df0ef6dc5bece272775fcd28ddc42343a9c161965183038289ed1366c60d65416bfaff2d2050a4efc850ff9aaaa4c3eda640d464c397e7b39bddc9a513612733a1769d5754e79eaf2aa3befd078a00d26ee8d2962b1240de7394e3fa083f83e0ebeaed92d3d57a169b9bba64e82002a5bb1070899ae9c8b54326fed9321ba724e94f8f45568fb71b3f95e36812f230e28e1605586655813baf3c5cc43204c683dc0a7a3cd96944b2707d4370f9f86bdf4b", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="040005000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="10000400000000002000010000000000"], 0x5c, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}, 0x8000000}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:51:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 03:51:44 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x400000, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001380)=0x14) bind$can_raw(r2, &(0x7f00000013c0)={0x1d, r3}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000080)={{0xff}, 'port0\x00', 0x2, 0x80000, 0x1, 0x6, 0x2, 0xfffffffffffffff9, 0x8, 0x0, 0x1, 0x80000001}) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="27ecac1ad645465f98a3d16fe019495a1a4f35bd3e744e02c214c49ab1bca64fec8bb489cd4f3ae2897339750f8f667ff70b80ceb3b868d4596bbf30fd9c0482490b3d2917319a40a15de06fe9d4809b051e55a5d6455a369040320a96ab0e83eb56f27e8481d4dc6e83eb281680330ff455d1ab5f6c15a771c696bc703544763f4fdfe5588207974dcb048d3b24b581c1119a3d3ee79069439f75eda2809dc4b729f14fd98aabb396310e6e295b0747b7a0488024dee29caa09c5ab94063c45971b6b800f85810245f59f970384e8ce42e77fd6b15fea7e80e904b60059f49aaf9e2e9326b9aecc39b358aa70f8925459426c5a0ed756cd", 0xf8, 0xfffffffffffffffb) r5 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)='\x00', 0xfffffffffffffff9) keyctl$instantiate(0xc, r4, 0x0, 0x0, r5) [ 2562.124012] kvm [11372]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2562.166164] kvm [11372]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2562.276175] encrypted_key: master key parameter 'Å«”0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) [ 2562.361029] encrypted_key: master key parameter 'Å«”0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5006e00) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x540b, 0x709000) 03:51:44 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) socket$inet6(0xa, 0x80000, 0xffffffffffffff68) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) 03:51:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x80) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x1ff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) connect$netrom(r3, &(0x7f0000000100)={{0x3, @null, 0x4}, [@default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 03:51:45 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) write(r0, &(0x7f0000000040)="24518c2b82fc13ab1a2cd9340acb4735c0c1030f8e9be89ca0bf296483fb845913bf0f4793e372e765e73468407de0a2d8058df99ca1f52dd106bb01e0731903fe88854cd9cc6e35832da43f09da2d123052555f077f4a1a0e447c84bee9f71bc168cbab2b38dc8f9d9770d8dd073f0804c500a906480cf36983bf40af4da313e0f114f3c9c8ff54a64a8087396232e9c3993a1cf4af9e04821da927587794297024b17d2e33bdc9a05735cd3e4a156285100f42912e0b", 0xb7) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 03:51:45 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x6) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100), 0x2a) sendmmsg(r0, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 03:51:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5006f00) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x540c, 0x709000) 03:51:45 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000100)={0x52, 0x7, 0xa, {0x100000001, 0x5}, {0x81}, @rumble={0x81, 0xfffffffffffffffd}}) listen(r0, 0x10000) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x42524b74, 0x2000) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-neon\x00'}, 0x58) 03:51:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 03:51:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)=r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000003c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x20) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000680)=@sack_info={r4, 0x900000000, 0xffffffff}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) fstat(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@empty, @in=@broadcast, 0x4e22, 0x2, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x0, r5, r6}, {0x7, 0x40, 0x2, 0x0, 0x8e, 0x6, 0x8000, 0x4}, {0x401, 0x1000, 0xffffffff, 0x40}, 0x66, 0x6e6bba, 0x1, 0x1, 0x1, 0x1}, {{@in6=@local, 0x4d2, 0x6c}, 0x2, @in6=@remote, 0x3507, 0x7, 0x3, 0x3ff, 0x2, 0x0, 0x1ff}}, 0xe8) write$FUSE_GETXATTR(r1, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x5, {0x9}}, 0x18) 03:51:46 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x34) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5007000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 03:51:46 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x8000, 0x7, 0xe65030efb1b682c1}) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) [ 2564.695754] kauditd_printk_skb: 16 callbacks suppressed [ 2564.695768] audit: type=1804 audit(1547869906.616:2437): pid=11490 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2369/memory.events" dev="sda1" ino=16832 res=1 [ 2564.858656] audit: type=1804 audit(1547869906.786:2438): pid=11490 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2369/memory.events" dev="sda1" ino=16832 res=1 [ 2564.950477] audit: type=1804 audit(1547869906.816:2439): pid=11482 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2369/memory.events" dev="sda1" ino=16832 res=1 03:51:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x540d, 0x709000) 03:51:47 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg$nfc_llcp(r1, &(0x7f0000000040), 0x0, 0x5) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 03:51:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5007100) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x2, 0xf, 0x6, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rds(r1, &(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x7}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) sendto$ax25(r3, &(0x7f0000000100)="7ce2546ffd090b727af31dd6c0bac897befb449a6a1626fa0f0ebfa60acb1ff92e795e8c292cc41be80617518d9d70bee68761c6cd444667fdf8891d7b534beaaf871d37a0d3459536dd2af930fd1ba05d2ea069240a75231b4b1028485b0483135d768ea2e0329c51d785826b3d83900c6ef399a9edd7275b50359032443d100040757f158fd9cb29df6ff60662efd0cc07c57f5ad664d9705442b5", 0x9c, 0x80, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) [ 2565.035366] audit: type=1804 audit(1547869906.826:2440): pid=11490 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2369/memory.events" dev="sda1" ino=16832 res=1 [ 2565.182279] kvm_set_msr_common: 14 callbacks suppressed [ 2565.182293] kvm [11518]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:47 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @mcast2, 0x7}, 0x1c) [ 2565.236305] kvm [11518]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) [ 2565.387786] net_ratelimit: 24 callbacks suppressed [ 2565.387794] protocol 88fb is buggy, dev hsr_slave_0 [ 2565.397950] protocol 88fb is buggy, dev hsr_slave_1 [ 2565.470198] kvm [11536]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:47 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x181000, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000080)='lo\x00', 0x3) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2565.526768] kvm [11536]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2565.579664] audit: type=1804 audit(1547869907.506:2441): pid=11528 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2370/memory.events" dev="sda1" ino=17651 res=1 03:51:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) [ 2565.780022] audit: type=1804 audit(1547869907.706:2442): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2370/memory.events" dev="sda1" ino=17651 res=1 [ 2565.951025] kvm [11551]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2566.003249] kvm [11551]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2566.037987] audit: type=1804 audit(1547869907.966:2443): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2370/memory.events" dev="sda1" ino=17651 res=1 [ 2566.075802] audit: type=1804 audit(1547869907.996:2444): pid=11528 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2370/memory.events" dev="sda1" ino=17651 res=1 03:51:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x540e, 0x709000) 03:51:48 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0xfffffffffffffdd1) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x18002, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:51:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5007200) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 03:51:48 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x100000001) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) listen(r0, 0x80000000) r2 = socket(0x11, 0xf, 0x8) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x20, 0x7f, 0x1, 0x6, 0x7, 0x43e4, 0x20, 0x8c8, 0x400, 0xc90, 0x2}, 0xb) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2566.376951] kvm [11573]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:48 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r1 = getpgrp(0xffffffffffffffff) ptrace$poke(0x4, r1, &(0x7f0000000240), 0x5) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x20, 0x5, 0x7, 0x0, 0x7000000000000000, 0x4000, 0x4, 0x8, 0x1ff, 0x235, 0x100000001, 0x2, 0x7, 0x5, 0x2, 0xde4, 0x0, 0x8001, 0x100000001, 0x2, 0x9, 0x5, 0x10000, 0x10000, 0x26b, 0x100000001, 0x40000000000000, 0x7fffffff, 0xffff, 0x3, 0x8, 0x7fffffff, 0x8001, 0x8c6, 0x0, 0x0, 0x7, 0x5, @perf_config_ext={0x1, 0x8000}, 0x3000, 0x0, 0x7fffffff, 0x0, 0x7, 0x8, 0x7}, r1, 0x8, 0xffffffffffffffff, 0x3) sendmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) sendto$inet6(r0, &(0x7f0000000040)="30b60752a5110180990b54ccbe6dbc6805da53d838c31e6a2971076ae19e9832219db513ce6af1c29563c04aac9fb1b5e313b99a935a6d2a398b52536eafaa01a9cb01a41bfa78b394c857e60ee64240ea2df76496", 0x55, 0x80, &(0x7f00000000c0)={0xa, 0x4e24, 0xa6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100000001}, 0x1c) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x802, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000180)=']cgroupwlan0%vmnet0\'{user{\x00', 0x1b) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=@fragment={0x6a, 0x0, 0xb6ee, 0x3, 0x0, 0x3, 0x68}, 0x8) [ 2566.427817] protocol 88fb is buggy, dev hsr_slave_0 [ 2566.432994] protocol 88fb is buggy, dev hsr_slave_1 [ 2566.438215] protocol 88fb is buggy, dev hsr_slave_0 [ 2566.443297] protocol 88fb is buggy, dev hsr_slave_1 [ 2566.461655] kvm [11573]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) [ 2566.562193] audit: type=1804 audit(1547869908.486:2445): pid=11578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2371/memory.events" dev="sda1" ino=17674 res=1 03:51:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2566.732677] audit: type=1804 audit(1547869908.656:2446): pid=11578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2371/memory.events" dev="sda1" ino=17674 res=1 [ 2566.757866] protocol 88fb is buggy, dev hsr_slave_0 [ 2566.763033] protocol 88fb is buggy, dev hsr_slave_1 [ 2566.768256] protocol 88fb is buggy, dev hsr_slave_0 [ 2566.773359] protocol 88fb is buggy, dev hsr_slave_1 03:51:48 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) fallocate(r0, 0x52, 0xb6d, 0x5) r2 = socket(0x9, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, r3, 0x1}, 0xc) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x2, 0x4, {0xa, 0x4e20, 0x0, @local, 0x5}}}, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}, 0x2}], 0x1, 0x0) 03:51:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x540f, 0x709000) 03:51:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5007400) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) 03:51:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000100)=0x1) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:51:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x6, 0x400400) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000180)={0x3, 0x3, 0x8}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) getsockopt$inet_dccp_buf(r2, 0x21, 0x800cd, &(0x7f00000001c0)=""/176, &(0x7f0000000280)=0xfffffffffffffd70) [ 2567.240159] kvm [11607]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="88285706a6f5b2734c086f0acc1eb44c21eadaf9af584187221b47a7678ebbee8280da5014f471c2925ec7491e29a1bb3d3ddfaa51f609"}], 0x10000000000001a7, &(0x7f0000000100)=[{0x0, 0x10a, 0xffffffff, "e116f6260406cce13e9e8dea3a"}, {0x0, 0x103, 0xff, "56ede4418d25b0742e9bc8827efa181e3f770039630d47a23c643a6a168f60f6dcacc57e"}, {0x0, 0x11f, 0xfffffffffffffffd, "5f9185969127e0f7582d17f7e09cdfdf26e53315524f385061949b2b74513f34992e9a280376727fb86dd9ae23bf7f6827c59a70e1f7b24c7ac55fc70575bc4458b4f780d11542a67fe6be69de1d87067127ace011c0cbf0deee681bb7e90af82d952e6088a1c30a904fb62a8683046c945df22a917e427c104ef8399702b21ff72f4b4234f8a1d911cd97e600fb10f9571547"}]}, 0x2}], 0x3a6, 0x0) [ 2567.331973] kvm [11607]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@v2={0x3, 0x3, 0xa, 0xc00000}, 0xa, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000080)={0x2, 0x7, 0x400, 0x1, 0x0, 0x81}) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x6) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000100)=0x7f) 03:51:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 03:51:49 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9e, 0x1) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x7a2) r2 = dup2(r0, r0) sendto$rxrpc(r2, &(0x7f0000000040)="bdcb4314b86417d095fc0f59762b", 0xe, 0x40000, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x24) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f00000000c0)=""/54, &(0x7f0000000100)=0x36) listen(r0, 0x6) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5410, 0x709000) 03:51:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 03:51:50 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x8e85) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5007a00) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x5, 0xe9, 0x1ff, 0x3, 0xffffffffffff3198, 0x2, 0x8, {0x0, @in6={{0xa, 0x4e20, 0x401, @rand_addr="4802d86dd3a2cd4ee42b1e4ac40813e7", 0x2}}, 0x401, 0x5, 0x100, 0x642, 0x5}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x1, 0x401, 0x40}, 0x10) 03:51:50 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000040)={0x1, 0x0, 0x2080, {0x0, 0x10001, 0x1}, [], "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", "b20660053585493e4783905085eadabe8f68239abeb06a6e503705da563de7ca5ebd0004ce5fb869fd5d6591ff8563841facd9d03ead7af6ee3ae7a1a9df1822d6feaeda3fe74e200c9db01f5cfc21258c8e1eb73371c29e507cc7a9434a9837d6efd6196cf41cb20d099c1bd0c45aa2cda17ef21d52a83bdceaa99d1a12291f5887a1632f26f2ac2c749175a6f09356464150b605154a1e9611d34f958ee565eded462826538c108129567ec648cf70cd3cf77377c4c88acc0667bb0ce559b0b91883cf7ba50941fadaa40d4dcc62fe83ed37c25c31892c9de8268bbf16cc93db88e14bfbac53bc400680d3a960361a77fbf100460b3eaefa45e8acb913249547d6e8485ff3ba0f9d13e2e7e6001a13dbc1ec8b1e05031ef8df37342fa38c5bb62be9f256f35991767377ba5aa4fc01885f42a4556d4adc629541b592cdaa4cf97a578eb010264c04e75d7183362b1b20beafab54c9c217db8359304044090ccd3b99452790f80629d4bed561c804d0aab1880bb327aa22b95d0c706673bfeb18f7d81a07e68d868d32f457c9405c866d1a48a08fb331328a887b90b1800e708278076dd7803e235a91dd989445b6e48c66f1ba08b8f1879aaaa9d981de9fedef790ab525a425b4a5aa8fc650e5dbfbe1550623e12968c617858d2409a7247795f0cc3a63eae79a5479e3e8b32dcc7d9de38e004ff380a38594e44e29d84297b1b97b31f984af47da02eb44d36437765fef0e693d12f7cfac40ab24a14c375c7e11314851c056333fd65fd88ed45eb1ff52bc4e2088b31776fc02e76033987d9a2f071d072f9146075c9d17a865177c0628c54604d7762c23adf17c576841dd2280c3e5319e070a9a6cd4df1b1b039975f0d557f591fe493e2faf15134892638dabb5576b6c91a87f1fee0bf5caf8df98f1c816c782dc7bc175d49d37e16232851cf48888ded43ed03aa7d88dd3a69affa1303bdf9a1f8f9f213b20e22c7c8cd362805dae256bfe9037c6799edc806c8f6e6b2807cddf019f4e48aad97904348383b8364ad3d5953ba8fb33149dfe6ab8e6a7d250ad087eab28c979779892b96be30bb453db0302cddc13aa96f94910d3a92cf3f5c20f7c4d41bdf72a2c14f18fe2be890e4654f2aa514df8f0044aba4ab5d38e7adaecf31b65621fee5a683a39e19db7fb7344f31ef6d0ac47974d10788c2f4d2846de8b8bf008562bccfa5f52ee70243abee714400595d77d717b1c9f0e0be2ea34bc00e9d1a00382a777b9c45fe22c4b4e2375bcb5ea0aba0f4a1bc2d04f0bc4b548f33ec0d581d8a017f159ef807827edcee1631ee657d462fd82f135c748514af6afc1296be81c96df73d698e657cbd7a149645ef79ce9e7fd273e5b6e34855948255b9ca82ded5dc899646788730e95546d3393a611ea3600724ecc2448ea7b065f1db638adb4230e80e3c0537f528ed0631088c05ebe2d7d1f205d9d146d44639ead76b5948935e63889de5e52971b76b427dd080ddd0528f6479505a0b2770d6b78377557a0157ce0ab16ef36786175416dff4e154cbbd8051dc7e1edaa7b17c9880245fa848a2effc9f4bd29d2d88eb98d7635dcba6342594e6157ae37328d9454eb2a3624b4cef92ed0575da24167fcd649a92ed7e059770c81ae03b4fe669a72bf9c4a3e538de54ac9ed573a56fb4f4fdbd87de6f01d1d191e3684509d1af28e559b3dc015401f02b51bf8e65954901b96088603202f5563acf0dbe9ca21df7814740ae57c4a8ad2f3b3d9a01601c8444aa89ef7e53d608a2c7e50f5eb1115e20831ddf34d69868e4354ad27beb9d69ac58ec6805bbe0d2113fc3319721e70854ba9a38b3bb95081a1bb4c3ad843f3d673f053710aa175a7f506651f771c16037087e287e23aac7900cc4f73880d4813746b8af49e7f34c652e93fe381e021693778c5aedf7444e8287c34c8ae7de5a59baddcf3cd9a02a8f6e8b3ebe154dbfb4b6e5f09cf54d13c0dea66f58b2537e5a2e41b3a6f6f18af015fd1388f35836139689889401a9358aa38a977f8f18490426be4e28c6305717a17159e19e2874058320349e0506f0b8a43714337b15af8232d18af3b32df2e0e98052da3593e62bc9a8a2e7ad9f4b446d83b2a0c3fde94631e2e1a2f980d5b22fe788fe80a408919cc813e0ed796500aa5a53ec4cc7433c95f0540f0cf5bbb558ca6f71d6d7bff05adab5c60ce94a6086ac80ababb82ce7de7938a8862f7acf0d541a582fd9f907ea0ddb139a305dc2f6814fb73e550a9a9817119885489789e48b6cb7ae82aff4c2120ae031f63f51ad23cceb4e4f0aa2a9537f22bfe95a1863dea792b4d2b5b5b303711da0623e006487fce62957bb804594b6432c59b6741ae9dde02f69e6f5bf98430b64f1b2f9e38d732add1a282af4fb5536145375a3997e3248fc27a87d63df06e118b2dfa2ea3e9ed2cd270fd7534ed678c3a9fd163387aa3d1cb0645225a51cd7d3560b0856b3b47959f30870ceb726b88f1e675624a8d3a91a6b19d31ae5d81a814e3d7487939ce8a385a1c6196b2715c2cf0b5878ff54258b65bcacf06201b8010d210d64e73ff4cae8912088cb0cb8cb5324096e454922c9934964387cd10d51334eb5fc97657a74b42ea391c98c2ee9a2e325b7f5e000c88c858db8775be820ee2cccd4b6f74855083ef8d12a27b6c104176f24debaeed246a3b54cd2072ac7c7f375dd277c3bd1f239e4bafa141b34fae19e66c68f7eb7899ec40e7e02e9fde3f9b33912126eb4b0a12dbe5ee23b0eb156e18de1b5912ce3ad9fa75fd94c8a62d60d76e6092a274681535b231be09133323e2e28ecb4208cebb6cd43ebdbb5e76adbbca2d05c908b1a82a3e95c03d96e4620f56a4cb7c18016af0a574b2851b4a91ae0bc2862b1537f4091690e9e4ad865dee5e1752b11178b24e65e093c2cb387bf8f8d22df4b2ae7ff7e8b55b4e603ee1a9dc7b16598b1045ac93bb2ba581697919d20e61d20a2e97b571a2fda8e36e56ead7585e62e7d45bb6ba5ba79a85eb38d700bd22cd80bc91b8e1c7658edeca385873438de20150899d386f024a01b649e1ba58a56a70f2e723e758a8d4a4286f0c9e78fac15cb0a13f2960dbe4b92cdd81fb67dbdc3b22426db20069822857dde4ea5d9b0e164a5634fc93f14313e1304055adcf3e0279646e316729925e47b49dc2e78cdfcdd0c4456cc30bc52df33a6b61b1f061bec0d214b839708257c6b85b59a930fc67780ca2ae6e4c1058c5839ae789529c1e9ab1b9a5f8d6f7bd76832892305148a59d0d32f985a17512a8b501d84c4325210fede73ccc6cce619c9cb4729ca3f9fbf8d1d948b53390af11c44de42311b58a121d301efe431d8bf7ccc3a60ca00883a75f4512f24a128cbab7d024a6e397bc0336f2682cb7d38a3a72c8cd4316d9284b8c97d8fc477561eea087cb738f3b6b1359154e04fcb87c424d2d354d843e9e06366ff0f82ebc098f883982f61f450346e9bed8ec4f7612ec875de0fb7364a493fdc9e371837765f42428545ee2ec9106d769d67800028489d37d2b039bf4a83ecd328fa413a51295a4871585a5ab026c1c73e7ae775b7346daa6d3599c69faaa01b9f5e6d84fc1f3fa4a7c7f957b067954f191d21e3726c6de62b6419c21d7f89526b739c07c251e4df18924d3c6b1bbd3bf63b78eb5a9358a978fa38e4bf3dc7cc225f988cb440e5866e27865acaaa3230f6f09f2c97511211af1af9f29b6f502c2a5d0845e671da5d7852c38b53f78b075d6fcd7f898e9a915e87657f5106f529cd2fcee830b06326b9afb37c988a842744d334ba8b442987d03e2cc1a4cb1c0ecd17aa97e21f55b203c971f8e6c36bca711eda1112a60796092e15807195efda4197f86d5614bc4881a03c9f421364bde91480061419e4d976be140e33d1aa310d8d8c201b9ce6b8dd5d06e0be78f61b48a3879b7ce82a143ff0f46015ca4ac45d4c392318850c8d50daf35d78b3c18b3ba5e6800a69ed8e4a7188eabc55dad5085821632195606330f867f9f9a3c67c78de0cb1ec4d9bc10d91504a097750140836f7dbba9e3a1ec4980054c0cc6f134fb967ce091fd69b2101275cd25b646d27ebb194b8ff8ac09a4434cbec468aea7bb7cc842d4eb463808d775de534daaaafb7771e9a04deb81612b9c7805fe568f683fca5020a7baa5073ef433c159828a2a81c4fab9788f7da11498572d69e2dfeb14973575eeb9022cdc9fa336cc7ccf9a5cff2dcbe1309d067679150b505065d0d152110fd31391cb30dcf23fadcd23dbd9be6150e225190bfb1dacf79630f214d5903f4306fca1db5a0f0d121dff52adb8f4824757bb24391e544a48466284312339a41d10ada8d18114da6a8906fb253dd6cef5cbc72c438a0520b29dc683c885859bbcecd43237aa7a28dd676ef66ba186deb46960d1957ec1060db3e9e8eefbcaf002838a7545e5eafff70e7fe61ad3e53dd38c47e632a58d7b4679a8d7a49cf33f126e5a624a406423b7598e66e17cf9ed6122dccf5ddb9d2799260d0e62892c1b1f2be57b25ef77905581c07c89f10a0f5e790e9c1d6dea9ed7e569f1941d4a3a0cda93802d413d4f4c2f2c87af6f72ff521bc63f2e6492df1be64152cb7155981774f718145e6c8a845dec2362bf545d17423fae8c03f9659a81221b57268173a3e86028fbd815695db782016cbe53b2359f273838fae87b43cec411404eca1ee3c1b74e0692266ea945ea7c03b8f99af0e298c8ab9a753610b6679844259e186c4363330e846d423b56ad9f5c8b863e69277aaa02a6b661b73f1cf92ee559546056ac5fe0dc801eaab9f9bdac802d5341ca5898257bbc753c0fc2394583d48bdcab70efffc05153d9f4c92d5abacf0c9618a26ae8cadffe5f1e211c46ad9bbdc71d32b6e5617c349d9a66917ddf45d5fec1172efb2a3c845646b6bc1205d19c0cc82b1eae923a0f551db7e7acae68da32b8e437c4790002b7fbd7e80478b247ea9853ce16a442e62cc6903cca3d5bf6e502f65844b1d77188dbed55622c0f7504d1e847ec8136bbbf1c0c4c9c1c213beb3366013d932f43d33f966d1604f3c8a1eea15315d79d1e48bf9d5e6d3f7b9500135fbec57fa731befaabba4d56c9086e037464f9888db5e4ded943710286eefb915c6e2e2b3065d86b48c274edcaca4566c8550412b3c87eb691c9b12268a0ac1c7ae67e3527c8640c3e2be1e5254b63ef722a19395527fe420ae7771c51ca57a3d8b47904e103f09f7892b2df568bf96a4bd91563f2bd66ce148dbdcd8b4f2728efc835a66789e88683558d47cf475988375d13e6293493d62dd190f842a52854af5dc33c0e8189fdf45b849fee7a498d1a2e77299db75b4561b964fd651369c767b0aab4cbdc0d3ad4f2c6f6587b21ca7d1b48bc412cf3495776466d3b6eee136e06b4d71f0da0280ea169e7562d167eb393437be27c7200c746dd880345e3672dcfb8a7b6b9058a1269d0c3d7930af72b741c310a2b8faa1d0d7aa2b3e14badb20167f3ed273606fa316af3752ad75bba584644958e1c5b6db480c7a000696c9f0050ed8ef69642c8d1177b414b62636a8178a5a3d00d4e8842e3da80152dfcb71ec58f7066de66db4f0c1534be0ebad6e638e7471c599e3fd51e391ebfb274144e80cbc4aafc82c743721722eba5d488d0a5b5c41243e14330d5ba9a1012b2205cd8d05b65435510735465841e509943af1e148fe876522b4f1653ac8493ebf803f85728fcd57c61a866ffbb2d319c7d4c1226e8697774cb51d20bcc573c39"}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = add_key(&(0x7f00000020c0)='rxrpc_s\x00', &(0x7f0000002100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r3 = add_key(&(0x7f00000021c0)='id_resolver\x00', &(0x7f0000002200)={'syz', 0x3}, &(0x7f0000002240)="e8cbbe90d0eedd37354474fb8ee38096c7dca72cb9bd9501507025f4a292067cff7f3a8917b8b333f49f829eaeac444352964d8b2e615d3d5df7ec768769ceb3c983b9749041ef0ac0b4", 0x4a, 0xfffffffffffffffa) keyctl$search(0xa, r2, &(0x7f0000002140)='rxrpc\x00', &(0x7f0000002180)={'syz', 0x2}, r3) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) 03:51:50 executing program 4: r0 = socket$inet6(0xa, 0x8, 0x10000002000003) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x35, &(0x7f0000000040)=""/227, &(0x7f0000000140)=0xe3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x7ff, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8084}, 0x40) 03:51:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x500ff01) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:51 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xc439, 0x40000) ioctl$VT_ACTIVATE(r2, 0x5606, 0x3c90) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r2}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000000080)}, 0x2}], 0x4000000000003be, 0x0) 03:51:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}) 03:51:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5411, 0x709000) 03:51:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000100)=0x6df89828) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000140)={0xb03b, 0x3f}) 03:51:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 03:51:51 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x500ff0f) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 03:51:51 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$pokeuser(0x6, r2, 0x7ff, 0x1) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x101, 0x0, {0x8, 0x1, 0xbff, 0x5}}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 03:51:52 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x5, 0x3f}, 0x8) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2570.320314] kauditd_printk_skb: 13 callbacks suppressed [ 2570.320328] audit: type=1804 audit(1547869912.246:2460): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2375/memory.events" dev="sda1" ino=17745 res=1 [ 2570.400773] kvm_set_msr_common: 12 callbacks suppressed [ 2570.400786] kvm [11754]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2570.450316] kvm [11754]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2570.514956] audit: type=1804 audit(1547869912.436:2461): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2375/memory.events" dev="sda1" ino=17745 res=1 [ 2570.587808] net_ratelimit: 16 callbacks suppressed [ 2570.587817] protocol 88fb is buggy, dev hsr_slave_0 [ 2570.597922] protocol 88fb is buggy, dev hsr_slave_1 [ 2570.603107] protocol 88fb is buggy, dev hsr_slave_0 [ 2570.608252] protocol 88fb is buggy, dev hsr_slave_1 03:51:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) capset(&(0x7f0000000100)={0x0, r1}, &(0x7f0000000140)={0x0, 0xfffffffffffffffc, 0x6, 0x2, 0x1, 0xe0e}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:51:52 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}, 0x2}], 0x1, 0x200000) 03:51:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x6000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5412, 0x709000) 03:51:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) [ 2570.632259] audit: type=1804 audit(1547869912.466:2462): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2375/memory.events" dev="sda1" ino=17745 res=1 [ 2570.714001] audit: type=1804 audit(1547869912.466:2463): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2375/memory.events" dev="sda1" ino=17745 res=1 03:51:52 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r2, r3) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2570.818988] kvm [11772]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2570.847272] kvm [11772]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2570.907818] protocol 88fb is buggy, dev hsr_slave_0 [ 2570.912951] protocol 88fb is buggy, dev hsr_slave_1 [ 2570.918170] protocol 88fb is buggy, dev hsr_slave_0 [ 2570.923247] protocol 88fb is buggy, dev hsr_slave_1 03:51:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 03:51:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2571.128959] audit: type=1804 audit(1547869913.056:2464): pid=11779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2376/memory.events" dev="sda1" ino=18097 res=1 03:51:53 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb4208051}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x190, r3, 0x308, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb0a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff6c7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa26}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6137}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x30ef}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2571.239399] kvm [11789]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2571.292401] kvm [11789]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2571.384081] audit: type=1804 audit(1547869913.306:2465): pid=11781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2376/memory.events" dev="sda1" ino=18097 res=1 [ 2571.407722] protocol 88fb is buggy, dev hsr_slave_0 [ 2571.407775] protocol 88fb is buggy, dev hsr_slave_1 03:51:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 03:51:53 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0x40) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2571.514824] audit: type=1804 audit(1547869913.366:2466): pid=11779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2376/memory.events" dev="sda1" ino=18097 res=1 03:51:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000002290001000000f603000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc91d4553074b127f7f1fb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:51:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x7000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2571.628369] kvm [11803]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2571.657983] audit: type=1804 audit(1547869913.436:2467): pid=11799 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2376/memory.events" dev="sda1" ino=18097 res=1 [ 2571.704726] kvm [11803]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5413, 0x709000) 03:51:53 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x17, &(0x7f0000000040)=0x7fffffff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:51:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 03:51:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x234) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="2600000003388e1d84e6464e0000000000000000000000050000000000000005000000000000ae1e89c6b2eaaf2eb1ed946e8ec43b389b95"], 0x26) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r3, 0x9}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) [ 2572.031380] audit: type=1804 audit(1547869913.956:2468): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2377/memory.events" dev="sda1" ino=17120 res=1 03:51:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 2572.267093] audit: type=1804 audit(1547869914.186:2469): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2377/memory.events" dev="sda1" ino=17120 res=1 03:51:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000000040)=[{0xe8, 0x113, 0x80, "f69506f7f1a0b4c86e65e94310ccbccf246278a62b2a579f7dc157d8cb4d4e41360b00db40af0b6cc6074befc924b70c1288af6d74b1609b895e1d2e4662eeaf1f7ee0b39868c11c13b9dca977dc1479b5018daefc1392de08354183f71b7d6fb7072703e5edf958f813a9dbb7dbd1984e3b5ad42088d2d74c10c80c3c43d3d98a465a901217d5688c346058a603591f99ac9db767acd1787a6305954ac4107c3284f61ca28f69dc1d3520aa202525b7106fa8623d53708fba42be2822d2f3eb029ed7a6600cdaf2c620e723c639a4045d2a1ce476ff"}, {0x1010, 0x0, 0x2, "bd0d8416d6a7297af4037aeed2e56dbe638a3bded182503f49711ad72e1b96d4a56dcd73914750c239ebdd0b69e1a5738647d0e249975964df504d2e3288596ae7acff79d982bfe8b12fc947e854fd02c6867c992fac7bd3332f19a1c59f9e770c83171f81d011ec41639c003240e8cb43897731eade82f2369cec8557048ec89946c480d9a54d1d69c2b958672cf4b4d5cad62b4c13f780fd0596fbc12bc2e0c8427a4c7bca97abdeb5bc987d25b4c3e49123c4d94f7e45bd33718ff7f210634f086f321fd0f1acf4f41cfbfab4498411b9b08e8f735834fa7b91a77afd5bd67d8ebabbd6cccbab73fdedf0962b0c819752de0830dda6ab1d3679b36d025fe537efc284e399610162a7348eb5a551597f4d4513345a8e70c9330325539e5ce414d83a8e7c07ab6cabf11af0431b642148b975f767cef180bfb9f7cd9c9248cbd6f57a88269a3ce2aed480fc4cbc4e0b5597dbb1676df14eaded6864dc63778a51dd21a63de0091916c9f0017b2118e02957b94bd7507182bf8042874b2c5ebfc2d9906f238a934b619c86309623c15decfcbf6aac04fced9b2b199124b47a36ebe0cbb26cfc1f6446045185c5e5e3cff350f1e8c12c2a33353cd2ebdfe01363e26272d65c41119b5976101b06d307891950961e2f3363d0b42a369ff31631b83c18e0b3737d6db02c0d256d5f56cef325b8e88edb5e9ea2f883c5fa2cd9ffe60cddac6e1a48b20f385296d15a715b7f7ee38c7aec906bda7bc5adcad979b5ce8b044462b5c4c46b8dff54ae4579c413f484819ccbd0773b27eeb04313160e4f24e7901c5874a8e346dfa01a93d5374c2901115fff26064d7692212165caa50c19d9aeb15891e8e65128db3a4a4a21db148dbcf2288d1f538a30a11e1d12f6be4df7cb4b932712ab6d9c8cab69f0a0e40692bbda077def739baecab9b8ef8ea80aec7598ed6bedae1d647202e621b640bc677afa5ee7cf529360a61725635cef520b7072b9d2186c96d23d042bc8ab57ed5a945cb5df34483845fb6720949ca0d0ddd16fc37d51cc936e839dcce7ca078312442cc76afd6bb6c209e69922379735a0056458720a7d57b51c431fe09de37730a285be998d6f43a9e18ec46ad5aa88ee16ac4ade3c60cf98c1a87e22fec7873c92d4d60ef8bee61fa7cfaba05042a1af3f5769967ceb3915de466f1f98a5a103efc1f9fe1fc61ac0930e1df3ba6e3cec85f5f8612769f5ab21d6c7b72325595fece20ce601b21a544d2fd9a62e36b44e1b38fad4faca45a521e53981343e78c3ee331984a8d264656a283eb1bc76da811be274445f9d481caa167506fbe340e59ddd06deb99a9b85c84f655eab071ede0db8db6800e51b836221393e4385470c5747c22b54d8edd85988318a876d307ec9b8e6482a95e4bf75928be1f2899d8f477d74c06becf7ad00a751471db5e84ec4b029e6cf446f0848cecb7cf12be82688c79083a63fb92aa0fb2333447f46e906fec7d035e7e553c5e761cbf4eefb1e0d45e0adaef18a0538b4beb0da3adf68ef065143be25cb0b8d06267a9375fb8a3d1bb60839746efe0f0b206e06a4824d720909ab0e5818b091ee7f78723951c9667285643ca22ea375fa507d85af2a9ec1a2a6d0528fb16e0293a99db922ba35ebe709721022b9f5e934fb48d0582509df46a8c167eeb20580fefd75fde678ebe01a087b91d62f693d10e01b1215bdee97f66eefc50bc377bf12998739c095dad13646fabc8b16bda27f342ffd917c1357ea6fd5d6c2757984c279d16f8dffec59d135d6bbc643ae782d821a8afc76132835e8616f88516aafe6c90888da1c63482398f93962a4151f6e32276b443658994199a9f03c12f72fcbc3cf8a32d9db46bbdefb186e2ce1bbe57cfe6cc5cbcc8ed0c3317a41600da2049c89b85e4d2495b7714eaf75e8d4f126285d12c81500ee968dc08591298b422febbd527ed425d330a3971b5101f93f56595423fa276776b050c2c40b3af04bf41c4f440debbd7297b09f8f38ae583eae34f9df5bd1fa8c557e855d4a37983c585493ed715b14cad845c88881ae45139df1b7e33ad2fde0d87c2fe48781514004c704406c74aad0a3dd6fa1df5f11a698b8c7beee0eb013cb0a41c5023038a2dc00686e75556a46716e17a73a28dfa1c2743547490e1acecd15947303e2eec5ed347efecae113f02e13a2fc0b0d19b914447510a6b9291b238c99df55e5073758ad76acb3508da05b6cee82dd156c7f60564b3cbbb0a2932d040890fc2da27446c66e870954134a02912e1e72ef60b5f44bba3ea0ac11d4be9d40931e7d31a3bca21a88faef9ec77f1a34003fbcc9866563303d9968db249a00d87e01a5c7e1a0214e421f1834ad565effb34e1073a50aa5f7892475dbc3c4db6fc55a443c5f6429c86fdae60f15435db8f9cc4947a35cc75a3870bfcd1ed3845320a0324034931663f135033870663db9d2132af74b91814db36a0a364c77742ffe534e62a44f3572ea7923fa981d3e1b637ef81a6c9d24d1c0937e34b1ee32d606593fa8dd9e37721bbf34ee35d748a76aa36d20fea5084693bbb8780a5e1dd8adc082cc2b539c7e35a5818a60611e4924f51288866b88aa0828c6a8780f3142b1f756992ff932c5d83ca70973c803c0cfd4aba5d0f660516bfd1d7d48326400b76fdc9e467efcd3955b03f4356cb7d6a338349d9fd6e40e5ebf5288df61290a701236eb954a34ed621674ae9702961946aae360ac5e9f8d130eeca7057188d941135cb37741935d55d6480a9235138ae4ad2f366288c23b9184dbd4a6a303e34923578b778e1a19d80c9593fec16a9fa5219a71968de73a5e199d79e9c12801c40d0475eb67e0c55a9f277dcdfd170368adac8c10d84815cebc73b04f17a29b659b163472c13111431ca8480df7b6bb57b59f5246cf561aacedbd15c7b2072d2eebf4ad24c6a949b20866891ce7cebfb80dd12865e41a5a6c445695566ba2e34b552db46487d3f61f5d930d19e627d87dd9d7f85ba32e7a0ee75776d7895c77c3b1c2709304745e1b4c110dab5cd5610bc48996b28bf40c7a4e851f18c206962b893f6cf54d4c90c2af4df3e44c50abe8857eb64ceb9571a812b907db9b0b2616744d57a673cc2797682236aa979fa74b307411a7c3fbd2fe01e81dc93076a6a962dfd3f305a24a358023a354c0d7032205edddf0dabf57b241e8b92eff9ae8a14ae87b12b8db2a59774e4acf47c0dc50d580a97f915e6ae9d07aeb42a96cdd5eace90bf139a0b8efb4cc89f3adcf9c67aee3b991391b698203eac71c924ad65c8af5d3e55d33474faf262e7b056bda4158e33f3fa6135db3bd3eb2019117cd12066f75779a5704d3903eeeb294860562436f9a528859948a9e9145fb4cbc2d32bc82b59792154a3943d68d4d2030c71a31d1c1169c4b071ad3c51c6cc83583218d91b5e94f0a2ab2fcd8e580370b2a8c3d11c6d77ef754b98858c502158f02a33f1eadaf7eb16eae501c2dcfdf5bdafac11a1e4d07c43725b4e56a690e97561627ceba8fa497902d02f61e8a810619deddff7fa9d714010a880903047dcb481659f1832825c8216e27ef7fbbc418e19384ab95d9b245ef39451e53bb582001f0ac88f8ea13eeb34032db0d205534518b8ee24c94b374323cca88722cf79018bfbf3a5a48ac53f4761796e9898732f0f8f6fc8c60cd979161ec280fefa30630e845cecea71f6b6efcdb3a0bb018947f7abe92804ec0b025c147408e055530eca17978e25b839a9cb133e79f3cb20814e3d10fc984edadc138f7589e40544d5eb30fdff687c0e5fe0f805ce2043a88ed90f2b6f79903a9776e08912e50231b5780baf2754dab7517b14d9572ac2aee0cdc7a377a51def8bf5606c6f4b62c561f8cbd31ad23c166df8437c290c73e70a31b9fbe814684b111deb3210fe0901732a21e49f5ccf668d6b1577bee4f5529b3cd940f3e6ebd977034272ecb1bc6eb2e55e1db5108a6d9dd575b7bc8ea5bff6c3164bd30bbe5e5ecb5294fa43d96fbddb36a61d55136feaab2606ddc3304fab31ead9d2a34070306365ed0c4e8246fd33be1720e443cf8f109af37f857af7f560569ee4e5f0589553e77c77cb51cf5f32b64ca84b9ef789fd98dd0343bd5f2989b8432091c77ec1c9f9bfb03318789649ed8a4f526b735fc715e26d3a3ac2e8fb6964f1e9c9b1d99bb4d335d731b089af300682e92f0087d07adf744c3d7287d9aef5544fea64000b5439391be695820c95e2fce0c662832022c941414e7f370505e7e484a6ec980b34a532e59fcc29130ad54a7d050ae630eb799a146ecbaa470b3e42173c34b225e091d7e04df57ccf2ec42bebc202c46c15155fdaa77a1e6f070ff2859cddefe923dc6e4d782b21693001e4dd4527613efab48d92544b0dabbb2e90bac65380832bc63725afe4c100c0f30c550fc29712d25de8c8901050357e6774cc18a2b32372803f35178b16f038d61d8614eb9ca871985e7d2e96e80810eb05e372e21b56a6200fd2bccedb157d5de7bb56f6c62343684848a6378825a9b6405c3bd4996e9996e1576aadc17d48464f63e08091a74f659e376089b83598680b6ee4216cac4483bfd99f3c4caf613d1b1c79843f1339ce2cf44c67d3bf1d828b4bbb928602a5bcbd4696245a6802f5405082f6cd901102d5769e1e95283e7a4eeab7ac81d6b9fe6e9c461433a5e622831cde9dbfd6ff47bc9a8f2ec33472966939db5df824c87450c2900972da3221d22eabfac633554cd8d234725ceb6528165d1856454c610ba28693d7752f805a8b502153ce95fadaab2c783b11aa51b4d9f83e86d5d995bf1f953752f5be532377ff39a67838db3f1ee4e50e4e2d3c0be1dbe463b6ef4d7bec27ecec621ebe3e3029536d8d415d83f3301267f0c5ff4001383b976a2c005fb6da8fa36b364cdaaa842bbaf53462092c5c5f601e180c2d2c4fcc85e48923b730e006cfcc7e7230a39a667e1f057947c77d28b8c5f4e291ded28b4b5e38d2e9f1357cd2b1c1396cd4e6cf1b699bf502e6e8097f1fc3ccf4ef1a126c82827356ea173717cdd52ec1537dfb3f7cfca62e4a9c1eddfde2ab4a726d80de9904103853a320012b59277f873fac5e8e2afe09c59f31d71e88b226a6791b44060ae89832789e5d9567c0bf951b67fe8720c5fb2011523e2e705dc261b794e379bf37d2cae921f50a406e7da0abfaf2e2eaeee599b71f45c20cbe45b914dd199fac05398c870016778e2f20d9270345a2a1a3cb0e4072ea882d4d4ef9068cd3e0a90784a99314e368b1b8fb95110ac2ba3c89f91856eaefe8e99db196b326deee67b4913e43d7665046fe19b3413b593e662172345f86eed7dd598824268c71d4c525791a843c03de3352ca5d35d9516e91911b32a77cf5085b7789c900cb6889f332d66a5195cafc681a1c68cfaaa403d1e8119e4a90ff5d563d3a20479f67dbb1806607e9d85b7d5f1fc656ebf1bfe1c2d23d2ca01b03c048eba2bb42c2226123d7ab405bb38c3f217df287297fd8e4170dbe1ed0973385c3e21f9a4cc7e9c5412f2497662595e414a2e0ef404544ca78f6f46d4a17e5298ce6d7b78c09e317ab6f3fb839b08210042e9074650fa35cf4e8ee0bb1096cf1dca6457df18d589203ad46519227e81a1877c8af1a5a5b79eb83b2b121de368dca7692e3d397d0ac5ffb998e5fa9e09e3c0d15b0c059af07b996c376235225939c42efe597b4f2487bd20daa214be90d860b99b1878409c3224918a93cec2cc9dd83640288cd338d7ee15"}], 0x10f8}, 0x2}], 0x1, 0x0) 03:51:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x8000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) r2 = accept4(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4) 03:51:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2572.459402] kvm [11850]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2572.525634] kvm [11850]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5414, 0x709000) 03:51:54 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x400001) getsockopt$ax25_int(r2, 0x101, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 03:51:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:54 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x21, 0x400000) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x9, 0x7, 0x400, 0x7}, {0x8b, 0x3, 0x3f, 0x10001}, {0x3, 0x1, 0x9, 0x75}, {0x0, 0x7f, 0x0, 0x800}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000240)={0x0, 0x5, 0x8, 0x62, 0x4, 0x3}) migrate_pages(r3, 0x1000000000000000, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x6) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:51:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0xa000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:55 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) getsockopt$sock_int(r0, 0x1, 0x3b, &(0x7f00000001c0), &(0x7f0000000200)=0x4) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8a300, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000000c0)=""/198) rmdir(&(0x7f0000000040)='./file0\x00') 03:51:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 03:51:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5415, 0x709000) 03:51:55 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x3, 0x2) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 03:51:55 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x400000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x400600, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) getpgrp(r3) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:55 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0xfffffe2b) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x200000) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x7f86298fefdcc0aa}, 0xc) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0xb000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") prctl$PR_GET_SECCOMP(0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000290001000000000400000000030000000800317ad409988525b596131ec41369b049b000be80c9ecdf2086ec6af981935cfc6af5fc364dfb59ff5f3d26406f83fbde79f01de1fcecb500000000000000000000000000af5997ab8a59910da43bc19eb5caa3154c3eb15ff5c86b94e087ca1ab1123d06a53ccf5574bd5e2c144f26f7849e6518431bd6f18ef996e1f7da7b96879ba4b46b934c4dedeb06b9"], 0x1}}, 0x0) 03:51:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 03:51:55 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1b}, 0x2}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x109100) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81c280}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210d2cbd7000fedbdf250f000000080004003c54c67808000400010000002c000300080004000700000008000500e000000208000500e000000208000500ffffffff080007004e23000017d6c6a914cc3a3054216b34c32cb5abcefbeb4a7f62752216386fe88388028c56dfe9a777d8f661541ea8d320ef534a1e2a4445f5b65c64c16f5e14b849bd3f48a93c8e1e452d658f7ec4fcc045da630d5123d4c87a0c243ba20a74a48b3e192fe5c4dc8e407069161dbcb538dc0dff3db6f99d7dfe"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x4) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000080)={0x0, @motion_det}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) 03:51:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) 03:51:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5416, 0x709000) 03:51:56 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x271, &(0x7f0000003bc0)}, 0x2}], 0x3a6, 0x0) accept4$unix(r0, &(0x7f0000000080), &(0x7f0000000140)=0x6e, 0x80000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x100000010080, 0x0) 03:51:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) 03:51:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 03:51:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xfc', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0xc000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400400, 0x140) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000014c0)=[&(0x7f0000000180)='(\x00', &(0x7f00000001c0)='\x00', &(0x7f0000001480)='\x00'], &(0x7f0000001800)=[&(0x7f0000001540)='\x00', &(0x7f0000001580)='\x00', &(0x7f00000015c0)='\x00', &(0x7f0000001600)='\x00', &(0x7f0000001640)='procmd5sumcgroup\x00', &(0x7f0000001700)='+!self\\wlan0posix_acl_access]vboxnet1[(bdev%\x00', &(0x7f0000001740)=']procmime_typesecurity+&\x00', &(0x7f0000001780)='md5sum&\xc7\'\\\x00', &(0x7f00000017c0)='\x00'], 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000400)}, 0x3ff}], 0x1, 0x40010141, 0x0) nanosleep(&(0x7f0000001880)={0x77359400}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b727a4ab61485807104f80ee47331e03f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3c0f9e11501229ba9e4613cdb5f1cf745c3bbe52b8d4663cc7b87e834d86981c2c4e5d3a612cc3d3c8a591998aa2efd90c946641b1e8b8b6033f0bc7ae82fee12d69881ce725fdeedf47f9cb3fb18d83478271c9faf0f7978143e5ce9d1f1d5aa961e4cc0aa08250433b0951b2ce144756d429e0050000003aec1434c40ea9b1ff37c3b9b19e440a87b5975c22ba3afb9b0c3dc74ae4589f54"], 0x1}}, 0x0) 03:51:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}) 03:51:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xfd', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, 0x0) 03:51:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) [ 2575.404149] kauditd_printk_skb: 13 callbacks suppressed [ 2575.404163] audit: type=1804 audit(1547869917.326:2483): pid=11993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2381/memory.events" dev="sda1" ino=18098 res=1 03:51:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5418, 0x709000) 03:51:57 executing program 4: socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) clock_gettime(0x400000000004, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000440)="a3", 0x1}], 0x1, 0x0) 03:51:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x7f', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) [ 2575.618199] audit: type=1804 audit(1547869917.546:2484): pid=11993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2381/memory.events" dev="sda1" ino=18098 res=1 03:51:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0xd000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2575.691735] audit: type=1804 audit(1547869917.576:2485): pid=11983 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2381/memory.events" dev="sda1" ino=18098 res=1 [ 2575.694321] kvm_set_msr_common: 16 callbacks suppressed [ 2575.694333] kvm [12021]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2575.764716] audit: type=1804 audit(1547869917.576:2486): pid=11993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2381/memory.events" dev="sda1" ino=18098 res=1 [ 2575.788863] net_ratelimit: 24 callbacks suppressed [ 2575.788870] protocol 88fb is buggy, dev hsr_slave_0 [ 2575.798985] protocol 88fb is buggy, dev hsr_slave_1 [ 2575.882022] kvm [12021]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) 03:51:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") memfd_create(&(0x7f00000000c0)='\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000140)=@can={0x1d, r2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="dc58011dcf3af178e2e49a810d7b36d3110e0e9543abf79d7489a0067356d862fb8dda372ae646801a2742534de76abd5ffaf4f9987956cd3f58374c44593608ee91968c10cad6c8c06d8638bc1c8e253017f0089f24b6c8e8ad7dc67212aa32b09be6", 0x63}, {&(0x7f0000000240)="c9511108bd7d60ab946cc8d20f840ade09f0657c8fa4374832d31b82d010dd61eabc9312267cc45598bed1e49f49a3165a5aebd2fd4a97496286b5e837c426401bfb410bdcab0874c77815a17a787f0261b16181fcdead96854835e6d55700992f5a05968596a5c61f47a670c0614a0acbcb0a39c7b6900b9961f1d1aaaad93207bd18127fbd32824b073de893703c068c796d868e76553f453628cc498e7dcbfbe5c8b19ca9a14be093e9faa7d5fada6399d4904cc18270b74572225e21befe493db0423f91d5e7b313204d46ae9e66adfffe9e74c9ec6a13b8", 0xda}, {&(0x7f0000000340)="20bc6b42fb5fd9e3d93b1e65ca6e30427e45c7cd15d2871c08379e4af7ad4dff15068d04fec1b4ed2f53f5592da37a95d6686d5b0d37e0a5dc9bbb54f65194dcb0075a2245f9b62f5eb87e9e07fcfc185131919bd6d1c8d6352575", 0x5b}], 0x3, &(0x7f0000000480)=[{0x58, 0x10e, 0x9, "f5b78492e46ec47d331c1dc5941bb26604dd28071d04a612c6644c1a28caf8267f49adc4c9d077fd757522699fee9c9103a4ddacf611ba67abad0d9ad42a84201d6f8aa97e5c69f3"}, {0x100, 0x12b, 0x3, "f4a0c8ccbf2855fda8d5077584be14e7600a6a2e7f14e283d6aa0d189e6c56b8df8151072548b20a870e2bc442c3efae15dcc042717f9a542823b5cbef153b753312600bfbd227cd91e61a2012af7b7f6a843f9e8002bc889d93e87227f48e814223704d12b93640b0fa6c092a836d725b05bbe242c0fd2a798862ba60852c5754bb7eb2c0bdaeee75357a34f3c30578b4f0468d742a5e28619e300374b8ee878d989289291c075a5c4457019351b39b86e772933662457787be6f0f67c92fc59509aaee09f6e716a62370e36588bd73e5d6b697d042550a8d4788cab791df97e552480e52d70c263300c2"}, {0xc8, 0x102, 0x3, "4fc468f4c0fd826ab5b9ed303345a1b892f6a72af8d5bea2247fcb4e00961b404bc189065f2ad1e6221b435c1c47dfc12f18433d886c2fa4bd658b9e5e4f41b35230137d14c0d5e2554d5c50a0e6876a1ba486586c3ba273fd716143b31ca6d048025ea13b1774907551f4b2a837cece1c4cfda2504f2f911372d5226b3cca4547ec1cd01540462d8b9a3bb3e57e64dda1410a3bdbbbc7f49047384078a2012c50276aaeed14a943205dd7bd944e4c6649"}, {0xd0, 0x116, 0xffff, "f6bddb11cef0ea1d2ce3615f38329caa48d3e68899c36643393cab9f635d235c690f9f81567752f44e87c94d7e20ddb3c579b3679e2b649b044477e7823630e694e16a993fe472e2f7fbd7f7333e5045ed528d983ffe6279e708f239ef489d5bf4b178bed5578bc2dd5fda9bcb2b9dd0f4135c7f8c65e954ff85a91b93e7e413d319bc55e398b831d91970d4816a5b9d58c6fbefc1ec043e0135de446dfecbb8ba93523df54b5b513a6457ad78d35c55e47be865f89d000776"}], 0x2f0}, 0x24000881) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x1}}, 0x0) 03:51:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x8c', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2576.155110] kvm [12042]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2576.163502] audit: type=1804 audit(1547869918.076:2487): pid=12038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2382/memory.events" dev="sda1" ino=17746 res=1 [ 2576.227646] kvm [12042]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) 03:51:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xeb', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2576.395416] audit: type=1804 audit(1547869918.316:2488): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2382/memory.events" dev="sda1" ino=17746 res=1 [ 2576.489671] audit: type=1804 audit(1547869918.366:2489): pid=12038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2382/memory.events" dev="sda1" ino=17746 res=1 03:51:58 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x1}, 0x28, 0x2) syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2576.571107] kvm [12056]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0xf000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2576.642379] kvm [12056]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2576.646995] audit: type=1804 audit(1547869918.506:2490): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2382/memory.events" dev="sda1" ino=17746 res=1 03:51:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541d, 0x709000) 03:51:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 03:51:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xf6', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2576.827856] protocol 88fb is buggy, dev hsr_slave_0 [ 2576.833096] protocol 88fb is buggy, dev hsr_slave_1 [ 2576.838358] protocol 88fb is buggy, dev hsr_slave_0 [ 2576.843450] protocol 88fb is buggy, dev hsr_slave_1 [ 2576.911504] kvm [12074]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2576.964952] kvm [12074]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) accept4$x25(0xffffffffffffff9c, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x800) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) flock(r0, 0x4) [ 2577.057054] audit: type=1804 audit(1547869918.976:2491): pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2383/memory.events" dev="sda1" ino=17746 res=1 [ 2577.147819] protocol 88fb is buggy, dev hsr_slave_0 [ 2577.153031] protocol 88fb is buggy, dev hsr_slave_1 [ 2577.158252] protocol 88fb is buggy, dev hsr_slave_0 [ 2577.163332] protocol 88fb is buggy, dev hsr_slave_1 03:51:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 03:51:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2577.324180] kvm [12091]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2577.355191] audit: type=1804 audit(1547869919.276:2492): pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2383/memory.events" dev="sda1" ino=17746 res=1 03:51:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0xffffff62) write$FUSE_ENTRY(r1, &(0x7f0000001040)={0x90, 0x0, 0x2, {0x20000000007}}, 0x90) [ 2577.422338] kvm [12091]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:51:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x10000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:51:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) [ 2577.572951] CUSE: DEVNAME unspecified [ 2577.600127] CUSE: DEVNAME unspecified 03:51:59 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 03:51:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541e, 0x709000) 03:51:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 03:51:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:51:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nr0\x00', 0x109}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 03:52:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x100000001, 0x1ff, 0x820d, 0x5, 0x4, 0x4000000000000000, 0x3, 0x401, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x55c, 0x8, 0x8, 0x0, 0x9}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000001c0)={r3, 0x6, 0x1, 0x800000, 0x6, 0x81, 0x5, 0x4, {r4, @in={{0x2, 0x4e23, @loopback}}, 0x100000001, 0xeaaa, 0x7fffffff, 0xa3ad, 0x7fffffff}}, &(0x7f0000000280)=0xb0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[]}, 0x1, 0x0, 0x0, 0x804}, 0x0) 03:52:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 03:52:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x20000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}) 03:52:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541f, 0x709000) 03:52:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406fbb57662d911e640d3fb5"], 0x1}}, 0x0) 03:52:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) r3 = syz_open_pts(r0, 0x0) dup2(r2, r3) 03:52:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) 03:52:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x3f000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:01 executing program 4: lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.sockprotoname\x00', &(0x7f0000000140)='\x00', 0x1, 0x3) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) memfd_create(0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) write$input_event(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x124) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) rmdir(&(0x7f0000000180)='./file0\x00') r1 = open(&(0x7f0000000840)='./file0\x00', 0x141042, 0x0) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) sendto$inet(r2, 0x0, 0x20f, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) sendfile(r1, r1, &(0x7f0000000080), 0x10001) sendfile(r2, r1, &(0x7f0000000140), 0xa199) 03:52:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) 03:52:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5420, 0x709000) 03:52:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000100)={0x2, 0x1}) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$FICLONE(r0, 0x40049409, r1) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3000002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x294, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}]}, @TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4157, @dev={0xfe, 0x80, [], 0x15}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3aa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_BEARER={0xf8, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4d}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x40000, @dev={0xfe, 0x80, [], 0x17}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7e99}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xec8c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x294}}, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 03:52:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2580.557129] kauditd_printk_skb: 11 callbacks suppressed [ 2580.557143] audit: type=1804 audit(1547869922.476:2504): pid=12182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2386/memory.events" dev="sda1" ino=17746 res=1 [ 2580.715070] audit: type=1804 audit(1547869922.566:2505): pid=12185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2386/memory.events" dev="sda1" ino=17746 res=1 03:52:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x40000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) bind(r1, &(0x7f0000670000)=@generic={0x1e, "01fd000000000000000004000000fc00000005a121b80c00000000800000002e0a53b232394a0000000100000000ffff0f82e52b0a669ae43a620170a00021f069ca021f6f65dc1161e7068f358c00f9ecff1458d1ea03000030ffff000000090003b9c8ead200c577aeb81c90541d6d7c770ee590c8bcf70dc151eb1849"}, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) [ 2580.839782] audit: type=1804 audit(1547869922.606:2506): pid=12211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2386/memory.events" dev="sda1" ino=17746 res=1 03:52:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}) [ 2580.987842] net_ratelimit: 16 callbacks suppressed [ 2580.987854] protocol 88fb is buggy, dev hsr_slave_0 [ 2580.998143] protocol 88fb is buggy, dev hsr_slave_1 [ 2581.003512] protocol 88fb is buggy, dev hsr_slave_0 [ 2581.008654] protocol 88fb is buggy, dev hsr_slave_1 03:52:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2581.164882] kvm_set_msr_common: 12 callbacks suppressed [ 2581.164895] kvm [12231]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2581.227293] kvm [12231]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2581.307831] protocol 88fb is buggy, dev hsr_slave_0 [ 2581.313066] protocol 88fb is buggy, dev hsr_slave_1 [ 2581.318284] protocol 88fb is buggy, dev hsr_slave_0 [ 2581.323358] protocol 88fb is buggy, dev hsr_slave_1 [ 2581.357573] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 03:52:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5421, 0x709000) 03:52:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) [ 2581.427049] audit: type=1804 audit(1547869923.346:2507): pid=12227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2387/memory.events" dev="sda1" ino=17745 res=1 [ 2581.475718] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 03:52:03 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000180)={0x9, @remote}, 0x12) 03:52:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2581.654242] kvm [12246]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2581.664647] audit: type=1804 audit(1547869923.586:2508): pid=12222 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2387/memory.events" dev="sda1" ino=17745 res=1 [ 2581.750232] audit: type=1804 audit(1547869923.616:2509): pid=12227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2387/memory.events" dev="sda1" ino=17745 res=1 [ 2581.787807] protocol 88fb is buggy, dev hsr_slave_0 [ 2581.793073] protocol 88fb is buggy, dev hsr_slave_1 03:52:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000000000000800, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x18) 03:52:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x44000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x400400) r3 = syz_init_net_socket$ax25(0x3, 0x7, 0xcb) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x60, 0x0, 0x3}}, 0x14) r4 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x80400) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000200)={{0x6, 0x7, 0x4, 0xab7, 'syz0\x00', 0x33fe}, 0x1, 0x30, 0xa8, r5, 0x0, 0x1, 'syz1\x00', &(0x7f00000001c0), 0x0, [], [0xff, 0x1000, 0x2, 0x20]}) [ 2581.876873] audit: type=1804 audit(1547869923.756:2510): pid=12227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2387/memory.events" dev="sda1" ino=17745 res=1 [ 2581.950374] kvm [12246]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:04 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xfff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) shutdown(r0, 0x400000000000001) 03:52:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) [ 2582.326764] kvm [12276]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:04 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000001740), 0x0}, 0x18) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xfff) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x802, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)=0x9) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x100) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0xfffffffffffffff9) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000600)}, 0x24000001) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) [ 2582.390620] kvm [12276]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5422, 0x709000) [ 2582.493072] audit: type=1804 audit(1547869924.416:2511): pid=12275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2388/memory.events" dev="sda1" ino=17105 res=1 03:52:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) [ 2582.689787] audit: type=1804 audit(1547869924.616:2512): pid=12275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2388/memory.events" dev="sda1" ino=17105 res=1 [ 2582.781848] audit: type=1804 audit(1547869924.656:2513): pid=12272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2388/memory.events" dev="sda1" ino=17105 res=1 03:52:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000290001000000000400229c7b778e9f4991a3bf980000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5a317b90f59fff6b9663dbaa3012f4c010023d75f3d2640"], 0x1}}, 0x0) [ 2582.893750] kvm [12297]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x76060000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2582.971944] kvm [12297]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:04 executing program 4: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) 03:52:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) 03:52:05 executing program 4: ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2000042003d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0}, 0x2c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@remote, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xffffff7f7ffffffd}]}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) seccomp(0x1, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) setresuid(0x0, 0x0, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101800, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, &(0x7f0000000000)) [ 2583.365471] kvm [12324]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2583.432981] kvm [12324]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 03:52:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5423, 0x709000) 03:52:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 03:52:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x8c060000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:05 executing program 0: sched_setparam(0x0, &(0x7f00000002c0)=0x1f5) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000000040)=0x8) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1, @local, 0xda}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000280)=0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 03:52:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = semget$private(0x0, 0x1, 0x8) semtimedop(r2, &(0x7f00000000c0)=[{0x0, 0x738d, 0x800}, {0x3, 0x8, 0x1000}, {0x0, 0x4, 0x800}, {0x0, 0x7, 0x800}, {0x0, 0x4, 0x800}, {0x2, 0x8, 0xfc2daf7076b56adc}, {0x1, 0x8, 0x800}, {0x7, 0x7f}], 0x8, &(0x7f0000000100)={0x0, 0x1c9c380}) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 03:52:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5424, 0x709000) 03:52:06 executing program 4: ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x0, 0x2000042003d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0}, 0x2c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@remote, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xffffff7f7ffffffd}]}) seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) seccomp(0x1, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) setresuid(0x0, 0x0, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101800, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, &(0x7f0000000000)) 03:52:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 03:52:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0xc8050000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 03:52:07 executing program 0: pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000340)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', r0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x7f, @broadcast, 0x4e24, 0x0, 'rr\x00', 0x4, 0x404, 0x74}, 0x2c) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000180)={0x10, 0x1b4, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e20, 0x6, @mcast1, 0x4}, r3}}, 0x38) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000001c0)=""/173, &(0x7f0000000000)=0xad) 03:52:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) [ 2585.334966] IPVS: set_ctl: invalid protocol: 127 255.255.255.255:20004 03:52:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5425, 0x709000) 03:52:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0xd}, 0x0) [ 2585.600808] kauditd_printk_skb: 10 callbacks suppressed [ 2585.600821] audit: type=1804 audit(1547869927.526:2524): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2391/memory.events" dev="sda1" ino=16593 res=1 03:52:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) [ 2585.753466] audit: type=1804 audit(1547869927.526:2525): pid=12394 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2391/memory.events" dev="sda1" ino=16593 res=1 03:52:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0xd2050000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:07 executing program 4: unshare(0x2000400) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) [ 2585.885875] audit: type=1804 audit(1547869927.646:2526): pid=12418 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2391/memory.events" dev="sda1" ino=16593 res=1 03:52:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 03:52:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$unix(0x1, 0x801, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) [ 2586.073376] IPVS: set_ctl: invalid protocol: 127 255.255.255.255:20004 03:52:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000400)={0x0, 0x8, 0x3}) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000540)={0x0, 0x1, 0xb8c1112, [], &(0x7f0000000500)=0x4}) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="70010000", @ANYRES16=r3, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040000) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000004c0)={0xff, 0x10001, 0x81, 0x20, 0x7fff, 0x2, 0x3, 0x81, 0x8418, 0x2, 0x3}, 0xffffff00) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x80000001, 0x7, 0xfff, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000480)={0x1, 0x35}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000029000100c1ffffffffffffff0300000008000900c9238c2e000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1"], 0x1}}, 0x0) 03:52:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2586.187808] net_ratelimit: 24 callbacks suppressed [ 2586.187816] protocol 88fb is buggy, dev hsr_slave_0 [ 2586.191511] kvm_set_msr_common: 12 callbacks suppressed [ 2586.191524] kvm [12441]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2586.192859] protocol 88fb is buggy, dev hsr_slave_1 [ 2586.296059] kvm [12441]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2586.451845] audit: type=1804 audit(1547869928.376:2527): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2392/memory.events" dev="sda1" ino=16594 res=1 03:52:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 03:52:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = shmget(0x3, 0x1000, 0x204, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5427, 0x709000) 03:52:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$unix(0x1, 0x801, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 03:52:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2586.643639] kvm [12463]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2586.674056] audit: type=1804 audit(1547869928.596:2528): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2392/memory.events" dev="sda1" ino=16594 res=1 [ 2586.737318] audit: type=1804 audit(1547869928.616:2529): pid=12434 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2392/memory.events" dev="sda1" ino=16594 res=1 03:52:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0xdd050000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2586.856672] audit: type=1804 audit(1547869928.626:2530): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2392/memory.events" dev="sda1" ino=16594 res=1 [ 2586.865832] kvm [12463]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$unix(0x1, 0x801, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 03:52:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 03:52:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2587.222278] kvm [12490]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2587.227823] protocol 88fb is buggy, dev hsr_slave_0 [ 2587.235681] protocol 88fb is buggy, dev hsr_slave_1 [ 2587.240938] protocol 88fb is buggy, dev hsr_slave_0 [ 2587.246043] protocol 88fb is buggy, dev hsr_slave_1 [ 2587.302413] kvm [12490]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) [ 2587.432686] audit: type=1804 audit(1547869929.356:2531): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2393/memory.events" dev="sda1" ino=16881 res=1 03:52:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r0, r0, 0x80000) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) [ 2587.547788] protocol 88fb is buggy, dev hsr_slave_0 [ 2587.552993] protocol 88fb is buggy, dev hsr_slave_1 [ 2587.558212] protocol 88fb is buggy, dev hsr_slave_0 [ 2587.563307] protocol 88fb is buggy, dev hsr_slave_1 03:52:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$unix(0x1, 0x801, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) [ 2587.644911] kvm [12500]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5428, 0x709000) [ 2587.704444] audit: type=1804 audit(1547869929.626:2532): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2393/memory.events" dev="sda1" ino=16881 res=1 [ 2587.785019] audit: type=1804 audit(1547869929.686:2533): pid=12480 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2393/memory.events" dev="sda1" ino=16881 res=1 [ 2587.874442] kvm [12500]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0xfd1f0000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) [ 2588.128177] binder: 12524:12526 ERROR: BC_REGISTER_LOOPER called without request [ 2588.163877] binder: 12524:12526 unknown command 0 [ 2588.180441] binder: 12524:12526 ioctl c0306201 200002c0 returned -22 [ 2588.218487] kvm [12527]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2588.288173] kvm [12527]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2588.291362] binder: undelivered TRANSACTION_COMPLETE [ 2588.322472] binder: undelivered TRANSACTION_COMPLETE [ 2588.352260] binder: undelivered transaction 1160, process died. [ 2588.407898] binder: 12536:12538 ERROR: BC_REGISTER_LOOPER called without request [ 2588.442146] binder: 12536:12538 unknown command 0 03:52:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) [ 2588.452884] binder: 12536:12538 ioctl c0306201 200002c0 returned -22 03:52:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c121e1188a070") epoll_create1(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) getpeername$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000180)=0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000100)=0x1) 03:52:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2588.609034] binder: undelivered TRANSACTION_COMPLETE [ 2588.614282] binder: undelivered transaction 1163, process died. [ 2588.647990] binder: undelivered TRANSACTION_COMPLETE [ 2588.716086] binder: 12549:12553 ERROR: BC_REGISTER_LOOPER called without request [ 2588.753859] binder: 12549:12553 unknown command 0 03:52:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5429, 0x709000) [ 2588.771629] binder: 12549:12553 ioctl c0306201 200002c0 returned -22 03:52:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2588.873983] binder: undelivered TRANSACTION_COMPLETE [ 2588.879510] binder: undelivered transaction 1166, process died. [ 2588.906899] binder: undelivered TRANSACTION_COMPLETE 03:52:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000001c0)=0x2, 0x4) 03:52:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) [ 2588.970842] binder: 12563:12566 ERROR: BC_REGISTER_LOOPER called without request [ 2588.995092] binder: 12563:12566 unknown command 0 03:52:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2589.030182] binder: 12563:12566 ioctl c0306201 200002c0 returned -22 03:52:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2589.121758] binder: undelivered TRANSACTION_COMPLETE [ 2589.126929] binder: undelivered transaction 1169, process died. [ 2589.160661] binder: undelivered TRANSACTION_COMPLETE [ 2589.241542] binder: 12577:12580 ERROR: BC_REGISTER_LOOPER called without request [ 2589.273120] binder: 12577:12580 unknown command 0 03:52:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}) [ 2589.292817] binder: 12577:12580 ioctl c0306201 200002c0 returned -22 03:52:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2589.386153] binder: undelivered TRANSACTION_COMPLETE [ 2589.391533] binder: undelivered transaction 1172, process died. [ 2589.425174] binder: undelivered TRANSACTION_COMPLETE 03:52:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000029001400000000040000000003000000882f0900c9000000e4464db391110b723f317af0099880c9ecdf2086ec6af981935cfc6afb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb53aff2e8483d646578185acc9efbf3805735ed25812a03c2bbad0b468aa346f356e81cb98106129710ed014103dc4e83c090aa2061cdd5e3a2bd6862b45610494f25b53c0aa71acfcc53ac82e03ac073e"], 0x1}}, 0x0) [ 2589.516415] binder: 12585:12592 ERROR: BC_REGISTER_LOOPER called without request [ 2589.547913] binder: 12585:12592 unknown command 0 [ 2589.565271] binder: 12585:12592 ioctl c0306201 200002c0 returned -22 03:52:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2589.662338] binder: undelivered transaction 1175, process died. [ 2589.752641] binder: 12599:12600 ERROR: BC_REGISTER_LOOPER called without request [ 2589.781774] binder: 12599:12600 unknown command 0 [ 2589.804022] binder: 12599:12600 ioctl c0306201 200002c0 returned -22 03:52:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5437, 0x709000) 03:52:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x400001, 0x0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x4) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='cxuacct.usager\xef\x9d\x19\xd1\xd7w$user\x00', 0x26e1, 0x0) accept(r2, &(0x7f0000000400)=@alg, &(0x7f0000000480)=0x80) r5 = openat$cgroup_ro(r2, &(0x7f0000000580)='\x95eY\x00\x00\x00\x00\x00\x00,C\xe3A\xf6\xb88\xaf\x89T\xc0\xb7u\x8f#\x81\x00\x1bcm\xf7\x16qct.us\xb5]\x1a\x1f\xbci\x1c7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd61\x83\x12l\xf6\v4\"\xf0\x8bt\x18\xf7}\xe2\x9d\f\xe6\xb5\xfbv\x89\xe5/L\xa6:\x10\xe0O\x93[\x1b\xd8\xd0s\x0e\x99u\x1f\x81!\x04\x9b\x1b\x8e!$0\x85\xd2\b\xc6ev\x06\x97\x01\xae\xcd\xee\xd1!\x92r\x9d\x87y\x96\xf9\b\xd0\xfdG\x9b8z@\xb5\xb8\x03\xd3\xad\'\xbf\xa4v{\xf9\xc4.5\xe2\xe8m\xe8\x90\xf9W\xa9\x83\x19\x1c\xf1;\x00C\xac\x16\x16\xfe\xf0\xaf%M\x90\x87;\xee\xd7\xde|\xc7M\xed\xc2|\x16\xdf`\a\x9e\x1dC\xdd\xd0\xb59\xd9\xa4\x15b78\xed[\xe4bY\xf9b\r\xa0\xd1\x11\x05.n\xa9Vc\a\xb5*\xefx\xbe6,\x9f\xb6\xeb1\xd2\x94\xfdS(\xdbb\xac^\"\x01p?*\xf1\x95?\x1eM\xcb\x10u\xb0\xf1d\xe1\xe3\x8d\xbe\xcb}\xbdkws\f[~\xafP\xcc\x7f\x15\x12\xdf\xae\\!\x015\x8fD\x04\xed\xafG\x01\xf8_%{\x17}\x8d\xbc\x01:Y0S\xda\x032\xad\x956\xbcy\xea\r\x150%/\xfb\xa3U\xe1\x18w\x18\xcb3\xf8\xb9\x04\r\xc2\xcf;\xa1F9\xe7\x87\x98-\xa3\xb2\x00\xfb:\"\x00\x00\x00\x00\x00\x00\x00\x00', 0x7a05, 0x1700) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000280)=0x0) r7 = getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={r6, r7, r8}, 0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$EVIOCGLED(r9, 0x80404519, &(0x7f0000000080)=""/81) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="006d656d6f727920f7552550f1f34e8dfa7a05ba2d934741c8d0de494aec28f815f58e568476fd13b1bd5faffc62edca7fb331f05c015e4c0324a7941c5cf4ce1df70178552521f6ac1bc88e000000"], 0x200600) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) 03:52:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2589.862366] binder: undelivered transaction 1178, process died. 03:52:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2589.955980] binder: 12610:12611 ERROR: BC_REGISTER_LOOPER called without request [ 2590.022232] binder: 12610:12611 unknown command 0 03:52:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40500, 0x0) write$vhci(r1, &(0x7f0000000100)=@HCI_EVENT_PKT={0x4, "c14ca1f957fa59f6aa67c5eaac380696f9bdcfce927b41a068b4d3883d23c3602fad27"}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) [ 2590.044888] binder: 12610:12611 ioctl c0306201 200002c0 returned -22 03:52:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2590.192770] binder: undelivered transaction 1181, process died. 03:52:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2590.307003] binder: 12630:12632 ERROR: BC_REGISTER_LOOPER called without request [ 2590.347185] binder: 12630:12632 unknown command 0 [ 2590.374166] binder: 12630:12632 ioctl c0306201 200002c0 returned -22 03:52:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x32a, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 03:52:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5441, 0x709000) 03:52:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2590.532395] binder: undelivered transaction 1184, process died. 03:52:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) [ 2590.649927] kauditd_printk_skb: 10 callbacks suppressed [ 2590.649941] audit: type=1804 audit(1547869932.576:2544): pid=12629 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2397/memory.events" dev="sda1" ino=17213 res=1 [ 2590.661338] binder: 12648:12650 ERROR: BC_REGISTER_LOOPER called without request [ 2590.752079] audit: type=1804 audit(1547869932.616:2545): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2397/memory.events" dev="sda1" ino=17213 res=1 03:52:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) [ 2590.793073] binder: 12648:12650 unknown command 0 03:52:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2590.832215] binder: 12648:12650 ioctl c0306201 200002c0 returned -22 [ 2590.872925] audit: type=1804 audit(1547869932.616:2546): pid=12629 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2397/memory.events" dev="sda1" ino=17213 res=1 03:52:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) [ 2590.972270] binder: undelivered transaction 1187, process died. [ 2591.061390] binder: 12666:12668 got reply transaction with no transaction stack [ 2591.093309] binder: 12666:12668 transaction failed 29201/-71, size 0-0 line 2801 03:52:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2591.122959] binder: 12666:12668 ioctl c0306201 200002c0 returned -14 03:52:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2591.225482] binder: release 12666:12668 transaction 1189 out, still active [ 2591.244145] binder: undelivered TRANSACTION_ERROR: 29201 [ 2591.274020] binder: send failed reply for transaction 1189, target dead 03:52:13 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x400, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000780)={{&(0x7f0000000700)=""/2, 0x2}, &(0x7f0000000740), 0x2}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000340)=0x8) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000480)={r3, 0xe5, "5f741001365e67e7f28e68f774a5c31fca68dfd9165edbb6bdb397e10daaca298c514de527dc22b46382bc9baf0de28626461fec8f94110ed77d76b40ca4bc4c3ce8c6299c893a3daed1d9ae8f54e712afff6b628f6dabe6e8ea75b2ddde3398fc409f115d555db7e2b16235089ec1a563b2973b629193d9499f84a95bae028739bee3ecd2465a6e364d1a8b1eba8344d294e9048bd3a225a0817203c1aca878ebce8b668296d68b5cb7dba8007cd0113008203ad283f2a5598c3e0e8cff5004ae16e22b42a0369cbbf22758f5b1b3fd27c212d75a8c92a2c5ef7ab3b590c6e317d77a41c8"}, &(0x7f0000000380)=0xed) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000400)={0x8000000000000000, 0x7002, 0x1, 0x2, 0xb}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) setuid(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) request_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r7 = inotify_add_watch(r2, &(0x7f0000000680)='./file0\x00', 0x2000000) inotify_rm_watch(r2, r7) keyctl$instantiate(0xc, r6, &(0x7f0000000180)=ANY=[@ANYBLOB="6c6f61642064656661756c742075736501e0c4b43907e71c0972723a2030303030303030303030303030303030303030"], 0x1, r6) 03:52:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) [ 2591.369667] binder: 12677:12679 got reply transaction with no transaction stack [ 2591.387819] net_ratelimit: 16 callbacks suppressed [ 2591.387835] protocol 88fb is buggy, dev hsr_slave_0 [ 2591.397997] protocol 88fb is buggy, dev hsr_slave_1 [ 2591.403208] protocol 88fb is buggy, dev hsr_slave_0 [ 2591.405015] binder: 12677:12679 transaction failed 29201/-71, size 0-0 line 2801 [ 2591.408360] protocol 88fb is buggy, dev hsr_slave_1 [ 2591.435595] audit: type=1804 audit(1547869933.356:2547): pid=12663 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2398/memory.events" dev="sda1" ino=16769 res=1 [ 2591.455541] binder: 12677:12679 ioctl c0306201 200002c0 returned -14 03:52:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5450, 0x709000) 03:52:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2591.567912] binder: release 12677:12679 transaction 1192 out, still active [ 2591.575497] binder: undelivered TRANSACTION_ERROR: 29201 [ 2591.603638] binder: send failed reply for transaction 1192, target dead 03:52:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) [ 2591.633597] audit: type=1804 audit(1547869933.556:2548): pid=12663 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2398/memory.events" dev="sda1" ino=16769 res=1 [ 2591.670994] binder: 12692:12693 got reply transaction with no transaction stack 03:52:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x114, r3, 0x308, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @rand_addr="f7eb99d472faf372f11151de2969f7e8", 0x7fff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff00000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x282}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x114}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$P9_RMKDIR(r4, &(0x7f0000000380)={0x14, 0x49, 0x1, {0x40, 0x4}}, 0x14) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2591.700753] audit: type=1804 audit(1547869933.586:2549): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2398/memory.events" dev="sda1" ino=16769 res=1 [ 2591.727816] protocol 88fb is buggy, dev hsr_slave_0 [ 2591.732999] protocol 88fb is buggy, dev hsr_slave_1 [ 2591.738207] protocol 88fb is buggy, dev hsr_slave_0 [ 2591.743303] protocol 88fb is buggy, dev hsr_slave_1 [ 2591.773950] binder: 12692:12693 transaction failed 29201/-71, size 0-0 line 2801 [ 2591.783752] kvm_set_msr_common: 14 callbacks suppressed [ 2591.783766] kvm [12699]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2591.823387] kvm [12699]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2591.833005] binder: 12692:12693 ioctl c0306201 200002c0 returned -14 03:52:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2591.927158] binder: release 12692:12693 transaction 1195 out, still active [ 2591.943871] binder: undelivered TRANSACTION_ERROR: 29201 03:52:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 2591.970754] binder: send failed reply for transaction 1195, target dead 03:52:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2592.077933] binder: 12709:12715 got reply transaction with no transaction stack [ 2592.101364] kvm [12713]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2592.113627] audit: type=1804 audit(1547869934.036:2550): pid=12706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2399/memory.events" dev="sda1" ino=17041 res=1 [ 2592.134831] binder: 12709:12715 transaction failed 29201/-71, size 0-0 line 2801 [ 2592.184617] kvm [12713]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2592.193130] protocol 88fb is buggy, dev hsr_slave_0 [ 2592.193203] protocol 88fb is buggy, dev hsr_slave_1 [ 2592.256374] binder: 12709:12715 ioctl c0306201 200002c0 returned -14 03:52:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) [ 2592.342388] audit: type=1804 audit(1547869934.266:2551): pid=12706 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2399/memory.events" dev="sda1" ino=17041 res=1 03:52:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c1201e3ffa070") socket$isdn(0x22, 0x3, 0x13) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1c9, 0x80) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2592.494736] audit: type=1804 audit(1547869934.336:2552): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2399/memory.events" dev="sda1" ino=17041 res=1 [ 2592.532699] kvm [12728]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5451, 0x709000) 03:52:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x8]}, &(0x7f0000000100)=0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2592.585981] kvm [12728]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2592.609740] audit: type=1804 audit(1547869934.416:2553): pid=12725 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2399/memory.events" dev="sda1" ino=17041 res=1 03:52:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 03:52:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2592.799343] kvm [12743]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2592.816074] kvm [12743]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2592.875568] binder: undelivered TRANSACTION_ERROR: 29201 03:52:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) [ 2593.001680] binder: 12754:12757 got reply transaction with no transaction stack [ 2593.024164] binder: 12754:12757 transaction failed 29201/-71, size 0-0 line 2801 [ 2593.054854] binder: 12754:12757 ioctl c0306201 200002c0 returned -14 [ 2593.070593] kvm [12758]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2593.117151] kvm [12758]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 03:52:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000100)={0x7, 0x1b, 0x2}, 0x7) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 03:52:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5452, 0x709000) 03:52:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="9798656d6f727920"], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) [ 2593.786319] binder: undelivered TRANSACTION_ERROR: 29201 [ 2593.890432] binder_thread_write: 2 callbacks suppressed [ 2593.890441] binder: 12797:12798 ERROR: BC_REGISTER_LOOPER called without request [ 2593.943727] binder: 12797:12803 got reply transaction with no transaction stack 03:52:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2593.996719] binder: 12797:12803 transaction failed 29201/-71, size 0-0 line 2801 [ 2594.031739] binder: 12797:12803 ioctl c0306201 200002c0 returned -14 03:52:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 03:52:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000290001000000000400000000030000000800649961aa0000e4464db391110b723f317ad4099880c9ecdf7d406ffd50c18662adac7e72552086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d"], 0x1}}, 0x0) 03:52:16 executing program 0: setxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.nlink\x00', &(0x7f0000000400)={'L-', 0x3}, 0x28, 0xb20df8053fd0b67) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x282002, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000004280)='/proc/capi/capi20\x00', 0x8682, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000004300)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000043c0)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x24, r4, 0x200, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x10000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40005) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0xcc, 0x320}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r6, r1) recvmmsg(r6, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000300)={r5, 0x9}, &(0x7f0000000340)=0x8) accept4(r1, &(0x7f0000000180)=@ax25={{0x3, @bcast}, [@rose, @netrom, @remote, @bcast, @rose, @rose, @bcast]}, &(0x7f0000000200)=0x80, 0x80000) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) 03:52:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x545d, 0x709000) 03:52:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 03:52:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2594.702372] binder: undelivered TRANSACTION_ERROR: 29201 [ 2594.810218] binder: 12841:12843 ERROR: BC_REGISTER_LOOPER called without request 03:52:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2594.873112] binder_alloc: 12841: binder_alloc_buf, no vma [ 2594.895856] binder: 12841:12843 transaction failed 29189/-3, size 0-0 line 3035 [ 2594.930614] binder: send failed reply for transaction 1204 to 12841:12843 [ 2594.949246] binder: 12841:12843 ioctl c0306201 200002c0 returned -14 03:52:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) [ 2594.971138] binder_release_work: 13 callbacks suppressed [ 2594.971143] binder: undelivered TRANSACTION_COMPLETE [ 2595.007887] binder: undelivered TRANSACTION_ERROR: 29189 03:52:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000000000000060000000000000001000000ffff00000200000000000000008000000000000004000000000000000100000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000300000000100000020000000000000000000000000000000000000000000000000c00000000007e0000000000000000"]) [ 2595.058613] binder: undelivered TRANSACTION_ERROR: 29190 03:52:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2595.185216] binder: 12855:12859 ERROR: BC_REGISTER_LOOPER called without request [ 2595.229630] binder_alloc: 12855: binder_alloc_buf, no vma [ 2595.256713] binder: 12855:12859 transaction failed 29189/-3, size 0-0 line 3035 [ 2595.294011] binder: send failed reply for transaction 1207 to 12855:12859 [ 2595.329145] binder: 12855:12859 ioctl c0306201 200002c0 returned -14 03:52:17 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000890e, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140)=0x6b, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x14, 0x18, {0x0, @bearer=@l2={'eth', 0x3a, 'tunl0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4010) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000200e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f8362dd92845f4f856db5"], 0x1}}, 0x0) 03:52:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) [ 2595.366755] binder: undelivered TRANSACTION_COMPLETE [ 2595.372170] binder: undelivered TRANSACTION_ERROR: 29189 03:52:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2595.434611] binder: undelivered TRANSACTION_ERROR: 29190 [ 2595.532447] binder: 12872:12874 ERROR: BC_REGISTER_LOOPER called without request [ 2595.576727] binder: 12872:12877 got reply transaction with no transaction stack [ 2595.638147] binder: 12872:12877 transaction failed 29201/-71, size 0-0 line 2801 [ 2595.667886] binder: 12872:12877 ioctl c0306201 200002c0 returned -14 [ 2595.703617] binder: release 12872:12874 transaction 1210 out, still active [ 2595.716686] binder: undelivered TRANSACTION_COMPLETE [ 2595.729244] kauditd_printk_skb: 13 callbacks suppressed [ 2595.729259] audit: type=1804 audit(1547869937.656:2567): pid=12863 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2403/memory.events" dev="sda1" ino=17215 res=1 03:52:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x5460, 0x709000) 03:52:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}) 03:52:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2595.776610] binder: release 12872:12874 transaction 1210 in, still active [ 2595.789801] binder: send failed reply for transaction 1210, target dead [ 2595.838205] audit: type=1804 audit(1547869937.716:2568): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2403/memory.events" dev="sda1" ino=17215 res=1 [ 2595.887215] binder: 12885:12887 transaction failed 29189/-22, size 0-0 line 2896 [ 2595.907619] audit: type=1804 audit(1547869937.826:2569): pid=12869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2403/memory.events" dev="sda1" ino=17215 res=1 03:52:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cgroup.controllers\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delrng={0x10, 0x14, 0x400, 0x70bd27, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2595.939928] binder: 12885:12892 ERROR: BC_REGISTER_LOOPER called without request 03:52:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2595.988591] binder: 12885:12887 got reply transaction with no transaction stack [ 2596.023515] binder: 12885:12887 ioctl c0306201 200002c0 returned -14 03:52:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 03:52:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2596.282422] binder_transaction: 1 callbacks suppressed [ 2596.289056] binder: 12907:12910 transaction failed 29189/-22, size 0-0 line 2896 [ 2596.335654] binder: 12907:12914 ERROR: BC_REGISTER_LOOPER called without request 03:52:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") fcntl$setlease(r0, 0x400, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r0, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000e200001e000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6a1382935cfceaf559fff6b9663d8331b065f11de1fc3fb5ffe00000000083e4a1f0da1b2c60fcfa762c89f2aa95bd240330a461"], 0x1}}, 0x0) [ 2596.382506] binder: 12907:12910 got reply transaction with no transaction stack [ 2596.413784] audit: type=1804 audit(1547869938.336:2570): pid=12902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2404/memory.events" dev="sda1" ino=17215 res=1 [ 2596.444701] binder: 12907:12910 transaction failed 29201/-71, size 0-0 line 2801 03:52:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 03:52:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2596.520518] binder: 12907:12910 ioctl c0306201 200002c0 returned -14 [ 2596.587800] net_ratelimit: 24 callbacks suppressed [ 2596.587808] protocol 88fb is buggy, dev hsr_slave_0 [ 2596.598000] protocol 88fb is buggy, dev hsr_slave_1 [ 2596.617942] audit: type=1804 audit(1547869938.546:2571): pid=12902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2404/memory.events" dev="sda1" ino=17215 res=1 [ 2596.656530] binder_release_work: 3 callbacks suppressed [ 2596.656537] binder: undelivered TRANSACTION_ERROR: 29189 [ 2596.667956] binder: undelivered TRANSACTION_ERROR: 29201 [ 2596.687556] audit: type=1804 audit(1547869938.566:2572): pid=12902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2404/memory.events" dev="sda1" ino=17215 res=1 03:52:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x40045431, 0x709000) 03:52:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) [ 2596.973279] binder: 12930:12931 transaction failed 29189/-22, size 0-0 line 2896 [ 2597.013123] binder: 12930:12931 ERROR: BC_REGISTER_LOOPER called without request [ 2597.028245] kvm_set_msr_common: 20 callbacks suppressed [ 2597.028259] kvm [12932]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2597.052870] binder: 12930:12931 got reply transaction with no transaction stack [ 2597.076183] kvm [12932]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2597.087257] binder: 12930:12931 transaction failed 29201/-71, size 0-0 line 2801 [ 2597.106077] binder: 12930:12931 ioctl c0306201 200002c0 returned -14 03:52:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) 03:52:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\xff', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2597.214210] binder: undelivered TRANSACTION_ERROR: 29189 [ 2597.230286] binder: undelivered TRANSACTION_ERROR: 29201 [ 2597.332798] audit: type=1804 audit(1547869939.256:2573): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2405/memory.events" dev="sda1" ino=17205 res=1 [ 2597.369813] binder_alloc: 12949: binder_alloc_buf, no vma [ 2597.383855] kvm [12947]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2597.398855] binder: 12949:12954 transaction failed 29189/-3, size 0-0 line 3035 03:52:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xf43, &(0x7f00000000c0)="0adc1f023c123f3188a0702c7f9615b603ad64c6d05068457e48b432fce96c3e54a945034dd8b276184a4f77b800763d20e3") r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x7, 0x404a00) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000140)={'nat\x00', 0x10, "e4aba4ee857e187823dbbfe9a38439b2"}, &(0x7f0000000180)=0x34) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000902c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935c1e6bf5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) [ 2597.430683] binder: 12949:12958 ERROR: BC_REGISTER_LOOPER called without request [ 2597.454755] kvm [12947]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2597.475064] binder: 12949:12954 got reply transaction with no transaction stack 03:52:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2597.533006] binder: 12949:12954 transaction failed 29201/-71, size 0-0 line 2801 [ 2597.542786] audit: type=1804 audit(1547869939.466:2574): pid=12938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2405/memory.events" dev="sda1" ino=17205 res=1 [ 2597.599279] binder: 12949:12954 ioctl c0306201 200002c0 returned -14 [ 2597.627794] protocol 88fb is buggy, dev hsr_slave_0 [ 2597.633034] protocol 88fb is buggy, dev hsr_slave_1 [ 2597.638312] protocol 88fb is buggy, dev hsr_slave_0 [ 2597.639001] binder: undelivered TRANSACTION_ERROR: 29201 03:52:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000200)={0x10000}, 0x8) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 03:52:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 2597.643380] protocol 88fb is buggy, dev hsr_slave_1 [ 2597.668378] audit: type=1804 audit(1547869939.506:2575): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2405/memory.events" dev="sda1" ino=17205 res=1 [ 2597.727582] binder: undelivered TRANSACTION_ERROR: 29189 [ 2597.781117] audit: type=1804 audit(1547869939.586:2576): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2405/memory.events" dev="sda1" ino=17205 res=1 [ 2597.819408] kvm [12968]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2597.867902] kvm [12968]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x40045436, 0x709000) 03:52:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='m%events\x00\x00\x00\x00\x00\x00', 0x1000000, 0x5000000) memfd_create(&(0x7f0000000100)='\x00', 0x90f4cbd4d1e8c3c6) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="006d654c6f727920b0b87ba1c007476f3b26550746f0d52321d71fa6e73224ba353d31d7e9e72cc77be18b7f1a1f943f87ca382d01136fd7b7f1f769a49cbb577b7421817d170154fb6f796d2cc035a0b9fd7448d9cf01e34c98b4a9b079bf6bbce0dd840627fe42f83803000000ffba87be0c513300bfd986f10dd175af8ec0d0714d443f3072d08d"], 0x200600) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) 03:52:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2597.947805] protocol 88fb is buggy, dev hsr_slave_0 [ 2597.952995] protocol 88fb is buggy, dev hsr_slave_1 [ 2597.958262] protocol 88fb is buggy, dev hsr_slave_0 [ 2597.963355] protocol 88fb is buggy, dev hsr_slave_1 [ 2597.975091] binder_alloc: 12978: binder_alloc_buf, no vma [ 2597.993555] binder: 12978:12981 transaction failed 29189/-3, size 0-0 line 3035 [ 2598.008764] binder: 12978:12981 ERROR: BC_REGISTER_LOOPER called without request 03:52:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) [ 2598.056000] binder: 12978:12987 got reply transaction with no transaction stack [ 2598.097365] binder: 12978:12987 transaction failed 29201/-71, size 0-0 line 2801 03:52:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2598.145354] binder: 12978:12987 ioctl c0306201 200002c0 returned -14 [ 2598.195910] kvm [12992]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2598.224205] kvm [12992]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 03:52:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2598.494964] kvm [13000]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2598.553878] kvm [13000]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101000, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000040), &(0x7f00000000c0)=0xe, 0x800) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) accept4$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10, 0x80000) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000001580)=ANY=[@ANYRES32=r0, @ANYBLOB="57a7e8e724c1651406ec43afa27d5b358810c07539cbaa25c4a29a01781a744c3161f52b3e4ee43e272fe28db5a924f0b7ca12eba70ebc5d642193631deec0e40ddcfc3b4730a137c0c9e82623bcae3be9c3442207dac4798f56fb887fd258099c44a697475e7353d6f1c5da6a27043903560309c9194d4519c2dee7ed3a94c49e7b6034ad4f884776d443e72eb731f6df3b2a3ff1dba7c3dee418a6ec", @ANYPTR, @ANYBLOB="8273f5e11da19fb779dbbca1a27f4736b2b91eaa9cbd89a72ca9d7b62a5fcf23f4afc7fa2a20e499105c749e328f2fbfa956eb90f765bdfa49c51492c8b2165244c470b86ccb47298d727da4e05aa8e2c58ab050e22a72", @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="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"]], 0x1}}, 0x0) 03:52:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 2598.768056] binder: undelivered TRANSACTION_ERROR: 29201 [ 2598.815165] binder: undelivered TRANSACTION_ERROR: 29189 03:52:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x40049409, 0x709000) 03:52:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 2599.038527] binder_alloc: 13026: binder_alloc_buf, no vma [ 2599.078093] binder: 13026:13029 transaction failed 29189/-3, size 0-0 line 3035 [ 2599.086499] binder: 13026:13036 ERROR: BC_REGISTER_LOOPER called without request 03:52:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2599.197963] binder: 13026:13029 got reply transaction with no transaction stack [ 2599.205683] binder: 13026:13029 transaction failed 29201/-71, size 0-0 line 2801 03:52:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 2599.261404] binder: 13026:13029 ioctl c0306201 200002c0 returned -14 [ 2599.288692] binder: undelivered TRANSACTION_ERROR: 29201 03:52:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2599.352651] binder: undelivered TRANSACTION_ERROR: 29189 03:52:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 03:52:21 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000840)=0xe8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000880)={r1, 0x7, 0x1ff, 0x9, 0x636, 0xffffffffffffffff, 0x40}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0xc, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0xc0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000180)={@loopback, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10a}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newaddr={0x34, 0x14, 0x2, 0x70bd2c, 0x25dfdbff, {0x2, 0x3f, 0x157, 0xff, r4}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x9, 0x0}}, @IFA_LABEL={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4811}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x2ae8cf0491d331c8, 0x7fff}) 03:52:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x4020940d, 0x709000) 03:52:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x117, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x3, {0xffffffffeef19661, 0x0, "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", 0x60, 0x7, 0xfffffffffffffffd, 0x2, 0x10000, 0x1ff, 0x19c}, r2}}, 0x128) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000480)=""/62) 03:52:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 03:52:22 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xb, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) 03:52:22 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xc, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:22 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000000180)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) r4 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x7, 0x101000) signalfd4(r4, &(0x7f0000000200)={0x20}, 0x8, 0x80800) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="006d656d6f72d780"], 0x200600) [ 2600.832282] kauditd_printk_skb: 8 callbacks suppressed [ 2600.832297] audit: type=1804 audit(1547869942.756:2585): pid=13109 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2409/memory.events" dev="sda1" ino=16549 res=1 [ 2600.920826] audit: type=1800 audit(1547869942.786:2586): pid=13109 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor1" name="memory.events" dev="sda1" ino=16549 res=0 03:52:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x80045430, 0x709000) 03:52:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xd, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) 03:52:22 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:22 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000100)=0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x48b4, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:23 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}) 03:52:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xe, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2601.311696] audit: type=1804 audit(1547869943.236:2587): pid=13125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2410/memory.events" dev="sda1" ino=16553 res=1 03:52:23 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2601.502083] audit: type=1804 audit(1547869943.426:2588): pid=13131 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2410/memory.events" dev="sda1" ino=16553 res=1 03:52:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xf, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) [ 2601.596314] audit: type=1804 audit(1547869943.476:2589): pid=13125 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2410/memory.events" dev="sda1" ino=16553 res=1 [ 2601.743675] audit: type=1804 audit(1547869943.476:2590): pid=13146 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2410/memory.events" dev="sda1" ino=16553 res=1 [ 2601.787834] net_ratelimit: 16 callbacks suppressed [ 2601.787843] protocol 88fb is buggy, dev hsr_slave_0 [ 2601.797962] protocol 88fb is buggy, dev hsr_slave_1 [ 2601.803144] protocol 88fb is buggy, dev hsr_slave_0 [ 2601.808267] protocol 88fb is buggy, dev hsr_slave_1 03:52:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x80045432, 0x709000) 03:52:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2100200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r5, 0x404, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @local}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000480)=0xe8) mount$9p_rdma(&(0x7f0000000280)='127.0.0.1\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x921000, &(0x7f0000000680)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x1f}}, {@sq={'sq', 0x3d, 0x6}}, {@timeout={'timeout', 0x3d, 0x1000}}, {@common=@cachetag={'cachetag', 0x3d, 'GPL'}}, {@common=@debug={'debug', 0x3d, 0x6}}, {@sq={'sq', 0x3d, 0x9}}, {@common=@dfltuid={'dfltuid', 0x3d, r4}}], [{@fowner_eq={'fowner', 0x3d, r6}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'memory.events\x00'}}]}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000240)={0x22, &(0x7f0000000100)=""/34}) get_thread_area(&(0x7f0000000880)={0x7ff, 0xffffffffffffffff, 0x0, 0x7fff, 0x2, 0x9, 0xdaa, 0x401, 0x3, 0xfff}) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0x80000000, 0x2, 0x8001, 0x3, 0x4, 0x8, 0x8cf2, 0x3, 0x8, 0x7fffffff, 0x3, 0x3, 0x6, 0x1, 0x80000000, 0x2, 0x6, 0x4, 0x1f, 0x94ba, 0x2, 0x9, 0x1, 0x1, 0x8, 0x1, 0x1ff, 0x4, 0x5, 0x3ff, 0x8, 0x1]}) 03:52:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x10, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000029000100000000045c0000000300000008000900c9000000e4464db391110f723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59c0aeb122077f63a883da9634fff6b9668f0a4d0358086db4487b3dbaa301274c010023d75f3d26406f8301000100000055a829493b4fecb154d10d0c8f82a86043f17deea56e014838d02be6b4ff857eb1394960f89292df4af83906657936e369e47b0000000000"], 0x1}}, 0x0) 03:52:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) [ 2602.107849] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.113033] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.117838] binder_alloc: 13159: binder_alloc_buf, no vma [ 2602.118253] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.128773] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.134070] binder_transaction: 3 callbacks suppressed [ 2602.134086] binder: 13159:13161 transaction failed 29189/-3, size 0-0 line 3035 [ 2602.167342] binder: 13159:13169 ERROR: BC_REGISTER_LOOPER called without request [ 2602.211067] binder: 13159:13161 got reply transaction with no transaction stack [ 2602.227991] binder: 13159:13161 transaction failed 29201/-71, size 0-0 line 2801 [ 2602.236124] kvm_set_msr_common: 16 callbacks suppressed [ 2602.236139] kvm [13167]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2602.240336] binder: 13159:13161 ioctl c0306201 200002c0 returned -14 03:52:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x11, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2602.283877] binder_release_work: 3 callbacks suppressed [ 2602.283885] binder: undelivered TRANSACTION_ERROR: 29201 [ 2602.309344] kvm [13167]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2602.353728] binder: undelivered TRANSACTION_ERROR: 29189 [ 2602.411309] binder_alloc: 13180: binder_alloc_buf, no vma [ 2602.423932] binder: 13180:13182 transaction failed 29189/-3, size 0-0 line 3035 03:52:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) [ 2602.476835] binder: 13180:13186 ERROR: BC_REGISTER_LOOPER called without request [ 2602.507138] binder: 13180:13182 got reply transaction with no transaction stack [ 2602.527759] audit: type=1804 audit(1547869944.446:2591): pid=13173 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2411/memory.events" dev="sda1" ino=16801 res=1 [ 2602.565781] binder: 13180:13182 transaction failed 29201/-71, size 0-0 line 2801 [ 2602.587802] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.589330] binder: 13180:13182 ioctl c0306201 200002c0 returned -14 [ 2602.593000] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.618420] binder: undelivered TRANSACTION_ERROR: 29201 03:52:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x13, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2602.637793] kvm [13189]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2602.685000] binder: undelivered TRANSACTION_ERROR: 29189 [ 2602.697064] kvm [13189]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2602.771971] audit: type=1804 audit(1547869944.696:2592): pid=13164 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2411/memory.events" dev="sda1" ino=16801 res=1 [ 2602.776626] binder_alloc: 13193: binder_alloc_buf, no vma [ 2602.852572] binder: 13193:13195 transaction failed 29189/-3, size 0-0 line 3035 [ 2602.873972] binder: 13193:13201 ERROR: BC_REGISTER_LOOPER called without request 03:52:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) [ 2602.876146] audit: type=1804 audit(1547869944.796:2593): pid=13173 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2411/memory.events" dev="sda1" ino=16801 res=1 [ 2602.916102] binder: 13193:13195 got reply transaction with no transaction stack [ 2602.925967] audit: type=1804 audit(1547869944.856:2594): pid=13198 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2411/memory.events" dev="sda1" ino=16801 res=1 [ 2602.929747] binder: 13193:13195 transaction failed 29201/-71, size 0-0 line 2801 [ 2602.959463] binder: 13193:13195 ioctl c0306201 200002c0 returned -14 [ 2603.059218] binder: undelivered TRANSACTION_ERROR: 29201 [ 2603.077031] kvm [13207]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2603.092822] kvm [13207]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x80045438, 0x709000) 03:52:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)={0x36dca31508b1b1e8, 0x3, [@empty, @broadcast, @link_local]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r3, 0x0, 0x1, &(0x7f0000000200)='\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x4, 0xffffffffffffffee, 0x4, 0x6, 0x0, 0x3, 0x4000, 0xe, 0x8000, 0x8, 0x7, 0x1, 0x7, 0x0, 0x6, 0x1, 0x8, 0x40, 0xa8b7, 0x2, 0x9, 0x100000000, 0x5, 0x9, 0x0, 0x1, 0x1, 0x7ff, 0xc, 0xfff, 0x80000000, 0x8, 0x81, 0x8000, 0xffffffff, 0xffffffffffffff81, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x9000, 0x6, 0x5, 0xf, 0x5, 0x1, 0x120000000000}, r4, 0x8, r1, 0x3) 03:52:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x5, 0x1) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000200)={r3, r4, 0x3ff}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f0000000100)={r0}) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 03:52:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x14, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2603.140129] binder: undelivered TRANSACTION_ERROR: 29189 03:52:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) [ 2603.219871] binder_alloc: 13212: binder_alloc_buf, no vma [ 2603.225526] binder: 13212:13214 transaction failed 29189/-3, size 0-0 line 3035 [ 2603.258526] binder: 13212:13214 ERROR: BC_REGISTER_LOOPER called without request [ 2603.276637] kvm [13222]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2603.297106] kvm [13222]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2603.325955] binder: 13212:13230 got reply transaction with no transaction stack [ 2603.359098] binder: 13212:13230 transaction failed 29201/-71, size 0-0 line 2801 03:52:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 03:52:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x15, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2603.389049] binder: 13212:13230 ioctl c0306201 200002c0 returned -14 [ 2603.547376] kvm [13233]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2603.614011] kvm [13233]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x16, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 03:52:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x17, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2603.992080] binder: undelivered TRANSACTION_ERROR: 29201 03:52:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2604.059835] binder: undelivered TRANSACTION_ERROR: 29189 03:52:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x80045439, 0x709000) 03:52:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="609853cd0adc1feb3b123f31b88a3afbb8453882") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 03:52:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x4) [ 2604.129228] binder_alloc: 13253: binder_alloc_buf, no vma [ 2604.146842] binder: 13253:13255 transaction failed 29189/-3, size 0-0 line 3035 [ 2604.161555] binder: 13253:13255 ERROR: BC_REGISTER_LOOPER called without request [ 2604.209356] binder: 13253:13260 got reply transaction with no transaction stack [ 2604.232192] binder: 13253:13260 transaction failed 29201/-71, size 0-0 line 2801 03:52:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x48, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2604.268461] binder: 13253:13260 ioctl c0306201 200002c0 returned -14 03:52:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 03:52:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4c, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x68, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}) [ 2604.926785] binder: undelivered TRANSACTION_ERROR: 29201 03:52:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x6c, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002900010000000004060000000300000008000900c9000000e4464db391110b723f317a935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79e60ee1fc3fb5bee3422acc48d2d1c79cbdcf81612cb8a355a00cd17b71bb1d41bf1a78789d39adadb220c583616f5c9c18"], 0x1}}, 0x0) [ 2605.009713] binder: undelivered TRANSACTION_ERROR: 29189 [ 2605.151585] binder_alloc: 13299: binder_alloc_buf, no vma [ 2605.188545] binder: 13299:13303 ERROR: BC_REGISTER_LOOPER called without request [ 2605.237410] binder: 13299:13308 got reply transaction with no transaction stack [ 2605.255776] binder: 13299:13308 ioctl c0306201 200002c0 returned -14 03:52:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x80045440, 0x709000) 03:52:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00me\b\x00ry '], 0x200600) 03:52:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) 03:52:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x74, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x7a, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) 03:52:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1a0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) [ 2605.892595] kauditd_printk_skb: 9 callbacks suppressed [ 2605.892610] audit: type=1804 audit(1547869947.816:2604): pid=13321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2414/memory.events" dev="sda1" ino=17235 res=1 03:52:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2606.023757] audit: type=1804 audit(1547869947.886:2605): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2414/memory.events" dev="sda1" ino=17235 res=1 [ 2606.045256] binder: 13344:13345 ERROR: BC_REGISTER_LOOPER called without request 03:52:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2a0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r3 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000340)={&(0x7f0000000300)=[0x5, 0x1, 0x8, 0x7fff, 0x401, 0x7fffffff, 0x5, 0xffffffffffffff81, 0x280c], 0x9, 0x9, 0x3, 0x6, 0xcb1, 0x8, {0x0, 0x1, 0x2, 0xfffffffffffffffc, 0x7f, 0x3, 0x4, 0x93ea, 0xffffffffffff1959, 0x8, 0x7, 0x880, 0x0, 0x1, "b396d56fe37cabe21cfacedbd6b473c155b865961803fab1a8e77e705a149ec3"}}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf4, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbedf}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x36}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @rand_addr=0x3}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 03:52:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2606.134779] audit: type=1804 audit(1547869947.936:2606): pid=13339 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2414/memory.events" dev="sda1" ino=17235 res=1 [ 2606.140820] binder: 13344:13347 got reply transaction with no transaction stack [ 2606.223642] binder: 13344:13347 ioctl c0306201 200002c0 returned -14 03:52:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0xc0045878, 0x709000) 03:52:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}) 03:52:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x300, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2606.448743] binder: 13361:13365 ERROR: BC_REGISTER_LOOPER called without request [ 2606.499440] binder: 13361:13365 got reply transaction with no transaction stack [ 2606.537875] binder: 13361:13365 ioctl c0306201 200002c0 returned -14 03:52:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) [ 2606.577906] audit: type=1804 audit(1547869948.496:2607): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2415/memory.events" dev="sda1" ino=17231 res=1 03:52:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4a0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2606.706612] audit: type=1804 audit(1547869948.626:2608): pid=13360 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2415/memory.events" dev="sda1" ino=17231 res=1 [ 2606.790408] audit: type=1804 audit(1547869948.666:2609): pid=13356 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2415/memory.events" dev="sda1" ino=17231 res=1 [ 2606.839756] binder: 13377:13380 ERROR: BC_REGISTER_LOOPER called without request [ 2606.879200] binder: 13377:13380 got reply transaction with no transaction stack [ 2606.886725] binder: 13377:13380 ioctl c0306201 200002c0 returned -14 [ 2606.961665] audit: type=1804 audit(1547869948.886:2610): pid=13356 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2415/memory.events" dev="sda1" ino=17231 res=1 [ 2606.987849] net_ratelimit: 24 callbacks suppressed [ 2606.987857] protocol 88fb is buggy, dev hsr_slave_0 [ 2606.997957] protocol 88fb is buggy, dev hsr_slave_1 03:52:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) 03:52:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x800, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="b56d656d6f727920"], 0x200600) 03:52:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x40, 0x6002) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x103ff, 0x2, 0x4, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd35}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5000000"], 0x1}}, 0x0) 03:52:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x500, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2607.200852] binder: 13392:13394 ERROR: BC_REGISTER_LOOPER called without request [ 2607.249820] binder_alloc: 13392: binder_alloc_buf, no vma [ 2607.258305] kvm_set_msr_common: 17 callbacks suppressed [ 2607.258325] kvm [13389]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2607.283500] binder_transaction: 8 callbacks suppressed [ 2607.283517] binder: 13392:13394 transaction failed 29189/-3, size 0-0 line 3035 [ 2607.324717] binder: send failed reply for transaction 1255 to 13392:13394 [ 2607.346092] binder: 13392:13394 ioctl c0306201 200002c0 returned -14 [ 2607.357142] kvm [13389]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2607.382731] binder: undelivered TRANSACTION_COMPLETE [ 2607.388136] binder_release_work: 8 callbacks suppressed [ 2607.388142] binder: undelivered TRANSACTION_ERROR: 29189 03:52:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0xc0045878, 0x709000) 03:52:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x600, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) [ 2607.472922] binder: undelivered TRANSACTION_ERROR: 29190 [ 2607.543094] audit: type=1804 audit(1547869949.466:2611): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2416/memory.events" dev="sda1" ino=17231 res=1 [ 2607.605856] binder: 13409:13414 ERROR: BC_REGISTER_LOOPER called without request [ 2607.641082] kvm [13411]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2607.653528] binder_alloc: 13409: binder_alloc_buf, no vma [ 2607.670248] binder: 13409:13414 transaction failed 29189/-3, size 0-0 line 3035 [ 2607.684143] kvm [13411]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2607.699250] binder: send failed reply for transaction 1258 to 13409:13414 [ 2607.723148] binder: 13409:13414 ioctl c0306201 200002c0 returned -14 [ 2607.753908] binder: undelivered TRANSACTION_COMPLETE 03:52:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x700, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2607.775759] binder: undelivered TRANSACTION_ERROR: 29189 [ 2607.788286] audit: type=1804 audit(1547869949.716:2612): pid=13401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2416/memory.events" dev="sda1" ino=17231 res=1 03:52:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2607.865099] binder: undelivered TRANSACTION_ERROR: 29190 03:52:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) [ 2607.904056] audit: type=1804 audit(1547869949.746:2613): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2416/memory.events" dev="sda1" ino=17231 res=1 03:52:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x5c, 0x0, &(0x7f0000000200)=[@dead_binder_done={0x40086310, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000080), &(0x7f0000000100)=[0x38, 0x78, 0x38]}}, @exit_looper, @release={0x40046306, 0x1}], 0x32, 0x0, &(0x7f0000000280)="05c29be75abfdf43aff8ad3c18f36732c1b3bc67ecac98ac216da1bc49dc5e2ae180d6c86568693fe6e3d1273ee307f4e3fc"}) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000080)={0x6, 0x8000, 0x7, 0x100000001}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="038a8f2b0000000032fcdec95276ccc1833b3e89ab56b8a525d8030d25158189da0fbaefb234ba29b21bf475d6fa70f3a89d2585686d3651e06c9c3cb4213d86de63a20886af92864c3637527125e5c90f064b457701433f2e4e3c4998582c7cb7ca447222c6"], 0x200600) [ 2607.993038] binder: 13423:13427 ERROR: BC_REGISTER_LOOPER called without request [ 2608.027828] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.032956] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.038290] protocol 88fb is buggy, dev hsr_slave_0 03:52:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x8a0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2608.043375] protocol 88fb is buggy, dev hsr_slave_1 03:52:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x104, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x4044040) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) [ 2608.088255] binder_alloc: 13423: binder_alloc_buf, no vma [ 2608.093918] binder: 13423:13427 transaction failed 29189/-3, size 0-0 line 3035 03:52:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) [ 2608.170965] binder: send failed reply for transaction 1261 to 13423:13427 [ 2608.203718] binder: 13423:13427 ioctl c0306201 200002c0 returned -14 [ 2608.231700] binder: undelivered TRANSACTION_COMPLETE [ 2608.237018] binder: undelivered TRANSACTION_ERROR: 29189 03:52:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000029000100000000044bc0eb7732f5cb7807ea000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f"], 0x1}}, 0x0) [ 2608.342016] binder: undelivered TRANSACTION_ERROR: 29190 [ 2608.357816] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.362931] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.368167] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.373252] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.421711] kvm [13444]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2608.478096] kvm [13444]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0xc0189436, 0x709000) 03:52:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x900, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 2608.599281] binder: 13452:13455 ERROR: BC_REGISTER_LOOPER called without request [ 2608.620085] binder_alloc: 13452: binder_alloc_buf, no vma [ 2608.636069] binder: 13452:13455 transaction failed 29189/-3, size 0-0 line 3035 [ 2608.673974] binder: send failed reply for transaction 1264 to 13452:13455 [ 2608.705988] binder: 13452:13455 ioctl c0306201 200002c0 returned -14 03:52:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa00, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2608.725429] kvm [13458]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2608.746690] binder: undelivered TRANSACTION_COMPLETE [ 2608.753103] binder: undelivered TRANSACTION_ERROR: 29189 [ 2608.797678] kvm [13458]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000200)=""/91) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="e9b71d9eaa0baeea6c0b58d69995cd24859aae5854f6b2460781a2f7cd0832920ffeecc1ae50b0a091f2fa54ddce235914d2d821b366da54907c"], 0x200600) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00mO%ory '], 0x200600) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000180)={0x2, [0x6, 0x9, 0x5, 0x9, 0x401, 0x5, 0x8, 0x1000, 0x1, 0x2, 0x7d55, 0xe014, 0x5, 0x3, 0x400, 0x9, 0x6, 0xb7, 0x27876c8e00000, 0x8000, 0x56bb, 0x7ff, 0x5, 0x6, 0x80000000000, 0x0, 0xfff, 0xdab, 0x2, 0x0, 0x2010, 0x5, 0xfffffffffffffffe, 0x2, 0x9, 0x1ff, 0x1000, 0x4, 0x4, 0x8000000000000009, 0xdaf, 0x7, 0xfffffffffffffffc, 0xff, 0x8, 0x7fffffff, 0x8, 0x8], 0x5}) [ 2608.841917] binder: undelivered TRANSACTION_ERROR: 29190 03:52:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 03:52:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xb00, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2608.986864] binder: 13468:13472 ERROR: BC_REGISTER_LOOPER called without request [ 2609.026657] binder_alloc: 13468: binder_alloc_buf, no vma [ 2609.055627] binder: 13468:13472 transaction failed 29189/-3, size 0-0 line 3035 [ 2609.084577] binder: send failed reply for transaction 1267 to 13468:13472 [ 2609.113807] binder: 13468:13472 ioctl c0306201 200002c0 returned -14 [ 2609.143499] binder: undelivered TRANSACTION_COMPLETE [ 2609.149318] binder: undelivered TRANSACTION_ERROR: 29189 03:52:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2609.230689] binder: undelivered TRANSACTION_ERROR: 29190 03:52:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 03:52:31 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x100000000}, 0xb) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000290001ff01000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9acdf207a2686ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) [ 2609.361686] binder: 13484:13485 ERROR: BC_REGISTER_LOOPER called without request [ 2609.408972] binder: 13484:13488 got reply transaction with no transaction stack [ 2609.438129] binder: 13484:13488 transaction failed 29201/-71, size 0-0 line 2801 [ 2609.473963] binder: 13484:13488 ioctl c0306201 200002c0 returned -14 [ 2609.485307] kvm [13486]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2609.505355] binder: release 13484:13485 transaction 1270 out, still active [ 2609.517951] binder: undelivered TRANSACTION_COMPLETE 03:52:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0xc020660b, 0x709000) 03:52:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xc00, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x90400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) keyctl$negate(0xd, r1, 0xf250, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2609.531090] kvm [13486]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:31 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) [ 2609.614723] binder: release 13484:13485 transaction 1270 in, still active [ 2609.627432] binder: send failed reply for transaction 1270, target dead [ 2609.690952] binder: 13504:13506 ERROR: BC_REGISTER_LOOPER called without request 03:52:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xd00, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2609.738957] binder: 13504:13508 got reply transaction with no transaction stack [ 2609.785768] binder: 13504:13508 transaction failed 29201/-71, size 0-0 line 2801 [ 2609.797899] binder: 13504:13508 ioctl c0306201 200002c0 returned -14 03:52:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709002) 03:52:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 03:52:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xe00, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 03:52:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xf00, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b7249317ad4099880c9ecea2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) 03:52:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fremovexattr(r0, &(0x7f0000000080)=@random={'os2.', 'systemGPLnodevcpuset\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 03:52:32 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xf19, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2610.609093] binder: 13546:13548 ERROR: BC_REGISTER_LOOPER called without request [ 2610.656252] binder: 13546:13552 got reply transaction with no transaction stack [ 2610.668021] binder: 13546:13552 transaction failed 29201/-71, size 0-0 line 2801 [ 2610.728038] binder: 13546:13552 ioctl c0306201 200002c0 returned -14 03:52:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 03:52:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1020, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x712000) 03:52:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 03:52:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x10a0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2611.153711] kauditd_printk_skb: 14 callbacks suppressed [ 2611.153725] audit: type=1804 audit(1547869953.076:2628): pid=13551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2420/memory.events" dev="sda1" ino=17231 res=1 [ 2611.258272] audit: type=1804 audit(1547869953.126:2629): pid=13543 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2420/memory.events" dev="sda1" ino=17231 res=1 03:52:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000000)="1cfe4c7c3113", 0x6, 0x4000041, &(0x7f00000000c0)={0x1a, 0x308, 0x73, 0x9, 0x0, 0xffffffffffff8000, @local}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc4db5cff5d99cf3cd92d64c65a3f22abf4a011af7008b0a08ce19eac243e3529ccf771a2a62a150ee3fa341794e659ae95d80f28ab75c9122cd414cadb230a2e7565ab035b71f796f3bd194c98d4458d25f2398577a8cd81fb818f76221fabc4b1ee30cdc9a9bee5601"], 0x1}}, 0x0) [ 2611.379849] audit: type=1804 audit(1547869953.306:2630): pid=13543 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2420/memory.events" dev="sda1" ino=17231 res=1 03:52:33 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) 03:52:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x9, "4d8befb777b82a1ac0"}, &(0x7f00000001c0)=0x11) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000200)={r3, @in={{0x2, 0x4e24, @loopback}}}, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6(0xa, 0x8080f, 0x8001) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="1581656d6f2c9027a73edbfc163ab1d20120"], 0x200600) openat$cgroup_ro(r1, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x1, 'cpu'}]}, 0x1eb6d8) 03:52:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1100, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2611.558397] binder: 13581:13584 ERROR: BC_REGISTER_LOOPER called without request [ 2611.605616] binder: 13581:13589 got reply transaction with no transaction stack [ 2611.626066] binder: 13581:13589 transaction failed 29201/-71, size 0-0 line 2801 03:52:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000080)={0x54, 0x0, 0xfffffffeffffffff, {0x0, 0xd02}, {0x687baadb, 0x458505b8}, @ramp={0xffffffff, 0x3f, {0x9, 0x5, 0xfffffffffffff4f7, 0xda}}}) 03:52:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) [ 2611.661471] binder: 13581:13589 ioctl c0306201 200002c0 returned -14 03:52:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1300, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x740000) 03:52:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 03:52:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1400, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2612.134996] audit: type=1804 audit(1547869954.056:2631): pid=13601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2422/memory.events" dev="sda1" ino=17239 res=1 [ 2612.187798] net_ratelimit: 16 callbacks suppressed [ 2612.187807] protocol 88fb is buggy, dev hsr_slave_0 [ 2612.197897] protocol 88fb is buggy, dev hsr_slave_1 [ 2612.203073] protocol 88fb is buggy, dev hsr_slave_0 [ 2612.208194] protocol 88fb is buggy, dev hsr_slave_1 03:52:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x196) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r3 = socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) recvmmsg(r3, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x80, 0x8002, 0x7f, 0x8, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)={r4, 0x52d7d48d, 0x7, [0xaed3, 0x7, 0x5da, 0xa8, 0x8, 0x8000, 0x7fff]}, &(0x7f0000000340)=0x16) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2000000000000000066af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 03:52:34 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1500, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2612.384579] audit: type=1804 audit(1547869954.306:2632): pid=13601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2422/memory.events" dev="sda1" ino=17239 res=1 [ 2612.452518] binder: 13626:13627 ioctl c0306201 0 returned -14 [ 2612.461204] audit: type=1804 audit(1547869954.316:2633): pid=13597 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2422/memory.events" dev="sda1" ino=17239 res=1 [ 2612.485720] kvm_set_msr_common: 18 callbacks suppressed [ 2612.485735] kvm [13622]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) r4 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x82) inotify_rm_watch(r1, r4) [ 2612.505564] binder: 13626:13627 ERROR: BC_REGISTER_LOOPER called without request [ 2612.513376] protocol 88fb is buggy, dev hsr_slave_0 [ 2612.518505] protocol 88fb is buggy, dev hsr_slave_1 [ 2612.523701] protocol 88fb is buggy, dev hsr_slave_0 [ 2612.528922] protocol 88fb is buggy, dev hsr_slave_1 [ 2612.544507] kvm [13622]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2612.559688] binder: 13626:13633 got reply transaction with no transaction stack [ 2612.586954] audit: type=1804 audit(1547869954.316:2634): pid=13604 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2422/memory.events" dev="sda1" ino=17239 res=1 03:52:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1600, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2612.637514] binder: 13626:13633 transaction failed 29201/-71, size 0-0 line 2801 03:52:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}) [ 2612.692124] binder: 13626:13633 ioctl c0306201 200002c0 returned -14 03:52:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x940000) [ 2612.838204] kvm [13644]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2612.875924] kvm [13644]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1700, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2612.926455] audit: type=1804 audit(1547869954.846:2635): pid=13638 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2423/memory.events" dev="sda1" ino=17256 res=1 [ 2612.987821] protocol 88fb is buggy, dev hsr_slave_0 [ 2612.992986] protocol 88fb is buggy, dev hsr_slave_1 03:52:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) [ 2613.115398] audit: type=1804 audit(1547869955.036:2636): pid=13638 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2423/memory.events" dev="sda1" ino=17256 res=1 03:52:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x10400, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2613.162652] kvm [13656]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2613.207417] kvm [13656]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2613.218055] audit: type=1804 audit(1547869955.056:2637): pid=13636 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2423/memory.events" dev="sda1" ino=17256 res=1 03:52:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x190f, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x8, 0x80) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = gettid() stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) r7 = geteuid() stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000003880)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x8050000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="b01100004500000026bd7000ffdbdf257410300004006400008f0f1e8bb197e0c8721cb84ec46bc4acff179b9ac829a5ed5a7ff35691dcbf1716230b98fd709ce5cd62c9868230555e08f1f75d", @ANYRES32=r2, @ANYBLOB="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"], 0x11b0}, {&(0x7f0000001640)={0x15d4, 0x1a, 0x400, 0x70bd29, 0x25dfdbfe, "", [@typed={0x18, 0x72, @str=':{vmnet0.keyring(\\\x00'}, @generic="9d971acf4039712dc2625506670dcc45f6b666f64c392b4147862a0cdf1df6c1ba71294e2855b79535fcd33621f2fae7a7a140fcc7acd9476140b742f46ef1163d977afdc73b1708a3c4ad04124614355cf4bdeadc8ca2373d9a497d4c56307275bba0bca9e2d2dfc266c263be2eafac45288d47abfcfaecc9cc9334b441d2fad952c9772c24d1fbe2640da3176e4798db52fce3dd5fb35a0a1a052fc3f7823edfdc17bd0d74d5136fe38b06031ce9fe74c69cb2969c7b035b160a2b768e6cd01addd687a2feff489f0eb10de177231754daeb5d55e072b4499dd1a29ff723d75bd9b93c0a02759ce19f6d52c498fc9071cdc063", @nested={0x1334, 0x4a, [@generic="2560f50a987ff4118b1e03b4dd0db15e423ab0358e35f665b8f9a84c740bcdc1b39524ad04b7f7f01d03082d4a36a5e9aab733b0462975909580170b3bdb55aab1d27ccec2e822dfe306b7aff85de2cc948c954d2f164059a02946b9bafd084d381539759601b0d292b771df5e3f8e8f2473e3a32c86f20564d0095e80d2c21b671a99f527be049c331cbe84d1b19db3ccd507f51e8e87ec1bb435806bd54cd90c80ccaac24d6429d82c6e4da85eab5bf7edf03267ec12f8b0902487d240dca81045504742f8dec078116108e1a96bad5f4de92a841f6137e3c0688e5e94b17445120dbf338d75e7bbf9dca0e44cdc63057f1a39a62d67098e91ae5f9f5b65b0c13739044874269f9c22d781d979dabd5b134491c1fd7b8785f052c6620dc7fa4fad648e15608441937826e2206d374ca93e286f77e40746e3448783af0f036929a0b085416f2cc31071237dd834f6207f1de60391d20411f6c5af828708dbd76a2ca6658e69876e1b027f4d21c8c94e44ee7c2fc2d02cf11a19e17ebf7c354f49959d32cc823e883a60a4408073cdaac2095a96bdd3974bfd73d3017840a3b4f0645005bd59a58f8fdf613a93b2e98236003db7864eef9c667275eb99fe8f1dd0b28daddc49bff1bb1652874501f088ee38d397f23ff2cb8944a596bc227c6686b2166057a8f05c1a48ce0ca6cddc4a50980ef09d9340d0f2d5fe0c63dbcf1a42e197d8461b027b79711db563bc45632588d4ec9be4ef2afab32c02f868e5aad739eacb34c0fcc32793a260a8da30de4f2a98c2e3f5d2388b314ac98218900fa782f765797959a32782b1d948480b94daf66013be5f8a2ab8a32b28b19b0f1b8074287f8386e3902ff9798c9038671d111b61359a84ce4067c34ff459ee897de4689c80e7b9c04af522462cb46465e0077c46e45c4112d308526bdf1cd61d7f7d3fd71d7ee0b27a52b422cc5f5b0d374086b17f1cfdb345b9d6991c379cff22976f75d4b837208253d751d42a278db391b455ba34ce4e23c2c475d25a081c57a3872efa55f6db25e848c977475ad6493b8ea735eede940b1050c939e1f2a6e8cb1c43d13e01bc18fc6023a66b0f36c6073314ffc55913b30b9df9eff5406455a975cf17e47aa4683b5cbb0eac631545f8c0636eea95f8e0838f2201f5594f76f15ce9cc4f59dd8d3167d22e165e7b968ec2bc9e92e183e835d6e25135adf8cdcb14fba887e4ff274c8f2504a18b586a2fc506ea7dfe0d688082c0dc9a5832b7ca76a977951ec662b98ea66f61903a32bb0cd71364efffa48e7da6f53bb8cd8e80b7028754880523442bcf441412f69d9d634369ef83f1a83f0137aad53a327763e6eb3fe9a46bce483824bbe400eb4411139f37a5e4293b9b355511506077d6492fe6213c725689846604f64528b3df61fe1eeccded42d899bb4941b7ea0ec6ad8b93648f946e24eb728a5debcb74dce809d3c91f2d9e228b714bbca5fa2c077995e1f148844bcec95e253ff1e5c9538e7c0cc256d6452eade1f2783128ca9cf70e21bb17dbf21229519bc8ced1a49f0f004d865f8f29cf633074360ae579be78269a02b9955cfc5a528b450d7a111d559f00968d770efadb79921e6c873630a419903aaa7ac235fc22e368b6cb3781e163388d6c6857519404572888f29fe2b5b271518dbe9227263f56ee3d474da885e1cbc0e7deb3bdc66f5380df232d7712c6e3c6efd31321a1b98ec8e23c584392c51c86c4b8e4d392972c7da96d7dcfacad9487f1652e1e5ee1610a75b5407e538f1342634f455edbf04620cc63a8301f391b9dcc7f68958dbc88a89cc4224f4c5e0bb06242da27fb858fc2f9ebed0c4b5edd8b0140aff1fadd4575e432adbebbcf4f15bf97a80d933f3180480d3d6cdabc7662b931fc2e7676583ad20771052a9f440f99abe60362f28b7dbb74b96fbc52d18b881ba8253087d6df4541ac81f28d25605ccc48689a5342818572d0ba9325b7e41031df4a5697883e8281cc2ef108887bcfa25b45c41f24d8c2064228deca3088e64af688b966326d8603882ea57151033210a7c7fe08918c9b361418bc808a53a5e605ff4cec74f50c388e5c3c18b060c5fd3c94a46295282115f323ba3c3cb2a58a1a9e6138078d0de4a038db84c1f876f00abc9b04d69dc34344c136561667cb68728a8aaa345b32c300469462a20b20be28a796c5665de3cf3c8636379ef554ce11225f1f4074c2e42fff20eb9682702a7b4b2650ee96d55b09f6eda2f18c8716212d74973677a9fbed9f6bf9a9444ffc0a96e9c0b71024e1cd1f91be04d3a407d0d275ed4f77482f50a2788f1cf0b8263e33977b437cd972492616d37e6ee4a79b12c7bf9233664ec55e37a0e80dbb56608c2b490fb9674c1ec33d12c39f56c2b4849760e7f2aa66a551292b508f1810195ab82d9d3d53ffc2005540740a988f0d011a894e9e06ac536ab8bc1717cab4e0e179de0ae07c43683276cd535adb873239b787ca4cf35896d586f3c9a91afcdcaea2b9618f80adc755eb4dd54eb7091830fcf2f214e410ebc9a20116fd467e2539f9dd2b147e603a120c782892de34e0ca60258e48993b13cf4b52be62ad39a2a3ba8c9ceae140b4dcacb47287e89e48da2c885b644b16da5d8501e454dbcd75fc1dbab802da512c0cd8869676c4b7919852716854d546311a7d9d6e66157e2fcb5805af4963363c9c00561b1d3168183810ddf127ae863004f566e93e068db52e51f840da41a4bba01bae02a13fb884d6028483e2c1d951486381225c4a3dc5177723dea26663d661a3fab6d8aac03649e18f0de27eff80b48d7ba0d0d7e0f8a7545c0bd411d767e7906fa12749aafe3778011d8c624871593afe4823fc36cdf758db608c523581749fb67bb0f310849515d526e79308dc6dc63c50085e5ed016398d7e8e4af929a84a2d54bce44c7e72256dd3384c0dbd772bbcd8ee901bc9852cf64daf5d8d5ecd0b870463edc8d703dcc11aaacf827990606eade878f25be4de03251ea790d710b39c69b0bc4d57ffa75215ebc6db97c06f7b92b734ec5f285db9ce4b2311cc67521c93c23526a18eea9979722e93355c8797d98c47acb33f88ff73c783b87d1ea7e6f2705527ba2ac6876fe9d62f432699c5f2529e494e6e96ba95a8c48ff8e3076754c6641b103b04c69a27d2b7054ff1c0eb6fffe9f4cdc5240be654c72597880ce9857872f3bf67e7907123d6369e87787d5d7ea9362a8187bb84d8800cae6cfd9d9fe5b1ba65583fcd0af2f787aaa0f04694c10d6a3dc3b21279e7550931ad3a47e9986b5feba0882c853a9e64e26461451f70c52df851304e4f7bb44033447e16b475c254800df7424107f462e4c0d5311f5fc9777abd3e519a5797d765dd36bc64f2902358d7d1170a2f93597a12ca99af2ee28651ddd267944b01eea438980e71ec15b7c04deb02688736e118b9107f40fbd7ca5b1a87835bb3e26fe211f91ec22a9086e0c7e363bfdd5d15031f8b3acd3dca23d8e57f8a493b023c1cad303bb60a30e1a1e0ff0e6aeef5aa768175cd6a4593e66840b410fe5d0e5306a60ddd1cd8172105abb64cba6d85cc1bfd714aef122ea144b8a7c2d216df77524c891abc15028039af046a7d5e2ac970308e5ae8dcaac9318836e2346ec9592ba556c9f155f7564bccd0959179680a96ac4e0b1eca9113b448ab5c3e5da185f45106888ec96ffca5fa6ebcb098ed0e7b328da113ea43baac5c6d8394778969029b3c86242fe35f8c4fe325e4a234049ea22e3f1bc2c2a75ce6565f6204593ba3a766867dfcad54acbfb00ab3a20978196011869e8cb59ae4b69b9b60f5e503eda0be736c09d3dba71d343153dd2c72d051bee296b5867565e3ed020a4fb56dc89f893cf61a94cacb2bfb6a5024d3c3ab983fe870a36a583f5aae4b317cbb5cfc9314380391e622d101b9263e91936bda9d7f9925c98b56a9041f7ecf72eba37301efe19f17cd5867cc27909801590511173fdcb906637017f344ac2e0c570ed0d78554bf03ece5cef8235db4eb74184beb90c6c8da49c51c70d7b7ea599fff92a296d38391bd517a9bd81d801593400c6dcf640638009a7d2db6f39530a59b7a79d02c86c5a4a812ec2978768cfe3309f3e1d047319a20223f625d0d39ab66b2d8e917d78722ae48e413dc9a01683ba005ec86f64229a5a5dc0d008668e23cbd9877c5fc61e036a7dbf9dca25458cac4c2d1ddd236804d98e56ecf89eab5914f070e22d427d8de4d36fbf8319ea92f7f9239396ad8a1e6a79d928fb6521377fc43a6b1d4855b2ba62b5d17d2675dd3160c125534da5b423d588514d92101767cd4bc42c4b6506c1e8c68de5b2c87eec3ff3bbd1f6a3ba63de65771cc9b3d75b34153f6e7e9e805511602af9b24b6cd8f46a5f09952ea5425820922bbc33e7abe59c9ad9ee0fb4f70d3bd92246f26bafc03ed86e6b1320209215eab335f8ce68d96888b7909b93a4a82973352bff915cc09d3b808318fd63148ce5ee63fe629d960bcd2263f88e6edf2d4f4d67543421300e307e2699ad6f6f44151393c865d8ca78e7b50663fcf9f1498bd9873765d6f4a3a8baf3f1b8d92155f8d532cbe5b650149f50db6950d9d7c0b5271bdef53337e4629e597cf35c4a3965efc8ad94dd6e618b735182d4da558a84632bfcb2cd70dc9453d8a203fe241c6bd0db76b4a74d5807f5e07b6035f7289d8f20693d1c83ab652f74a2bb54f0c8e722e119a4f8e4d3b32d8b43406d23851a8969f5ee90df32ac39a5242285fff62332b5780b360a47ea8818074bb56dfa947b34f2e19183ef2ee762a37a45490518d040f1299bbece58c9db40a9acf30b2f6ad8d659dfdcc734192dd7ad02e8f2fc640a9cecaec515d92bcf5175dcf55a683495a573115692785ac6f05a457c5a9be4d7574d6e5a9d46798a0ba1471cf11c166cd7c93cb5b0b95b35001bdfd55082dee3d0ff1d63f77c15054e72d7abc8dd5195160c84e47d29127a7d7b84cffd9188c1d23a12b1c961eb10745171ad77f305f64c57a52c36d0ff95fbdd329b2582fae14fc88c54ed3c5a61ec1c81bdb1d69126682300d45b252b5df554fe9cd4112c3a797e3d8d65d8a7ad02878ec4b04c011d74019e1c786a60b799adca364c808faa9165a2cb4a4fe49f57de853bc17349b882b97c072fab383ddc2b213dbf48368b4c6aaedd480b7a4c6965631bc6eadba8bfed699f7aa04f7d85a478026a27e91eb0318df51c25a2b7ae2cbe6303ecaeaf7765d109142f7e5a64a3de0d877614688d4168ade17c566a8bf76771457ce2e733071d9d230ba18cba2c336cf7a4521f3b3092a53e7849e6d8a4b3f95895aede852dcfaaaf87ff2df2b1976491a7314ff7b39290b1af8d1af8ec4ab21f4b08ed05f37a20f2478874bdd3b0b5c28b86de6c25221e03ebd76392f5de8c16ff0a225726bd3ffda8305c2ac53dd7a687195d0c1e832563abf094becf2cbf420b2d0b2facb611eff42224906ed1b83a9004bea251700fa7ebbbe38c63f344cabfac8c5d6ed68f6f9e28969355f29197a24ec07d29f6c40f259ba39e022249cb3e689fc868ee5a3277801d07ce662c02f9dbe54da8c23d52982b92bdf2c80d2ce381ef0d4110c09145dad6da242cb486369226baad7028f3ac3785a61a01c89202ab074a2ed547dcd8df09d4d1306c9a15bde410dec5ebe5fcd6e226571f4e9c627d28691b1d69d957962193db8da6f5cc904bbb23f2e583db475093dfb6e1dcc64cd6c3190a35091c768d654e58a55e0412603a644e0", @generic="1941604f0b1d1d8f85ea798dae2c75f20d77f62cb2f0ef5e2eb21749ab4ac02ad8ecf026106b4f82c3f599102f04e86167e00439f2a40dacd0f35426e8f73db149676120c49bb40965116477da6d0a781b7c0bf0f28d7b590fc44d9b3c3bbca0004a32513b47838c8a6e38dfe41f93a7381088c9ef65af778d21df5f64422ea1482a48693267814075fe6ebc53a97b34fb5308839148dac8e1344b01c5b0085d532a56f5ffe27dfff14d026b4afd43bda03a0c747b100d89df761f8fc1", @typed={0x8, 0x23, @u32=0x4}, @generic="e308c356a6c96ae69896685813d69f700299f8c0f444e424e8183946c17b19c3d07050225abf461dd3e57e12eda282bc6fba16f76f274cccf9e1230eb556757f1710308f88bc05971e85623f8239f3a3e096b1145f98c236c23b4bdd46818e11f3a3cab20a0305666f2bdf64823e2ec21c4afcb911f5a5af5ae6549b7c302af6360d70c4fc26a36c7ced5421ef27648658182a80b14ad9f3b1627e1e7f8130219a17bfc162ad9e", @generic="b8185d4c566a361fdf9df3240254be0f187f2988ed417d648451eb4f1764eddb68cc2b9a156eb6d2653a6cc2933ccf3c42a28eb722b3f7bf9392c7898a7f0f79076907c4ed6fab3c56fdf7805c30112ff6978565040433e94d3642d16d573ffe1234b0c1693b7c0c8a7c8285f5eab866ce8648e7e7ab7a16f6a52e9686b06d4c825cb26b521c530a33c87dbb6063a7f4102f868f90d73a3c480695bc3a52959b3d024fc3", @generic="77de9fb2ee2ef980e5ad35c514eaca417510132d9c519da51e054f98f9c0bc6a31573fbc47fe73833c90add1b4cfd113ad11648f65db2f043a277a9e2375", @typed={0x8, 0x3e, @fd=r0}, @generic="0b68b513b2cd0a38f7a8778ce4a1c0acd096cadb6b5a4297ad52d3ae7b1b277b0ef75d866e1e81467ef75df4f8cbbce8727daed538bb15cdb94d6fdbffa1e5cede8f11efdcc04a81b778b286ca4b965267db525fefb35f93dcfadac6c7920692d83fa3d18e3fe48e0d7f4a4c96c0a684b965c46947628b96608b3ba0bec03e87331e7dbce5f84186d08a088732932fb0ba94e8ac5c837449d0848c8693ea4c73a9b4d79d1996c8d3028930dc74b47defa6a51f52ac6faf9c8e8a3b09c70bf723de676a26dc02cd85681dd4c690e83dc00b6485ed633a36045812"]}, @generic="df65c6cab1bd912cba54b2ff0365d259024e7d4f53703f8c29a5818bdc32d5112849ddd113a38c1c9d3c53450bf49434ecd9ff13ff0c95a964e26ad0bade3ac8307e072e5ea8be7e350d4c9bb3b943d95a80a9ba3cb979d16bd7923c23a6b8da4d6738189d73e5e3a87f12f45cb9ecc954c3d4f542166a080640fbcc916c64e8486915d398fced76ae74c1407b0aa66a7fab63df2fa9d9f16ddcd8b310d3085cae3fd00ca6a642cdcbb376e578ef287b278d692148", @typed={0x4, 0x16}, @generic="67dd47df6bef153cd25a039cff9a545337962482d96f94bf545fba410b6a4b0355abaa533bfaa5f16efbe17a07d940a8e548a2e632677f500a5e078d2c5e6e86a8f210ff045adf649bdfc22d87373b17321dcd119c5f82d16e5f670cc66931d40de02aaa7cd4303b3dc52ec7704e2a98a013e7e103fb3cef4173057479e1229f13feca4e0bb977100721578458cd801600ee1a12efd675ca949a273d7f6907515d8a0ecd27e2cf67f81753abf302c8065c8da9e092ad32856f690b4386", @typed={0x8, 0x22, @pid=r3}, @generic="a8f439ab9e"]}, 0x15d4}, {&(0x7f0000002c40)={0x4a0, 0x22, 0x814, 0x70bd25, 0x25dfdbfd, "", [@nested={0x10, 0x83, [@typed={0x8, 0x1b, @uid=r4}, @typed={0x4, 0x88}]}, @typed={0xc, 0x16, @str='self\x00'}, @generic="fea23f9fac5001b2ef05681a14f1b5c690067caa9ba03b466073c6620487de74ee4fda13e63a205b0f291a909f6c8278a4b0e828655618d3abe5cc09bae6a76433855a9e3bdbc14458d87a2d32d7192b71bec578cff6d3687209000a39c4e3d180a50c1639955db7a22e0398eb2e8841bed022c75b0d63be944ac8bd8047cd438874cef96c803fcde757a5cec99bf7cc645b432aec65d43cdf991aff1ac67dce01779164fe4030604541ce4940ff2d1a7d0ff2827ee68184af2298545cf2", @nested={0x40, 0x37, [@generic="b5f614b68783d005f17e76cadf193c51b050c1a05f887df58dc97d411d438d35ebae0f9d407035d4987b935fd2d98d6f9b3695a7b3e5078cc36d40"]}, @nested={0x254, 0xb, [@generic="b2b312a808ff4083fcab0f5de2bd683d767e6cd217c7c8af82bc549793d2122336b4a2ecaab05718760762700b5b98b5770aecc465f16c27e37cf08c94563c2488e514e047460d47ae8325806dd1bf1de0baa6f3d6cf14105751a2f06c2b62218b0414a366f3cb3e4a201398ef8868a659afe5f5e2449fd5c66896ce1da64f14f6d3350633e971a2f537d078456f2807a12172f25db3", @generic="ad01e01ec1babe43ea96d8772252ff593f98984cb9a52a84314a06d7b3019bb011b3664cc91420997cfd0ad86de893984005e2dd6a5237fe09d121bde2e242ad3ef9a2320dba0365f7d5c1c863715c729604d8d554b06e78dd99e5647bcec71b39a9feef6c2b2aa0d896c6151d4694c4491254adcdd5f865c4b8df7d2196f3", @typed={0xd0, 0x96, @binary="d25c9c78bc34a9b5f4be8b6c9ffc4a319f34100478f5b131439904d6de8aeb242bb7f46b1e99babfe5a34e5254df63279165e1f93512b0c89817353362c69a8a56472e1d3087d7ba562acfe119b2fc9fea4fc4c103f559dbc0801b682d188e81143b0eb6f084a1d0227d7682dad56f950f10c77842491d226aa79271e1e6cc1af068c6c62508d58ae7c6c4ef4260cb59242b352fc48003f22bc6208e77754d4c8d576a95484c636e92fa338f5188ee93e97e49a6543f396609a0d9a9ceae7b29f536f5fac17b5cac59c020"}, @typed={0x8, 0xf, @fd=r0}, @typed={0x8, 0x6d, @ipv4=@loopback}, @generic="7f66e92bf15f6f969c9c44710d006e309aa75858fc8bd9ff99d77dd2c776dc8e97f9b972474393588777d9bae49f7e0defa02aaea7e3b953352ec1413878de90710e9e74132b47d8f77e0c63a2f72c78b702cfd52bf5f7743fc4ec"]}, @nested={0x120, 0x5b, [@typed={0xc, 0x33, @u64=0x4}, @generic="f7ccb2442b51eafde10450679f8b", @typed={0x28, 0x8f, @binary="7b467a2c7bddd401925cb6d3b3a662ba84755657d4bff1cd42a3d779528ec1a1730ec7"}, @generic="7d5a787b53f22710cd65dffc8a1f016e0fa1168b1b4f8835d0243242709c096b0fb4fa3dafa183a4485c23991c68bb484a7709df4f1001b070cfee1c53eaf4cf41285e8d7782dbc0511c2aa16d37432702f3c35423bcab1a56f1ab0233336884db0313d6e265b0640b89fe7809078fecf13c90bbdc032ab5d1d048fe4c79dbfb20853c358b9431dc1fdc743fd5531286203de7922889df2fba1511c3f5eddd65904dd545c863aa36047a8ef38ed448639975074b220c9ae54ecb4a554cbbfb154ee9e5ae813f2c7472a41763f9e7cb2c766839eadd579c"]}]}, 0x4a0}, {&(0x7f0000003100)={0x6d4, 0x22, 0xc00, 0x70bd28, 0x25dfdbfb, "", [@typed={0x10, 0x64, @str='*selinux]\x00'}, @typed={0x8, 0x30, @ipv4=@remote}, @generic="0bda0d6d4f2ec04b22f6c8eb6197a6837ca0c352396e51278c8e0ddfd778b4317b5813dd6b346094ab05666de1b072c0f2e87d8ac0", @typed={0x18, 0x96, @str='keyringeth1wlan0\x00'}, @nested={0x18c, 0x37, [@generic="026cc97bb5e84a960d0a72b739539e727cc2af5cce255746319485d2d831fac67ff4463b5758cddefd568da36271e9d18931fdfcc6b1dc15eb98185b9f90b671912adf18cfc5ffe371e20dd5b73772ab299ae62c44ee7274a123a0df615b2a5ae24f062e4259e2426d255bfa1013f1b107042395720f2fbb6e199f99d4562d", @typed={0xc, 0x65, @u64=0x7fff}, @typed={0x8, 0x57, @fd=r0}, @generic="30258059e64d7acdbea32fe0df2e777cb45e2fa866c834b11ba6da899ba02d395c41acf9e42edb259cf384372d725aa121c33f99b39bcc0560909f3c8d4c67d8dd139853c28b34549cd2a810b929c44fb389f099878fbdf08d581e4764177a7792a06ba7ca74d90b0b6541813adafce705449ae5f09e76348a69e28746ae8d16009677388fe57df8a6462e379541963642a820171969e8167d80b75b557f314ef47f9b8a3fc07524ffb9753038a84333b1913bb8a4c49363f4d2d8d6c6d79372e04135eab43029d21d817f2d51a54d56b132a429a65c2a014fc89517ce0256371aed8731865a16aab5b0f7c1e4f8f8ce54ea"]}, @nested={0x100, 0x6d, [@typed={0x8, 0x29, @u32=0x86c0}, @typed={0x14, 0x73, @ipv6=@loopback}, @generic="611f5aebef587592a24d94612784dfc466f33c0b88de4880957ea6ecb14733d988cf2d98abea1272d498e7e19df377d5e79774fae2675f81ab12181ac4563702e9c405dd77ff82abd66cf71f9fc509c19299235584fff09a671697cfd3f6c7d827be579dab577d0936172b04426a405a3c7829e62ade02ab982490825e1427dfa956337eb4cd6876f93379e6bc4990dcaebc436dd99fbff162dcbc394ff4d8ffa5ebdc639b55103d246e40484b3f69e6e0388fcdc57eb4b1ac638df8f775c7b0c2d7772687acf8231ded98815a1ca7926e5ba5b9a803bf10628357dc5c92"]}, @nested={0x9c, 0x27, [@typed={0x8, 0x4c, @pid=r5}, @generic="82edc4b508c35dc660b3fec913f5d96b565224acd08be9feebf703bc1a6bfee0097d97c6e30671573f4edd058c1162b5f2c062d08d312784cb6bade5d58acee12c19a8de535eeb2cfb9dcf7f89a52062c046cf25dfd7bef33617306041b93ba6a8e8740b1e13c67a4ea561c0d37f9730f9d5c8433c33c3582df54b82", @typed={0x14, 0x8d, @ipv6=@empty}]}, @nested={0x334, 0x59, [@typed={0x8, 0x2, @fd=r0}, @generic="e708a466f005b624073eda91f4f32933d60d45468a663be8c89f907613daa2d2e1a8363a00dc9aa3cbb22ec7af946e4f8f633cb74397295b343e25ad5cf2580db9cea7c3128c050415011178fd129fa99a39448efed1d7a85696d1c3fe8b9d3005289bc200bdae4b73613e7482598ecc5078ff66371eee882644dcf4b2584c1fc4287d94fdae4fae20537f16b9f95af43458851190d8ad7198b769192346d6d4e0fbcaa6fb", @generic="2b0a389d18062c78df61920afcf4264ca74afe0825d163fdcaa1903866e817b5fb7f48d297378b4b3111b1394a36086c4697a63fb5989dcb5b5edfb18e546e30ed7bf632b6c5781b0a63735dc5c98ce4ba7f0cb68f661c9e326e5a44dcd650e83d828c090da50e4c1de68a503c5dfdd6", @generic="9b248d167eb8d6fedfaea1fd0bbcbe67689dd1313f7e3925407118079fe536f3890327be557a6d65e84f6827acba48660457b326d6c286371ebc4606ecc15f91ed27b9560c8339", @generic="da8e11f74b6fd168e96700cb5a39d8e76efef797b3ca2455bae95b91cf2cb1139babe77f9c0b8db789d072a77020a0b1eb46d1083dfa1284159e149d38189674132f8acd2b7d4c73209a6d33ea57c3c1e3a5b0d6cac6ba98727763435be47fcfb2fce9a96eabb206efe459d635f7e25d13b9a29ffa6a3fd55451f64a111b2fd011190fde9dd7f41dbb25ae2e1050a0135fe19f57724661df9b9a02e9ec908c05a41debd0e77baa860fefc1be952ea01302b627a730b8a43a6ee7c788c48f73c4487b119d3f1bedfce4609616e8cfd4a7f2dd31ce14ec5db42031aaa0692a57e574349335c6ddc230a777c54f3d9f2a20", @typed={0x8, 0x6e, @u32=0x5}, @generic="6b0e2a9cf186e150ec2c1ac880839c2cc356b187c183ab0bbc48a901953ab58111c9a9c57a79b9c40a78bfce866f483df7df26a549687f0f9789414f33332db7f05cd21ab5f72423bf394de2c616684cbb86219eee7bd71150a095cead57816f2f1912143f4914263ec8db43c21b9dbd3a222d", @generic="0b520ea88153caf591acc1d9f61e1023393049864fd023ab087e82b2c647b7fa3bf38f05aaf8b64cc735cf0daa900f5f680c137a647bf78c812bf1c436ceefa07be90cb9624ecd95892bb8b2a7ef0350dbc6b918d839fddaaaccb4c1a843"]}]}, 0x6d4}, {&(0x7f00000002c0)={0x38, 0x40, 0x0, 0x70bd28, 0x25dfdbfe, "", [@generic="4c45aa33a9817c0170051ed68dcb7aed1b1276f469b62985224a2fdb72381513f7cfa40219a82f25"]}, 0x38}], 0x5, &(0x7f0000000400)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x40, 0x8010}, 0x4040) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x18, 0x0, 0x0, 0x0, 0x1000002b9}}], 0x0, 0x4000000000000, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000038c0)="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", 0x1000) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) [ 2613.308415] binder_release_work: 4 callbacks suppressed [ 2613.308422] binder: undelivered TRANSACTION_ERROR: 29201 03:52:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) [ 2613.436921] binder: 13669:13672 ioctl c0306201 0 returned -14 [ 2613.474774] binder: 13669:13672 ERROR: BC_REGISTER_LOOPER called without request 03:52:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) ioctl(r0, 0x100000890e, &(0x7f0000000080)="a874bc493c163f3188a070") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40, 0x0) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000100)) recvmmsg(r4, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dd2b5b20813f421eea3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) [ 2613.522211] binder: 13669:13679 got reply transaction with no transaction stack [ 2613.562236] kvm [13675]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1f00, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2613.580765] binder: 13669:13679 transaction failed 29201/-71, size 0-0 line 2801 [ 2613.610630] binder: 13669:13679 ioctl c0306201 200002c0 returned -14 [ 2613.623687] block nbd0: shutting down sockets [ 2613.647136] kvm [13675]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 03:52:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2613.844532] kvm [13687]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2613.902492] kvm [13687]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0xff600000) 03:52:35 executing program 1: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000480)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r3, 0x2}}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00\xc9|\xe7Ac\xff\xc9\xf1A\xd7k\xcb.\x10\n8\x88+D%\xe9\xbfu]\xed\xea\xa9B\xe3\x94\x82#\x12\x06\x93}f\x92\xd7\'3,\xefAc\xe2\x87\xc7]%\x0f\xf7-Z\x85&\x7f\xec\xfc\x9d\x88\x12\xe5\xbdt\f\x8d\x8e?\x17\xf5.', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0069656d6f727920fa1bb03c576a875b5db175121191161e5f201b2c128432f449fbbd0a314e12209b227eb23109daf302cd5d76fae8561be19d8f6a02613123d726d38760a42f102c2d540ad412ebdaa7923ded7814c0adf394bf5739b2"], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="006d656d2f728935"], 0x200600) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000580)) getsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000080), &(0x7f0000000100)=0x4) 03:52:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 03:52:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2010, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(r1, &(0x7f00000003c0)='X\x93qY\xf0V\xe9\xd4C 5\x15\xbb\xa8(0\x8a\xf7\t\x03\x86\xf2]\xec`\x88S;\x1f\xc5=\x92\x02\'\x91[;\xc0\xd7\xd2\xfdh|\xad\xf7\xcf\x12*\xe1\x84\xd8\xbb3\xe2\x001\xcd\x15\x1f\x96\xa5C\xbb4\xe3=,\xb4\xffo3\xc9\xb1\xdb\x14\x84\xc6\v\b\"\xa0\b\x85\x1a\xd9F\x84\x00\f\x91\xe5\xe7\xb7\xac\x8bW\x199:g\x8cA;D_\xfd\xc73+\xb4\x15|M\x82p\x96\x9b\x97\a\x1c\xfdp\vub\xa6Lq6\x1e\x14\xca\x8d\xba\x00z\'\x17 }\xc2\xb9\x94ge\xbc0#\x05\x8e\x91\x1a#T\xa1\xc3\xc8\xd4\xac\xb2\xee@\xe8\xef\x11\x83\xb2pj\x89\xddlde\xdb\x91{E<\xec\xad\xb3\x9d\xf3Jw\xcft\xa4\xa7T!\xf4J b\xc3!\x90\x15\x893w\xc30u\xf4\xc0b', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="006d656d6f727920d7388f7ffa9973c341be5e059614970e3f4ba19cb436f55da76700000000d280f75ce29c5b63e99715634f01533489795185fcd3d4b519071759bc6451a3edb7563d8a433b1570883001d383627ce8d764a890d4b3988c2a4583e208288a967ddd2f39d755553ad5a30fabbc33f1c55d974e6530958daefe80ad159b672ce2b03e5cd1f6881cfac23df29cb60adc0712635526c976f7aa5dfd4caa10c7077084"], 0x200600) 03:52:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) [ 2614.281653] binder: undelivered TRANSACTION_ERROR: 29201 03:52:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x3f00, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2614.374863] binder: 13716:13718 ioctl c0306201 0 returned -14 [ 2614.401749] block nbd0: Device being setup by another task [ 2614.410245] binder: 13716:13718 ERROR: BC_REGISTER_LOOPER called without request [ 2614.456747] binder: 13716:13723 got reply transaction with no transaction stack [ 2614.480267] binder: 13716:13723 transaction failed 29201/-71, size 0-0 line 2801 03:52:36 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'nr0\x00\x00\x00\x00 \x00', {0x2, 0x4e22, @loopback}}) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}, 0x1, 0x0, 0x0, 0x4000000000}, 0x40000) [ 2614.526869] binder: 13716:13723 ioctl c0306201 200002c0 returned -14 03:52:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) 03:52:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x7a05, 0x1700) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000580)={0x2, 0x0, 0x2080, {0x1, 0x105000}, [], "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", "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"}) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x7fffffffefff) 03:52:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 03:52:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4800, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4c00, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2615.233246] binder: undelivered TRANSACTION_ERROR: 29201 03:52:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 03:52:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4001dada0000001f8800"], 0x200600) [ 2615.322309] binder: 13761:13762 ERROR: BC_REGISTER_LOOPER called without request [ 2615.386295] binder: 13761:13768 got reply transaction with no transaction stack [ 2615.404111] binder: 13761:13768 transaction failed 29201/-71, size 0-0 line 2801 [ 2615.449302] binder: 13761:13768 ioctl c0306201 200002c0 returned -14 03:52:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x6800, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 03:52:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 03:52:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x6c00, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 03:52:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0xffffffffff600000) 03:52:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x7400, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 03:52:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='mepor6ts\x00\x8f\xd1\xc5Ld\x93x}\xc5\xb0[\x85\x88Fb\tvY\xf0E\x87\x8f\xfd\xc3\x80(A\xce\xbe\xcd\xeau\x1e;\xf7F\xef\x99\x94@\x10\x16l\xd3\xf6\x8b\x9c\xc7\xad.A\x95w}\x00\x95h\x05~\xc5\xe7F\xa1\x83\x89\x16\x80\xb4G+\xe8\xeb\xeb\xe0\xb0\xaa)\xafz2{\x93\x1d\xe7\x16\xc8\xe6\xde\xe99\xc4\x1e\x9c\x97@p\xb2\xf4f\fB(\xd6\xa4\x89\x99\bl\v\xbb\xe2\xa4', 0x7a05, 0x1700) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2616.139431] binder: undelivered TRANSACTION_ERROR: 29201 [ 2616.222150] binder: 13804:13808 ERROR: BC_REGISTER_LOOPER called without request 03:52:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x7a00, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2616.270015] binder: 13804:13813 got reply transaction with no transaction stack 03:52:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) [ 2616.352870] binder: 13804:13813 transaction failed 29201/-71, size 0-0 line 2801 [ 2616.425626] binder: 13804:13813 ioctl c0306201 200002c0 returned -14 03:52:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xedc0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x3ad, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:52:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) [ 2616.667259] kauditd_printk_skb: 14 callbacks suppressed [ 2616.667274] audit: type=1804 audit(1547869958.586:2652): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2429/memory.events" dev="sda1" ino=17221 res=1 03:52:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xff0f, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(r1, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2617.080529] binder: undelivered TRANSACTION_ERROR: 29201 03:52:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x2, 0x5, 0xffffffffffffffff, 0x6}) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:52:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 03:52:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x40000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) connect$can_bcm(r1, &(0x7f0000000280)={0x1d, r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="dbc4dbd89ec301d9"], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2617.283185] binder: 13851:13854 ERROR: BC_REGISTER_LOOPER called without request [ 2617.329729] binder: 13851:13859 got reply transaction with no transaction stack [ 2617.364339] binder: 13851:13859 transaction failed 29201/-71, size 0-0 line 2801 [ 2617.387831] net_ratelimit: 24 callbacks suppressed [ 2617.387838] protocol 88fb is buggy, dev hsr_slave_0 [ 2617.392884] protocol 88fb is buggy, dev hsr_slave_1 [ 2617.415128] binder: 13851:13859 ioctl c0306201 200002c0 returned -14 03:52:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 03:52:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x400000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2617.576756] kvm_set_msr_common: 20 callbacks suppressed [ 2617.576771] kvm [13867]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x160}}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0)=0x10001, 0x4) [ 2617.686260] kvm [13867]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2617.714823] audit: type=1804 audit(1547869959.636:2653): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2431/memory.events" dev="sda1" ino=17280 res=1 03:52:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x8000a0, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) [ 2617.894348] audit: type=1804 audit(1547869959.816:2654): pid=13866 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2431/memory.events" dev="sda1" ino=17280 res=1 [ 2617.984942] audit: type=1804 audit(1547869959.836:2655): pid=13860 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2431/memory.events" dev="sda1" ino=17280 res=1 03:52:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2618.122131] binder: undelivered TRANSACTION_ERROR: 29201 [ 2618.123344] kvm [13887]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2618.130918] audit: type=1804 audit(1547869960.006:2656): pid=13860 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2431/memory.events" dev="sda1" ino=17280 res=1 03:52:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0x0) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:52:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00moyy '], 0x200600) [ 2618.203774] kvm [13887]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2618.302386] binder: 13896:13901 ERROR: BC_REGISTER_LOOPER called without request 03:52:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) 03:52:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x100) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000100)=0x1) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], @ANYRESHEX=r0, @ANYRES32=r0], 0x30) ioctl$TCFLSH(r0, 0x541b, 0x709000) [ 2618.349605] binder: 13896:13904 got reply transaction with no transaction stack [ 2618.365516] binder: 13896:13904 transaction failed 29201/-71, size 0-0 line 2801 [ 2618.387577] binder: 13896:13904 ioctl c0306201 200002c0 returned -14 [ 2618.427805] protocol 88fb is buggy, dev hsr_slave_0 [ 2618.433021] protocol 88fb is buggy, dev hsr_slave_1 [ 2618.438248] protocol 88fb is buggy, dev hsr_slave_0 [ 2618.443333] protocol 88fb is buggy, dev hsr_slave_1 [ 2618.473802] kvm [13907]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2618.493629] kvm [13907]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2618.507264] mkiss: ax0: crc mode is auto. [ 2618.577265] mkiss: ax1: crc mode is auto. 03:52:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x400080, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fallocate(r2, 0x0, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0)=0x1000, &(0x7f0000000200)=0x2) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) r3 = fcntl$dupfd(r2, 0x406, r0) write$UHID_INPUT(r3, &(0x7f0000000480)={0x8, "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", 0xfffffd7b}, 0x1336) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000100)={0x3, 0x0, [{}, {}, {}]}) creat(&(0x7f0000000180)='./file0\x00', 0x100) getsockname$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) 03:52:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) [ 2618.602562] audit: type=1804 audit(1547869960.526:2657): pid=13906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2432/memory.events" dev="sda1" ino=17280 res=1 03:52:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x3000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2618.736383] kvm [13924]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2618.747854] protocol 88fb is buggy, dev hsr_slave_0 [ 2618.753006] protocol 88fb is buggy, dev hsr_slave_1 [ 2618.758232] protocol 88fb is buggy, dev hsr_slave_0 [ 2618.763344] protocol 88fb is buggy, dev hsr_slave_1 [ 2618.769418] audit: type=1804 audit(1547869960.686:2658): pid=13911 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2432/memory.events" dev="sda1" ino=17280 res=1 [ 2618.807925] kvm [13924]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) io_setup(0x5, &(0x7f0000000000)=0x0) io_destroy(r1) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="d93f038af2958d1d9cf3b95b98877d9387d84f8213416d46f24fb7c5cda33694b8f029926e116ce1f7926a507cffc6048f2932ff47648d0c898daa0b52d3db7b60e6e0ef8e897ea962efda7ce1a6067445d77fce2c500b876e7f558bcf13b881adfe8da199d5a456ca860ab2ccc259a2e42d78d7c6d90933bb8188fadcad18aa5812950250490965f5007513e97fdda21848a0f503ccba78f91fee6ca7cb61ec43997aeb75cfee1198d08a0e2c9b5c5e315559de7521453ec5eba10cd4b3f91675d95eba5f363acdaffcac45206941660aa5b58ee3ab5ac50bafab012cb13e0c91efcc6ff15a6cfd6731f96b40506f56", 0xf0, 0x0) r3 = request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='selinuxnodev\x00', 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x9, r3) [ 2618.838318] audit: type=1804 audit(1547869960.706:2659): pid=13906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2432/memory.events" dev="sda1" ino=17280 res=1 [ 2618.915377] audit: type=1804 audit(1547869960.836:2660): pid=13906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2432/memory.events" dev="sda1" ino=17280 res=1 03:52:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000580)=""/4096) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) 03:52:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2619.131983] binder: undelivered TRANSACTION_ERROR: 29201 [ 2619.201974] kvm [13940]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2619.213698] binder: 13949:13950 ERROR: BC_REGISTER_LOOPER called without request 03:52:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x5000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2619.263477] binder: 13949:13953 got reply transaction with no transaction stack [ 2619.288612] kvm [13940]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2619.296926] binder: 13949:13953 transaction failed 29201/-71, size 0-0 line 2801 [ 2619.329372] audit: type=1804 audit(1547869961.246:2661): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2433/memory.events" dev="sda1" ino=17282 res=1 [ 2619.357964] binder: 13949:13953 ioctl c0306201 200002c0 returned -14 03:52:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}) 03:52:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x6000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xd9, 0x2241) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000040)={0x10000, 0x7, 0xc0000000, 0x3, 0xc8, 0x3ff}) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:52:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 03:52:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10002, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x7000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:41 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x3, 'dummy0\x00', 0x4}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r1, 0x541b, 0x709000) 03:52:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 03:52:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2620.043677] binder: undelivered TRANSACTION_ERROR: 29201 [ 2620.130719] binder: 13985:13988 ERROR: BC_REGISTER_LOOPER called without request 03:52:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x8000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2620.177854] binder: 13985:13989 got reply transaction with no transaction stack [ 2620.192144] binder: 13985:13989 transaction failed 29201/-71, size 0-0 line 2801 [ 2620.210231] binder: 13985:13989 ioctl c0306201 200002c0 returned -14 03:52:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 03:52:42 executing program 1: fanotify_init(0x40000000d, 0x88000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="026d656d6f7279237325b29623202f70696473202d6d656d6f727920"], 0x16) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x76, 0x0, 0x1c, 0x5}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0x1, 0x88ff, 0x80000001, 0x200, 0x1}, &(0x7f0000000240)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000080)={0x5, [0x3f, 0x0, 0x1000, 0x3f, 0x0]}, 0xe) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="0718c132b997c7c4a28e8c9954aa5947127f47ae8e74f18c94c9118a56a38de792b1e138a1ba13c07b1f33f4ae5024493865e118a8c07b0fc84a72047b8ff51ffe11517e6710d3b86a37"], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000100)={r3, 0x1, 0x1}, 0x8) 03:52:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x9000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008932, &(0x7f0000000000)="0adc1f023c123f3188a070ffc614aced1f4d1ee1d67fc8601c9467ab6120b5329ff39477477740d8408ca07ce304fb8b892beb95afd130206153ff14") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}, 0x200000000}], 0x1, 0x0, 0x0) 03:52:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) 03:52:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 03:52:42 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2620.985458] binder: undelivered TRANSACTION_ERROR: 29201 [ 2621.126955] binder: 14028:14030 got reply transaction with no transaction stack [ 2621.197504] binder: 14028:14030 transaction failed 29201/-71, size 0-0 line 2801 [ 2621.233531] binder: 14028:14030 ioctl c0306201 200002c0 returned -14 03:52:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x10001) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000080)=0x4) ioctl$TCFLSH(r0, 0x541b, 0x709000) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @multicast2}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x20, {0x2, 0x4e23, @remote}, 'nr0\x00'}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180)=0x824e, 0x4) 03:52:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xb000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00\xcdCm\xe9\xae\xb0zd\xad:\x838\xd6f4\x9e!\x834@\x8c\xa1\x8f\xfc\xfa\xc3\xc0\xf4\x9c(\nS-\x9d\vD\xa0\xf1\xaff\xff\n\xed\x850\xf9x\x16\xddbf\xc3\x83\a\x00\x00\x00>9\xdf\xbdq\xea\xfal.\x11f\x186\xa9|\xfd\xf8\xbf\x81\xc0V\x8f\xb7E\xe6\x92^I0', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 03:52:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2621.349120] binder: release 14028:14030 transaction 1297 out, still active [ 2621.365095] binder: undelivered TRANSACTION_COMPLETE [ 2621.461719] binder: undelivered TRANSACTION_ERROR: 29201 03:52:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000580)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x181}}], 0x1, 0x42, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x4000, 0x0) r3 = geteuid() getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000680)={0xa0, 0xffffffffffffffda, 0x8, {{0x3, 0x1, 0x38, 0x7, 0x2, 0x654, {0x0, 0xffffffffffff6159, 0x1, 0x5, 0x8000, 0x0, 0x9, 0x3, 0x5, 0x0, 0xffff, r3, r4, 0x7, 0x5}}, {0x0, 0x6}}}, 0xa0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x20, 0x2}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80000000}}, 0x80000001, 0x7, 0x16f, 0xfffffffffffffff9, 0xffffffffffffff7c}, &(0x7f0000000240)=0x98) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xcc, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9d6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8ddb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x45}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xc0d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000640)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r6, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYRESDEC=r5]]], 0x1}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) [ 2621.505823] binder: 14037:14041 got reply transaction with no transaction stack [ 2621.521859] binder: send failed reply for transaction 1297, target dead 03:52:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xc000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2621.563777] binder: 14037:14041 transaction failed 29201/-71, size 0-0 line 2801 [ 2621.591802] binder: 14037:14041 ioctl c0306201 200002c0 returned -14 03:52:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x237, 0x20, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:43 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 2621.696057] binder: release 14037:14041 transaction 1300 out, still active [ 2621.721883] binder: undelivered TRANSACTION_COMPLETE [ 2621.737332] binder: undelivered TRANSACTION_ERROR: 29201 [ 2621.743901] binder: send failed reply for transaction 1300, target dead [ 2621.840329] binder: 14058:14061 got reply transaction with no transaction stack [ 2621.863525] kauditd_printk_skb: 11 callbacks suppressed 03:52:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xd000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000080)) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='pids.events\x00', 0x7a05, 0x1700) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0xa8) [ 2621.863539] audit: type=1804 audit(1547869963.786:2673): pid=14034 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2436/memory.events" dev="sda1" ino=17218 res=1 [ 2621.895060] audit: type=1804 audit(1547869963.826:2674): pid=14064 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2436/memory.events" dev="sda1" ino=17218 res=1 [ 2621.897310] binder: 14058:14061 transaction failed 29201/-71, size 0-0 line 2801 [ 2621.984980] binder: 14058:14061 ioctl c0306201 200002c0 returned -14 [ 2622.039191] audit: type=1804 audit(1547869963.966:2675): pid=14071 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2437/memory.events" dev="sda1" ino=17268 res=1 [ 2622.049294] binder: undelivered TRANSACTION_ERROR: 29201 [ 2622.073469] binder: send failed reply for transaction 1303 to 14058:14061 [ 2622.091536] binder: undelivered TRANSACTION_COMPLETE [ 2622.117581] binder: undelivered TRANSACTION_ERROR: 29189 [ 2622.140152] audit: type=1804 audit(1547869964.016:2676): pid=14071 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2437/memory.events" dev="sda1" ino=17268 res=1 [ 2622.220885] audit: type=1804 audit(1547869964.016:2677): pid=14076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2437/memory.events" dev="sda1" ino=17268 res=1 03:52:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xe000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00b9ed9e0f727920"], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:52:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 2622.460022] binder: 14083:14088 ioctl c0306201 0 returned -14 [ 2622.484519] binder: 14083:14088 got reply transaction with no transaction stack [ 2622.522005] binder: 14083:14088 transaction failed 29201/-71, size 0-0 line 2801 [ 2622.561349] binder: 14083:14088 ioctl c0306201 200002c0 returned -14 03:52:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xf000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 2622.587790] net_ratelimit: 16 callbacks suppressed [ 2622.587799] protocol 88fb is buggy, dev hsr_slave_0 [ 2622.598027] protocol 88fb is buggy, dev hsr_slave_1 [ 2622.603205] protocol 88fb is buggy, dev hsr_slave_0 [ 2622.608348] protocol 88fb is buggy, dev hsr_slave_1 03:52:44 executing program 0: syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140)="6c3d717a321a02d9f42aad1c4f8cea2f", 0x10, 0x1}], 0x0, &(0x7f00000001c0)='em1em1-nodevposix_acl_accessppp0(/vboxnet0em0%\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000480)="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") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) 03:52:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2622.671397] binder: release 14083:14088 transaction 1306 out, still active [ 2622.681643] binder: undelivered TRANSACTION_COMPLETE [ 2622.708131] binder: undelivered TRANSACTION_ERROR: 29201 [ 2622.752698] binder: send failed reply for transaction 1306, target dead [ 2622.784820] audit: type=1804 audit(1547869964.706:2678): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2438/memory.events" dev="sda1" ino=17266 res=1 [ 2622.819371] binder: 14100:14103 ioctl c0306201 0 returned -14 [ 2622.858644] binder: 14100:14103 got reply transaction with no transaction stack [ 2622.886915] binder: 14100:14103 transaction failed 29201/-71, size 0-0 line 2801 03:52:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x10000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2622.907807] protocol 88fb is buggy, dev hsr_slave_0 [ 2622.912969] protocol 88fb is buggy, dev hsr_slave_1 [ 2622.918172] protocol 88fb is buggy, dev hsr_slave_0 [ 2622.923245] protocol 88fb is buggy, dev hsr_slave_1 [ 2622.938152] binder: 14100:14103 ioctl c0306201 200002c0 returned -14 03:52:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 03:52:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2623.054694] audit: type=1804 audit(1547869964.976:2679): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2438/memory.events" dev="sda1" ino=17266 res=1 [ 2623.060162] binder: release 14100:14103 transaction 1309 out, still active [ 2623.131112] binder: undelivered TRANSACTION_COMPLETE [ 2623.143079] audit: type=1804 audit(1547869965.016:2680): pid=14081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2438/memory.events" dev="sda1" ino=17266 res=1 [ 2623.186236] binder: undelivered TRANSACTION_ERROR: 29201 [ 2623.197872] audit: type=1804 audit(1547869965.016:2681): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2438/memory.events" dev="sda1" ino=17266 res=1 03:52:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x8) [ 2623.238501] binder: send failed reply for transaction 1309, target dead [ 2623.262427] binder: 14116:14119 ioctl c0306201 0 returned -14 03:52:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x11000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2623.331250] binder: 14116:14119 got reply transaction with no transaction stack [ 2623.359014] binder: 14116:14119 transaction failed 29201/-71, size 0-0 line 2801 03:52:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x12) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x400000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 2623.387822] protocol 88fb is buggy, dev hsr_slave_0 [ 2623.392986] protocol 88fb is buggy, dev hsr_slave_1 [ 2623.402741] binder: 14116:14119 ioctl c0306201 200002c0 returned -14 03:52:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 03:52:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2623.493753] binder: release 14116:14119 transaction 1312 out, still active [ 2623.507268] binder: undelivered TRANSACTION_COMPLETE [ 2623.532975] binder: undelivered TRANSACTION_ERROR: 29201 03:52:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x13000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2623.558253] binder: send failed reply for transaction 1312, target dead [ 2623.627272] kvm_set_msr_common: 15 callbacks suppressed [ 2623.627297] kvm [14135]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2623.644272] audit: type=1804 audit(1547869965.566:2682): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2439/memory.events" dev="sda1" ino=16543 res=1 03:52:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x427ff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x6, 0x1, 0x2, 0x7b2, 0x11, 0x3, 0xb12b, 0x400, 0x6, 0x266, 0x6, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0xbd69) ioctl$TCFLSH(r0, 0x541b, 0x709000) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100)={0x1, 0x2}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000180)={0xfff, 0xe, 0x11, "6999995671f029c0a1c960c68f71ae4d849d21697c9c41e808c43577fb1fd6445d287c6b67f5ced5216fd46688ccbfb080cee7c2e6ebeb2f4a460173", 0x34, "1bbaea428091d16187b52cda11b6d810d993bc7a6611367c75d2fce2db616d89d71435596d5c3b6c7812e5dba06af532fcba19f0f96831262158f0f8", 0x8}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)=0x7fff, 0x4) [ 2623.682709] binder: 14137:14144 got reply transaction with no transaction stack [ 2623.698056] binder: 14137:14144 transaction failed 29201/-71, size 0-0 line 2801 [ 2623.715891] binder: 14137:14144 ioctl c0306201 200002c0 returned -14 03:52:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000240)={0x80, 0x3}) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r0, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x111, @tick=0x7fffffff, 0x3, {0x2, 0xfff}, 0x9, 0x2, 0x91cd}) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000004000000000300000008000900c9000000e4464db391110b723f317ad4099880c9ecdf2086ec6af981935cfc6af5fc364dfb59fff6b9663dbaa3012f4c010023d75f3d26406f83c3de79f01de1fc3fb5"], 0x1}}, 0x0) [ 2623.747146] kvm [14135]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x14000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="006d656d6f727920afe9b8850911000d5b395b06943b448141e7694b405d36c6d0cb0b94bf577e894a1ab2a8ed4bd616010f67eb1d2be66a3be2568358a4469d6dc966761d7e3fdc0750a711341e88a077bf68dec1f0685b0eeb84fa9defcfe651d10b1faf4bef25d9dbe6d5d64c3cc26db769b447e3d10f4cea13b8542a6bd16eaec33adad1e1845b54e91cf259bab26d04863b61205f9ceda7833a8c41"], 0x200600) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x6, 0x2000) r5 = openat$cgroup_ro(r4, &(0x7f0000000540)='pids.current\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 03:52:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff9, 0x400401) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000400)={0xd7, 0x7ff, 0xa6d, 0x2, 0x2}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x6, 0x5, 0x3ff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x27dc7f1cf7296ac4}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="b9000000", @ANYRES16=r2, @ANYBLOB="00032cbd7000fcdbdf250f0000001c000900080002000900000008000100ffffff080002003f0000003c00020004000400080002000300000008000200000001000800010009e34b000000080002000600000004000400080001000200000008000100010000005c00070008000100000000000c00030009000000000000000c000300ff0f0000000000000c00030002000000000000000c000300060000000000000008000100010100000c00040080ffffffffffffff0c000300090000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4004044}, 0x11) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:52:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 03:52:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x15000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:46 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'cpu'}]}, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2624.049512] kvm [14166]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2624.094849] kvm [14166]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) 03:52:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x3f, 0x6, 0x7, 0x100, 0x1, 0x4, 0x7ff, 0x1f}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2624.308201] kvm [14180]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2624.338735] kvm [14180]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x16000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) [ 2624.450040] binder: release 14137:14140 transaction 1315 out, still active [ 2624.460812] binder: undelivered TRANSACTION_COMPLETE [ 2624.491054] binder: undelivered TRANSACTION_ERROR: 29201 [ 2624.517176] binder: send failed reply for transaction 1315, target dead [ 2624.550708] kvm [14188]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2624.575368] binder: 14189:14194 got reply transaction with no transaction stack [ 2624.594012] kvm [14188]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2624.602426] binder: 14189:14194 transaction failed 29201/-71, size 0-0 line 2801 [ 2624.627865] binder: 14189:14194 ioctl c0306201 200002c0 returned -14 03:52:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$unix(0x1, 0x801, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x400000000) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 03:52:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x17000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}) 03:52:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x17) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:52:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000100)={0x7, 0x9}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="006d6501007279208245fa1de44899e2968af19a73f6df1d159a1743"], 0x200600) 03:52:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x190f0000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) 03:52:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$unix(0x1, 0x801, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x400000000) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 2625.164092] kvm [14216]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:47 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x208000, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r1, 0x541b, 0x709000) [ 2625.222941] kvm [14216]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1f000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:47 executing program 0: r0 = socket(0x10, 0x400000000002, 0xc) write(r0, &(0x7f0000000040)="1f0000000e06ff00fd4354c007110000f305010051000100010423dcffdf00", 0x1f) [ 2625.361414] binder: release 14189:14192 transaction 1318 out, still active [ 2625.385876] binder: undelivered TRANSACTION_COMPLETE [ 2625.408317] binder: undelivered TRANSACTION_ERROR: 29201 03:52:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) [ 2625.435260] binder: send failed reply for transaction 1318, target dead [ 2625.455183] netlink: 11 bytes leftover after parsing attributes in process `syz-executor0'. [ 2625.534689] binder: 14238:14246 got reply transaction with no transaction stack 03:52:47 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:52:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x20000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2625.584668] binder: 14238:14246 transaction failed 29201/-71, size 0-0 line 2801 [ 2625.635936] binder: 14238:14246 ioctl c0306201 200002c0 returned -14 03:52:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) 03:52:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2080, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000180)={0x0, 0x401, {0x57, 0x2, 0x10000, {0x82, 0x81}, {0x100, 0x7}, @rumble={0xe99, 0x5}}, {0x54, 0x1, 0x7, {0x2, 0x6}, {0xfffffffffffffffe, 0x6e6}, @cond=[{0x20, 0x3ff, 0x1, 0x0, 0xeca3, 0x401}, {0x2aa, 0x4, 0x80000000, 0x5, 0x9, 0x2}]}}) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x6ac, 0x10001, 0x3, 0x9}, 0x29, [0x3, 0x5, 0xfffffffffffffffb, 0x8, 0x3, 0x2, 0x7, 0x40, 0x7, 0x0, 0x3f, 0x9, 0x5, 0x4, 0xfff, 0x9, 0x0, 0x4, 0x0, 0x6, 0x2553623b, 0x2, 0x1, 0x2, 0x5, 0xffff, 0x3ff, 0x9, 0x1f, 0x338, 0x3, 0xfffffffffffffffb, 0x101, 0x6, 0x0, 0x5, 0x8001, 0xfffffffffffffff9, 0x5, 0x1000, 0x80000001, 0x0, 0x0, 0xa082, 0x1, 0x7f800000000, 0x8001, 0x0, 0x4, 0x1e4e, 0x7, 0x8, 0x8001, 0x6, 0x101, 0x8000, 0x101, 0x3, 0x6, 0xf884, 0x3, 0x4, 0xc0000000000000, 0x7], [0x718a, 0x6, 0x0, 0x401, 0x4, 0x400, 0x4, 0xcf, 0x4, 0xc5, 0x3, 0x7, 0x0, 0xffff, 0xfb8c, 0x100000001, 0x2, 0x401, 0xffffffffffff0401, 0xb0, 0x9, 0x2, 0x81, 0x5, 0x3, 0x3b, 0x80000001, 0x3, 0x6, 0x401, 0xffffffffffffff7f, 0x2, 0xfffffffffffffab7, 0x8, 0xca, 0x7, 0x3, 0x400, 0x100, 0x0, 0x7, 0x5, 0xfffffffffffffffd, 0x1, 0x3, 0x4, 0x9, 0x8293, 0x7, 0xc6, 0x1, 0x5a7, 0xdd, 0x3f, 0x7fff, 0x3, 0x8, 0x5, 0xf706, 0xfffffffffffffffe, 0xfd7cbfb, 0xffffffffffffffe1, 0x7, 0x6], [0x9, 0x2, 0x8, 0x6, 0x800, 0x1, 0x8001, 0xffffffffffffffd7, 0xfffffffffffffffd, 0xffffffff, 0x3, 0xffffffffffffff01, 0xfffffffffffffff9, 0xe1, 0x4, 0x450f, 0x4, 0x2, 0x6, 0xfffffffffffff800, 0x100000001, 0x6, 0x697d, 0x8, 0xfffffffffffffffe, 0xffff, 0x3, 0x5, 0x0, 0x3, 0x7fff, 0x4, 0x100000000, 0x5604, 0x8, 0x4, 0x8, 0x0, 0x6, 0x68eb, 0x6, 0x401, 0x5, 0x0, 0x6, 0x4, 0x13b, 0x6, 0x4, 0x7, 0x629, 0xffffffffffffffff, 0x8, 0xe03, 0x8, 0x1, 0x200, 0x0, 0x200, 0x8, 0x2, 0x5, 0x7, 0xfffffffffffffffb], [0xc7, 0x7, 0x101, 0x8000, 0x7, 0x5, 0x100000001, 0x9, 0x8, 0x3, 0x800, 0xffff, 0x7fffffff, 0x200, 0x1, 0x1, 0x7, 0x3, 0xffffffffffffffe0, 0x5, 0x101, 0x5, 0xa33, 0x28c, 0x7, 0x10001, 0x8000, 0x1, 0x7, 0x3f, 0x20, 0x0, 0x1, 0x1ff, 0x1, 0x6, 0x5, 0x625, 0x7, 0x6, 0x4a, 0x2, 0xfffffffffffff2d7, 0x2, 0x0, 0x6adaf368, 0x3f, 0x2, 0x4b, 0x80000001, 0x0, 0x9, 0x8, 0x60e, 0x8, 0x4000000000000000, 0xffffffff, 0xf1, 0x20, 0x10001, 0x10001, 0xffff, 0x100000001, 0x2]}, 0x45c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000940)='trusted.overlay.upper\x00', &(0x7f0000000980)={0x0, 0xfb, 0x106, 0x5, 0x7, "d19ef9e6027330d178297aa271e99f67", "4db5e19845055dd6b3876b9744813e6cc4487caabd38af8597e1a30ebe876d89aff13d00bdab8cbbb4c79476abd7486e0ae7be089740d5d40ab5e79b56e760b2dffa4de95a5c505ea6312bfcc6ef94c6719ade2e97ca9a50098ae5b7ecd33d28880f895d6a99fa2207ef337ac8f36cda960479a878e1fbb3ec064d64a216996949ba640b36d2463b1b59dc8af4e64d8be785c39f8fc3a2cb36984bcc1e4843aef7c01346bad618cfa805af972945f5cdf673b064489612b357606cfe7808b69f6451d09a3fbcca0335894fc2f2dbb29ff6f9452a794673ac19e489307d5214c88bdf7e1e8d98f92568241062af88cedaa8"}, 0x106, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) recvfrom$inet6(r1, &(0x7f0000000380)=""/75, 0x4b, 0x20, &(0x7f0000000400)={0xa, 0x4e20, 0x80, @rand_addr="a976445b027df77639c50dc21a680d00", 0x5}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x80000000, 0x1000}, 'syz0\x00', 0x29}) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memNry.stat\x00', 0x1000000, 0x5000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@enter_looper, @acquire={0x40046305, 0x4}], 0xd6, 0x0, &(0x7f0000000ac0)="df9dae082d13e2e9bd79174608024e657ec800c5d3f0f65c8385067c027b52b5f02a313ddf66f0c2dd0ac76f9b9e7f0603444c2b46e4a83910337ce7fb524ca80c8d27e3b400facb7846d050d3a9d04308588b56c90949b4020a2d686b2891fbebd065f28c95fed0117fbc9cf726be1a6c50a77f5833f9de71b1d561d2ff4af066fafecfcd2b9240e3fe665c7cb7849942d91c95f1479f15e411cf25ff75cc7c120f0bb01ef31ec0ca7b11d9be1b47f02a583c8834052f9e0c4872bc371a7de3ee8a6f79665c28cafac7a121b2328c84309e8db4f69e"}) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)) 03:52:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x20100000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:47 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) close(r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000580)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') sendfile(r3, r1, 0x0, 0x8000) sendfile(r2, r3, &(0x7f00000000c0), 0x3fd) [ 2626.111599] syz-executor0 (14268): /proc/14268/oom_adj is deprecated, please use /proc/14268/oom_score_adj instead. 03:52:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x8, 0x4) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000100)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r1, 0x541b, 0x20d2) 03:52:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) 03:52:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:48 executing program 0: 03:52:48 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2626.323761] binder: release 14238:14241 transaction 1321 out, still active [ 2626.338461] binder: undelivered TRANSACTION_COMPLETE [ 2626.348210] binder: undelivered TRANSACTION_ERROR: 29201 [ 2626.353795] binder: send failed reply for transaction 1321, target dead 03:52:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="006d656d6f727920bb4f0e50f14fb652dc10248d9e6263e3b7b421c5657c441596456fcff59cca9ed927882ed4bd4c5c3a77841972d30ef57250ee75a958854496063fe14b44719e1f635bce341e2c3247b6d6fa8dfef10000000000000000000000"], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:48 executing program 0: [ 2626.523625] binder: 14281:14290 got reply transaction with no transaction stack [ 2626.558101] binder: 14281:14290 transaction failed 29201/-71, size 0-0 line 2801 03:52:48 executing program 0: [ 2626.572829] binder: 14281:14290 ioctl c0306201 200002c0 returned -14 03:52:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x40000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 03:52:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) dup3(r0, r0, 0x80000) 03:52:48 executing program 0: 03:52:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x48000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) [ 2626.925586] kauditd_printk_skb: 15 callbacks suppressed [ 2626.925600] audit: type=1804 audit(1547869968.846:2698): pid=14307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2445/memory.events" dev="sda1" ino=17323 res=1 03:52:48 executing program 0: 03:52:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) ioctl$KIOCSOUND(r2, 0x4b2f, 0x3) [ 2627.051292] audit: type=1804 audit(1547869968.886:2699): pid=14293 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2445/memory.events" dev="sda1" ino=17323 res=1 [ 2627.157472] audit: type=1804 audit(1547869968.886:2700): pid=14308 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2445/memory.events" dev="sda1" ino=17323 res=1 03:52:49 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:49 executing program 0: 03:52:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 03:52:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4c000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2627.319511] binder: release 14281:14284 transaction 1324 out, still active [ 2627.342057] binder: undelivered TRANSACTION_COMPLETE 03:52:49 executing program 0: [ 2627.371895] binder: undelivered TRANSACTION_ERROR: 29201 [ 2627.400540] binder: send failed reply for transaction 1324, target dead [ 2627.491662] binder: 14327:14332 got reply transaction with no transaction stack [ 2627.530781] binder: 14327:14332 transaction failed 29201/-71, size 0-0 line 2801 03:52:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) [ 2627.546447] audit: type=1804 audit(1547869969.466:2701): pid=14321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2446/memory.events" dev="sda1" ino=17007 res=1 [ 2627.606310] binder: 14327:14332 ioctl c0306201 200002c0 returned -14 [ 2627.744681] audit: type=1804 audit(1547869969.666:2702): pid=14321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2446/memory.events" dev="sda1" ino=17007 res=1 03:52:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xffffffffffffff00, 0x600000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000280)={0x0, 0x5, 0x1000, [], &(0x7f0000000240)=0x6}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f00000000c0)={{0x80000001, 0xffff, 0x7f, 0x5, 0x9, 0x3}, 0x10001}) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000100)=0x7f, 0x4) 03:52:49 executing program 0: 03:52:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x68000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) [ 2627.787871] net_ratelimit: 24 callbacks suppressed [ 2627.787879] protocol 88fb is buggy, dev hsr_slave_0 [ 2627.798006] protocol 88fb is buggy, dev hsr_slave_1 03:52:49 executing program 0: [ 2628.026321] audit: type=1804 audit(1547869969.946:2703): pid=14321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2446/memory.events" dev="sda1" ino=17007 res=1 03:52:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="006d656d6f72f920"], 0x200600) 03:52:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:50 executing program 0: 03:52:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}) [ 2628.255864] binder: release 14327:14328 transaction 1327 out, still active [ 2628.265465] binder: undelivered TRANSACTION_COMPLETE [ 2628.290229] binder: undelivered TRANSACTION_ERROR: 29201 03:52:50 executing program 0: [ 2628.318715] binder: send failed reply for transaction 1327, target dead [ 2628.418536] binder: 14363:14368 got reply transaction with no transaction stack [ 2628.443075] binder: 14363:14368 transaction failed 29201/-71, size 0-0 line 2801 03:52:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) [ 2628.475078] binder: 14363:14368 ioctl c0306201 200002c0 returned -14 [ 2628.663006] kvm_set_msr_common: 18 callbacks suppressed [ 2628.663021] kvm [14371]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2628.712440] kvm [14371]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[], @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=r0], @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0], 0x37) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4a000, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000200)=0x200465, 0x4) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:52:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x74000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:50 executing program 0: 03:52:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='.\x00', 0x2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000180)={0x4, 0x1, 0x0, 0x1, 0x8, 0x8}) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) [ 2628.827839] protocol 88fb is buggy, dev hsr_slave_0 [ 2628.832978] protocol 88fb is buggy, dev hsr_slave_1 [ 2628.838299] protocol 88fb is buggy, dev hsr_slave_0 [ 2628.843389] protocol 88fb is buggy, dev hsr_slave_1 03:52:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) [ 2628.934788] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 4 (only 16 groups) [ 2628.959026] kvm [14379]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2629.024776] kvm [14379]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2629.147841] protocol 88fb is buggy, dev hsr_slave_0 [ 2629.153039] protocol 88fb is buggy, dev hsr_slave_1 [ 2629.158256] protocol 88fb is buggy, dev hsr_slave_0 [ 2629.163343] protocol 88fb is buggy, dev hsr_slave_1 03:52:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x7a000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:51 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x13afab890e289098, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xe16) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x0) ioctl$TCFLSH(r1, 0x541b, 0x709000) 03:52:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 03:52:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) [ 2629.215117] binder: release 14363:14365 transaction 1330 out, still active [ 2629.222593] audit: type=1804 audit(1547869971.146:2704): pid=14393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2448/memory.events" dev="sda1" ino=17344 res=1 [ 2629.247441] binder: undelivered TRANSACTION_COMPLETE [ 2629.253755] binder: undelivered TRANSACTION_ERROR: 29201 [ 2629.300828] binder: send failed reply for transaction 1330, target dead [ 2629.332065] binder: 14402:14403 ERROR: BC_REGISTER_LOOPER called without request 03:52:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xbc8dbdb) ioctl$TCFLSH(r0, 0x541b, 0x709000) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)=0x1) [ 2629.359181] kvm [14400]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2629.396659] binder: 14402:14403 got reply transaction with no transaction stack [ 2629.417323] binder: 14402:14403 transaction failed 29201/-71, size 0-0 line 2801 [ 2629.427970] kvm [14400]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2629.432927] binder: 14402:14403 ioctl c0306201 200002c0 returned -14 [ 2629.478464] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 4 (only 16 groups) [ 2629.488348] audit: type=1804 audit(1547869971.406:2705): pid=14381 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2448/memory.events" dev="sda1" ino=17344 res=1 03:52:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:51 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e00c462913878fe3e0f1110c442019dccd3196f") execve(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200001e4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), 0x8) unlink(0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 03:52:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2629.558239] audit: type=1804 audit(1547869971.476:2706): pid=14393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2448/memory.events" dev="sda1" ino=17344 res=1 [ 2629.594560] binder: release 14402:14403 transaction 1333 out, still active [ 2629.612005] binder: undelivered TRANSACTION_COMPLETE [ 2629.625436] audit: type=1804 audit(1547869971.536:2707): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2448/memory.events" dev="sda1" ino=17344 res=1 [ 2629.657058] binder: undelivered TRANSACTION_ERROR: 29201 [ 2629.692224] binder: send failed reply for transaction 1333, target dead 03:52:51 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000080)=0x3) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x1, 0x5, 0x5, 0x3ff}) r4 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x200000) splice(r3, &(0x7f0000000180), r4, &(0x7f0000000200)=0x34, 0x0, 0x0) 03:52:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}) [ 2629.752906] binder: 14421:14425 ERROR: BC_REGISTER_LOOPER called without request [ 2629.788865] binder: 14421:14425 got reply transaction with no transaction stack [ 2629.813856] binder: 14421:14425 transaction failed 29201/-71, size 0-0 line 2801 [ 2629.835411] binder: 14421:14425 ioctl c0306201 200002c0 returned -14 03:52:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa0008000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2629.878253] kvm [14430]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2629.940255] binder: release 14421:14425 transaction 1336 out, still active [ 2629.947424] binder: undelivered TRANSACTION_COMPLETE [ 2629.955504] kvm [14430]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2629.970356] binder: undelivered TRANSACTION_ERROR: 29201 [ 2629.990917] binder: send failed reply for transaction 1336, target dead 03:52:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) [ 2630.051250] binder: 14444:14446 ERROR: BC_REGISTER_LOOPER called without request [ 2630.080959] binder: 14444:14446 got reply transaction with no transaction stack [ 2630.108366] binder: 14444:14446 transaction failed 29201/-71, size 0-0 line 2801 [ 2630.134280] binder: 14444:14446 ioctl c0306201 200002c0 returned -14 03:52:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa0010000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:52 executing program 1: socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'memory'}]}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200202, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x4, 0x10000, 0x2, 0x8, 0xb, 0xf0, 0xffff, 0xfae, 0x2, 0x0, 0x4, 0x5}) 03:52:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2630.222527] binder: release 14444:14446 transaction 1339 out, still active [ 2630.230555] binder: undelivered TRANSACTION_COMPLETE [ 2630.249571] kvm [14450]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2630.254219] binder: undelivered TRANSACTION_ERROR: 29201 [ 2630.278150] binder: send failed reply for transaction 1339, target dead [ 2630.294756] binder: 14452:14454 ERROR: BC_REGISTER_LOOPER called without request [ 2630.309551] kvm [14450]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2630.329236] binder: 14452:14454 got reply transaction with no transaction stack [ 2630.357891] binder: 14452:14454 transaction failed 29201/-71, size 0-0 line 2801 [ 2630.365597] binder: 14452:14454 ioctl c0306201 200002c0 returned -14 [ 2630.450538] binder: release 14452:14454 transaction 1342 out, still active [ 2630.487960] binder: undelivered TRANSACTION_COMPLETE [ 2630.493246] binder: undelivered TRANSACTION_ERROR: 29201 03:52:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000000)={0x5, 0x0, 0x20, 0x1, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x4000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0x3, 0x0, 0x3008, 0x791, 0x3, 0x37, 0xfffffffffffffffe, 0x1}) [ 2630.518575] binder: send failed reply for transaction 1342, target dead [ 2630.559792] binder: 14465:14466 ERROR: BC_REGISTER_LOOPER called without request [ 2630.608091] binder: 14465:14466 got reply transaction with no transaction stack [ 2630.636433] binder: 14465:14466 transaction failed 29201/-71, size 0-0 line 2801 [ 2630.673368] binder: 14465:14466 ioctl c0306201 200002c0 returned -14 [ 2630.788524] binder: release 14465:14466 transaction 1345 out, still active [ 2630.807103] binder: undelivered TRANSACTION_COMPLETE [ 2630.834106] binder: undelivered TRANSACTION_ERROR: 29201 [ 2630.859211] binder: send failed reply for transaction 1345, target dead [ 2632.987825] net_ratelimit: 16 callbacks suppressed [ 2632.987834] protocol 88fb is buggy, dev hsr_slave_0 [ 2632.997929] protocol 88fb is buggy, dev hsr_slave_1 [ 2633.003102] protocol 88fb is buggy, dev hsr_slave_0 [ 2633.008216] protocol 88fb is buggy, dev hsr_slave_1 [ 2633.307877] protocol 88fb is buggy, dev hsr_slave_0 [ 2633.313019] protocol 88fb is buggy, dev hsr_slave_1 [ 2633.318388] protocol 88fb is buggy, dev hsr_slave_0 [ 2633.323504] protocol 88fb is buggy, dev hsr_slave_1 03:52:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) 03:52:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa0020000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) 03:52:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x9, 0xffffff88, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) sendfile(r4, r4, &(0x7f0000000080), 0x5) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000002c0)=0x0) fstat(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r4, 0x0, 0x1, &(0x7f0000000440)='\x00'}, 0x30) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580)=0x0) fstat(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000c00)=[{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="60a32a276e9adabee2c9cbc747e5cc80551b546864cef5f35437565cad11316420675c5319db8b8698943f66aae08072f47edad51827b4baa46f62b2b5ea9d94d29871651d80acd37380ee15047224d81f7cc36dda6a4eeb079981d4e0062a6ef6c3121a62e50ae691559aa1b702fe0c247585b0f4b1ca7c072c115cb55a1f522035b9cc8db5c8cd", 0x88}], 0x1, &(0x7f0000000640)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0x40, 0x800}, {&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000700)="53dff13d13a8a088e0a5cdcd0b187966febfd193bbe8103c607aea2d61b16c84ecf8f9116644abedd9f21170a7913b5b773ed7d4db54103122a86c09284b688ff8f0a3ac891676861458104d3b4dd8a52f2d5bcd14ab0c41a7e6a82f57ea72c3afedac5caad5453f773d96826caf00032f03d5b68ca083c38828dde9409ec7e61434787e448e08ef4f7d0725c508043250b78580d81bf09c2925d1a66556bb35cc74f1668111bf77077000431206eb073645e9871172f7de232fcbaa0e79ffc9b8c46426209e81ea877e9d2299a5ea7917e0", 0xd2}, {&(0x7f0000000800)="085731815364bd997fef3771eef5998c0fc1325df14c0817a4b5fd957ca6057988c2da7fd078f3bbdc462a526da40a5bdbf0b5", 0x33}, {&(0x7f0000000840)="bb65cb8497ca3de31ac16c835273e9d347a6d0ddadc4754193ef15a269c2c524695b1dab148c6468f75cf9c311f3a145e01144968b01d614a0da25993b8bb014f3d0cd5093613c902887f92b16611728c2fedccf39bd56c3044dbf13b642ac05076db45aacab7e10d645a8814fcc01ab2fa5f40fa42e567170904b834c8e506fc3b5c0f3e33a7c99477438e24045ab2a195629286c8ea4d0610b5eb385dc8fcfb126d84a3a10a18c191a3cb62fd9b925eae0a7d883799c626933e4e578cd39343ecfe6987b8d259fce740ca51b6b5c5ea34d079bae8b3143444a1999adcb230a66bca6a364bd22e3a7640916ee44b9a7", 0xf0}, {&(0x7f0000000940)="c5ebb761095ccd46a611c0a368365a792b52ea90e8aac1ba2a5aeab5a72710a08a681e1a5b18d2bc96e318f0c28bfcd116f06466933f99600554050410ec7fa5257b510d827289438ebaa7806635764a8ea756861b57fe55c49ce5dc5d3fe2349fa472537aa4d02781", 0x69}, {&(0x7f00000009c0)="e533da7843cdf98eea7fec5dfc74302dda67b8da3846a5a48f771bf0965a41de7152c0e14f87e2062a4cc4a07da6f5", 0x2f}, {&(0x7f0000000a00)="0e1e50ebd3de28225deabef69956f865672fce5799e972e50d17a05b6b84bf269c989bfa28bcfe37ee607b2d6c703c929ae0aa07864f52ef0ab6a76ea0aa2274dc96ccacb006a4e45d7dfbf498738224ab5139ec6511b21c5f3ab6c3d29dc970bd78db70d9ae8864b824801e5e44fdbaad1371fc30a1e81acec525ca408c4d77af5a42e3174fb6094843a4b1d887d741cdfa19a2497d59", 0x97}, {&(0x7f0000000ac0)="ee17377cad5b0beb0887de5900204e5a936346510d279035a3baf8f712fcfa4b1d0e8b20742111bc74e1", 0x2a}], 0x7, &(0x7f0000000b80)=[@rights={0x38, 0x1, 0x1, [r0, r4, r4, r6, r1, r3, r4, r6, r3, r3]}, @rights={0x20, 0x1, 0x1, [r2, r6, r4, r6]}], 0x58, 0x800}], 0x2, 0x40004) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1a) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x4, 0x7}) [ 2633.456885] binder: 14475:14476 ERROR: BC_REGISTER_LOOPER called without request [ 2633.481147] binder: 14475:14476 got reply transaction with no transaction stack [ 2633.546285] binder: 14475:14476 transaction failed 29201/-71, size 0-0 line 2801 [ 2633.557866] binder: 14475:14476 ioctl c0306201 200002c0 returned -14 03:52:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa0040000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) 03:52:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2633.679695] binder: release 14475:14476 transaction 1348 out, still active [ 2633.691507] binder: undelivered TRANSACTION_COMPLETE [ 2633.710637] binder: undelivered TRANSACTION_ERROR: 29201 [ 2633.734414] binder: send failed reply for transaction 1348, target dead [ 2633.758739] binder: 14501:14502 ERROR: BC_REGISTER_LOOPER called without request [ 2633.787816] protocol 88fb is buggy, dev hsr_slave_0 [ 2633.792996] protocol 88fb is buggy, dev hsr_slave_1 [ 2633.809453] binder: 14501:14502 unknown command 0 [ 2633.826353] binder: 14501:14502 ioctl c0306201 200002c0 returned -22 [ 2633.875214] kvm_set_msr_common: 2 callbacks suppressed [ 2633.875247] kvm [14503]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2633.941911] kauditd_printk_skb: 6 callbacks suppressed [ 2633.941926] audit: type=1804 audit(1547869975.866:2714): pid=14495 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2451/memory.events" dev="sda1" ino=16961 res=1 [ 2634.004760] kvm [14503]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa0080000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2634.067138] binder: undelivered TRANSACTION_COMPLETE [ 2634.073103] binder: undelivered transaction 1352, process died. [ 2634.110155] binder: undelivered TRANSACTION_COMPLETE 03:52:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) [ 2634.164273] binder: 14522:14524 ERROR: BC_REGISTER_LOOPER called without request [ 2634.215164] binder: 14522:14524 unknown command 0 [ 2634.226224] audit: type=1804 audit(1547869976.146:2715): pid=14483 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2451/memory.events" dev="sda1" ino=16961 res=1 [ 2634.279141] binder: 14522:14524 ioctl c0306201 200002c0 returned -22 03:52:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa0100000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2634.362685] audit: type=1804 audit(1547869976.176:2716): pid=14492 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2451/memory.events" dev="sda1" ino=16961 res=1 [ 2634.391774] kvm [14535]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2634.452907] binder: undelivered TRANSACTION_COMPLETE [ 2634.458762] binder: undelivered transaction 1355, process died. [ 2634.490235] kvm [14535]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x30, r2, 0x0) bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x7, 0x9, 0x1, "454678389343e06fb0482f189fe186aa84d85ef8bfe23b8d0336be106dd835d07a0729494d181c3fbe41a0c28dd94dd4bdc8913673bd7b13bf9253a14ef048", 0x1b}, 0x60) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:52:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) [ 2634.501250] binder: undelivered TRANSACTION_COMPLETE [ 2634.511510] audit: type=1804 audit(1547869976.366:2717): pid=14483 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2451/memory.events" dev="sda1" ino=16961 res=1 [ 2634.592477] binder: 14544:14548 ERROR: BC_REGISTER_LOOPER called without request [ 2634.622394] binder: 14544:14548 unknown command 0 03:52:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2634.667460] binder: 14544:14548 ioctl c0306201 200002c0 returned -22 03:52:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) 03:52:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2634.771977] binder: undelivered TRANSACTION_COMPLETE [ 2634.777213] binder: undelivered transaction 1358, process died. [ 2634.805964] binder: undelivered TRANSACTION_COMPLETE 03:52:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2634.853953] kvm [14560]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xebffffff, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2634.929258] binder: 14565:14567 ERROR: BC_REGISTER_LOOPER called without request [ 2634.942361] kvm [14560]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2634.987984] audit: type=1804 audit(1547869976.916:2718): pid=14555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2452/memory.events" dev="sda1" ino=16913 res=1 [ 2635.014027] binder: 14565:14567 unknown command 0 [ 2635.037954] binder: 14565:14567 ioctl c0306201 200002c0 returned -22 03:52:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2635.165992] binder: undelivered TRANSACTION_COMPLETE [ 2635.178339] binder: undelivered transaction 1361, process died. 03:52:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2635.205212] audit: type=1804 audit(1547869977.126:2719): pid=14555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2452/memory.events" dev="sda1" ino=16913 res=1 [ 2635.235252] binder: undelivered TRANSACTION_COMPLETE 03:52:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 03:52:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2f, 'pids'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2f, 'io'}, {0x2b, 'cpu'}, {0x2f, 'rdma'}]}, 0x1f) fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000180)=@v2={0x7, 0x3, 0xb, 0x7f, 0x1a, "735d1aa8896ed679bb3a99e3cbc3494116dcaadf3fd22e80242f"}, 0x24, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x20070b) [ 2635.313387] binder: 14575:14576 ERROR: BC_REGISTER_LOOPER called without request [ 2635.321111] audit: type=1804 audit(1547869977.176:2720): pid=14553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2452/memory.events" dev="sda1" ino=16913 res=1 [ 2635.383088] binder: 14575:14576 unknown command 0 03:52:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2635.421938] binder: 14575:14576 ioctl c0306201 200002c0 returned -22 [ 2635.434505] audit: type=1804 audit(1547869977.176:2721): pid=14559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2452/memory.events" dev="sda1" ino=16913 res=1 03:52:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfcfdffff, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2635.555957] audit: type=1804 audit(1547869977.396:2722): pid=14587 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2453/memory.events" dev="sda1" ino=16833 res=1 [ 2635.639156] binder: undelivered TRANSACTION_COMPLETE [ 2635.644593] binder: undelivered transaction 1364, process died. [ 2635.645061] audit: type=1804 audit(1547869977.416:2723): pid=14587 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2453/memory.events" dev="sda1" ino=16833 res=1 03:52:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 03:52:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="006d656d6f727920d7794ea55a36fac1e5b449d05f04022306a309d7d89c9403000000f36f8504611a"], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000), 0x0, r0}, 0x68) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xd) socket$inet6(0xa, 0x80000, 0x3f) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x0) ioctl$TCFLSH(r1, 0x541b, 0x0) 03:52:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:52:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfdfdffff, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2635.818203] binder: 14598:14605 ERROR: BC_REGISTER_LOOPER called without request [ 2635.853041] kvm [14601]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2635.868463] binder: 14598:14605 unknown command 0 03:52:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2635.890434] binder: 14598:14605 ioctl c0306201 200002c0 returned -22 [ 2635.918912] kvm [14601]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2636.017853] binder: undelivered transaction 1367, process died. 03:52:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2, 0x80000) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x2, [{}, {}]}, 0x48) ioctl$TCFLSH(r0, 0x541b, 0x709000) socket$nl_generic(0x10, 0x3, 0x10) [ 2636.073759] binder: 14622:14623 ERROR: BC_REGISTER_LOOPER called without request [ 2636.105630] binder: 14622:14623 unknown command 0 03:52:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:52:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xff0f0000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2636.130863] binder: 14622:14623 ioctl c0306201 200002c0 returned -22 03:52:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 03:52:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2636.252627] binder: undelivered transaction 1370, process died. 03:52:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2902, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x80, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000580)="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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="006d656d6f727920b110b7665432c8b8c937305646d66239dce891af8099b64c2603eb8ad99c51a901cd36b287709eca1653a46a3f92925453116e6d0906"], 0x200600) 03:52:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2636.362189] binder: 14637:14638 ERROR: BC_REGISTER_LOOPER called without request 03:52:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfffffdfc, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2636.404373] binder: 14637:14638 unknown command 0 [ 2636.438066] binder: 14637:14638 ioctl c0306201 200002c0 returned -22 [ 2636.466217] kvm [14635]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:52:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:52:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2636.561045] binder: undelivered transaction 1373, process died. [ 2636.641248] binder: 14650:14651 ERROR: BC_REGISTER_LOOPER called without request 03:52:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) [ 2636.692981] binder: 14650:14651 unknown command 0 [ 2636.726323] binder: 14650:14651 ioctl c0306201 200002c0 returned -22 [ 2636.823731] kvm [14659]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2636.834368] binder: undelivered transaction 1376, process died. 03:52:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$TCFLSH(r0, 0x541b, 0x709000) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x100000000000003, 0x103000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=r3) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000080)={0x7e, 0x0, 0x301e, 0x2, 0xfd0e, 0x7c8, 0x2, 0x1}) setrlimit(0x2, &(0x7f0000000040)={0x3, 0x1}) dup2(r0, r0) 03:52:59 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:52:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfffffdfd, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) [ 2637.134342] binder: 14668:14669 ERROR: BC_REGISTER_LOOPER called without request [ 2637.170154] binder: 14668:14669 unknown command 0 03:52:59 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:52:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r3, 0x4421}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(r4, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000001c0), 0x4) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2637.197890] binder: 14668:14669 ioctl c0306201 200002c0 returned -22 03:52:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x121000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x3, {0xbb6, 0xfa6, "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", 0xca, 0x17000000, 0x8, 0x40, 0x8, 0xfffffffffffffffa, 0x3377, 0x1}, r2}}, 0x128) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0xc0000) ioctl$TCFLSH(r0, 0x541b, 0x709000) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x5177, 0x400) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000200)=0x81, 0x4) 03:52:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2637.287541] binder: undelivered transaction 1379, process died. 03:52:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 03:52:59 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2637.419879] binder: 14686:14690 ERROR: BC_REGISTER_LOOPER called without request [ 2637.458568] binder: 14686:14690 unknown command 0 [ 2637.468686] binder: 14686:14690 ioctl c0306201 200002c0 returned -22 03:52:59 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:52:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 03:52:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:52:59 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2637.672535] binder: 14703:14704 ERROR: BC_REGISTER_LOOPER called without request [ 2637.711200] binder: 14703:14704 unknown command 0 [ 2637.731053] binder: 14703:14704 ioctl c0306201 200002c0 returned -22 03:52:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) pwrite64(r2, &(0x7f0000000180)="8decf783dfe817bccce46e3b3861e49ba2e455883722875654b70946c753878bab576d08fcdc2a52fe55102645288b4343ef7c8ef505f3ddd827db59b9f271d20e613ebf2c59d20c7de69effdfad1258613689b1f5bfa6f384a5d7466845ad9985d3fa1f9d4b9fb309d9224dbd217a41f2e5c1a42346df84839e85715732f22efcca3cd5507753b7fa032af110c1839188fa288d0a33cf063650307bbf6524a2b8b5e913c77956a528ab51a9985a", 0xae, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:52:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:52:59 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2637.982959] binder: release 14717:14718 transaction 1387 out, still active [ 2637.994593] binder: release 14717:14718 transaction 1387 in, still active [ 2638.010915] binder: send failed reply for transaction 1387, target dead [ 2638.187806] net_ratelimit: 24 callbacks suppressed [ 2638.187814] protocol 88fb is buggy, dev hsr_slave_0 [ 2638.197965] protocol 88fb is buggy, dev hsr_slave_1 03:53:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x300000, 0x301480) write$FUSE_STATFS(r1, &(0x7f0000000180)={0x60, 0x0, 0x1, {{0x800, 0x7, 0xc629, 0x8, 0x4, 0x20, 0x800, 0x400}}}, 0x60) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400000, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1e, 0x988, 0x0, 0x2, 0x2, 0x5, 0x4, 0x3, 0x2, 0x100000000, 0x6, 0x1}) 03:53:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 03:53:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xffffffeb, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) 03:53:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xa4909a22514329e7, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0xfffffffffffffd49, 0x0, 0x0}) [ 2638.354986] binder: release 14731:14732 transaction 1389 out, still active [ 2638.366168] binder: release 14731:14732 transaction 1389 in, still active 03:53:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1b, @remote, 0x1}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffffffffffc}], 0x88) futimesat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={{0x0, 0x7530}}) r4 = openat$cgroup_ro(r2, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'eql\x00', {0x2, 0x4e23, @local}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="715c794ee7f9d7d728d65d4eb8759f6eea1dadd1db17cae41f397bf278560ec88e29dc49794464df4608ce262534651647ff12ef868f88ee158cdb7f366e8c1efec9c113cb000000"], 0x200600) socket$inet_udplite(0x2, 0x2, 0x88) [ 2638.423062] binder: send failed reply for transaction 1389, target dead 03:53:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 03:53:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 2638.557659] binder: release 14741:14743 transaction 1391 out, still active [ 2638.574674] binder: release 14741:14743 transaction 1391 in, still active 03:53:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2638.600380] binder: send failed reply for transaction 1391, target dead [ 2638.719848] binder: 14758:14759 ioctl c0306201 0 returned -14 [ 2638.771081] binder: release 14758:14759 transaction 1393 out, still active [ 2638.786248] binder_release_work: 18 callbacks suppressed [ 2638.799604] binder: undelivered TRANSACTION_COMPLETE [ 2638.804833] binder: release 14758:14759 transaction 1393 in, still active [ 2638.812582] binder: send failed reply for transaction 1393, target dead 03:53:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="da109de7b2fa3633312dc2fdae8ae09b23", 0x11, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)=')wlan0keyring\x00', 0xfffffffffffffff8) keyctl$reject(0x13, r1, 0x81, 0x5fece4e0, r2) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:53:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:53:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}) 03:53:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 2639.227823] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.232954] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.238158] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.243238] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.342970] binder: 14766:14775 ioctl c0306201 0 returned -14 [ 2639.365310] kvm_set_msr_common: 9 callbacks suppressed [ 2639.365324] kvm [14770]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 2639.419576] binder: release 14766:14775 transaction 1395 out, still active [ 2639.442532] kvm [14770]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2639.457875] binder: undelivered TRANSACTION_COMPLETE [ 2639.476326] binder: release 14766:14775 transaction 1395 in, still active [ 2639.498036] binder: send failed reply for transaction 1395, target dead 03:53:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1a0ffffffff, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2639.534064] binder: 14785:14787 ioctl c0306201 0 returned -14 [ 2639.547905] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.553089] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.558274] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.563335] protocol 88fb is buggy, dev hsr_slave_1 03:53:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:53:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2639.635556] binder: release 14785:14787 transaction 1397 out, still active [ 2639.653360] binder: undelivered TRANSACTION_COMPLETE 03:53:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) [ 2639.708964] binder: release 14785:14787 transaction 1397 in, still active [ 2639.727173] binder: send failed reply for transaction 1397, target dead [ 2639.760973] binder_thread_write: 6 callbacks suppressed [ 2639.760983] binder: 14791:14792 ERROR: BC_REGISTER_LOOPER called without request [ 2639.796126] kauditd_printk_skb: 17 callbacks suppressed [ 2639.796140] audit: type=1804 audit(1547869981.716:2741): pid=14780 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2460/memory.events" dev="sda1" ino=17355 res=1 [ 2639.910194] binder: release 14791:14792 transaction 1399 out, still active [ 2639.917382] binder: undelivered TRANSACTION_COMPLETE [ 2639.948267] binder: release 14791:14792 transaction 1399 in, still active [ 2639.971272] binder: send failed reply for transaction 1399, target dead [ 2640.017083] audit: type=1804 audit(1547869981.936:2742): pid=14780 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2460/memory.events" dev="sda1" ino=17355 res=1 [ 2640.091830] audit: type=1804 audit(1547869981.996:2743): pid=14771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2460/memory.events" dev="sda1" ino=17355 res=1 [ 2640.162109] audit: type=1804 audit(1547869982.086:2744): pid=14780 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2460/memory.events" dev="sda1" ino=17355 res=1 03:53:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x0) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:53:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:53:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2a0ffffffff, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 03:53:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2640.357159] binder: 14811:14813 ERROR: BC_REGISTER_LOOPER called without request [ 2640.406801] kvm [14810]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2640.468055] kvm [14810]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 03:53:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4a0ffffffff, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2640.526432] binder: release 14811:14813 transaction 1401 out, still active [ 2640.538457] binder: undelivered TRANSACTION_COMPLETE 03:53:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:53:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2640.568209] binder: release 14811:14813 transaction 1401 in, still active [ 2640.579807] binder: send failed reply for transaction 1401, target dead 03:53:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2640.680403] binder: 14831:14832 ERROR: BC_REGISTER_LOOPER called without request 03:53:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 03:53:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) [ 2640.774090] audit: type=1804 audit(1547869982.696:2745): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2461/memory.events" dev="sda1" ino=17505 res=1 [ 2640.805728] binder: undelivered TRANSACTION_COMPLETE [ 2640.816033] binder: send failed reply for transaction 1403, target dead 03:53:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x8a0ffffffff, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2640.889647] binder: 14842:14843 ERROR: BC_REGISTER_LOOPER called without request [ 2640.965025] kvm [14841]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2641.001484] audit: type=1804 audit(1547869982.926:2746): pid=14826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2461/memory.events" dev="sda1" ino=17505 res=1 03:53:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) [ 2641.056193] kvm [14841]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2641.084607] binder: undelivered TRANSACTION_COMPLETE [ 2641.093116] binder: send failed reply for transaction 1405, target dead [ 2641.124964] audit: type=1804 audit(1547869983.046:2747): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2461/memory.events" dev="sda1" ino=17505 res=1 03:53:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00 '], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2641.241996] binder: 14856:14858 ERROR: BC_REGISTER_LOOPER called without request [ 2641.369616] binder: undelivered TRANSACTION_COMPLETE [ 2641.376257] binder: send failed reply for transaction 1407, target dead [ 2641.535288] audit: type=1804 audit(1547869983.456:2748): pid=14862 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2462/memory.events" dev="sda1" ino=17362 res=1 03:53:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0xfffffffffffffffb, 0x3}) ioctl$TCFLSH(r0, 0x541b, 0x709000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10180, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) 03:53:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}) 03:53:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x10a0ffffffff, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:03 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xe, 0x0, &(0x7f0000000180)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) [ 2641.643092] audit: type=1804 audit(1547869983.566:2749): pid=14862 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2462/memory.events" dev="sda1" ino=17362 res=1 03:53:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) socket$bt_bnep(0x1f, 0x3, 0x4) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2641.754509] audit: type=1804 audit(1547869983.616:2750): pid=14866 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2462/memory.events" dev="sda1" ino=17362 res=1 [ 2641.760652] binder: 14869:14873 ERROR: BC_REGISTER_LOOPER called without request 03:53:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2641.815578] kvm [14867]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2641.874266] kvm [14867]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:03 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x0, 0x0, 0x3, 0x1}, 0x20) 03:53:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2641.957286] binder: undelivered TRANSACTION_COMPLETE [ 2641.963950] binder: send failed reply for transaction 1409, target dead 03:53:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) 03:53:04 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0xfffff, 0x0) [ 2642.296050] kvm [14899]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2642.370817] kvm [14899]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x5, 0x1547, 0x4, 0x8000, 0x10, 0x2, 0x1, 0x6, 0x100000000, 0x9, 0x9, 0x1}) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:53:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x4000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040), 0x10) r3 = fcntl$dupfd(r1, 0x406, r2) syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000940)) clock_gettime(0x0, &(0x7f0000001fc0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'nr0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, 0x0, &(0x7f0000002400)) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002b80)={0x0, @local, @local}, &(0x7f0000002bc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003400)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000003440)={'team0\x00'}) getpeername$packet(r2, &(0x7f0000003480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000034c0)=0x14) getpeername$packet(r2, &(0x7f0000003600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003640)=0x14) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000000c580)) recvfrom$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 03:53:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 03:53:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="006d6567c993056f"], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:53:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 03:53:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x40000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x8000a0ffffffff, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 2643.387800] net_ratelimit: 16 callbacks suppressed [ 2643.387807] protocol 88fb is buggy, dev hsr_slave_0 [ 2643.398179] protocol 88fb is buggy, dev hsr_slave_1 [ 2643.403360] protocol 88fb is buggy, dev hsr_slave_0 [ 2643.408502] protocol 88fb is buggy, dev hsr_slave_1 03:53:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 03:53:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2643.707912] protocol 88fb is buggy, dev hsr_slave_0 [ 2643.713098] protocol 88fb is buggy, dev hsr_slave_1 [ 2643.718298] protocol 88fb is buggy, dev hsr_slave_0 [ 2643.723382] protocol 88fb is buggy, dev hsr_slave_1 [ 2644.188542] protocol 88fb is buggy, dev hsr_slave_0 [ 2644.193692] protocol 88fb is buggy, dev hsr_slave_1 03:53:08 executing program 4: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00%k\b\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) 03:53:08 executing program 3: r0 = socket$inet(0x2, 0xb, 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x9, 0x7fffffff}, @sack_perm, @timestamp, @sack_perm], 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(0xffffffffffffffff, 0x541b, 0x709000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @initdev}, &(0x7f0000000240)=0xc) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1e) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@dev}, &(0x7f0000000380)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x15) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74000000190001002b8f8400fedb250ab00000ff02c80300100000080014000600000008000600000400000800040000", @ANYRES32=r2, @ANYBLOB="0c0016000800350004000000080017007f000000080017000200000008001700f8ffffff08000600001000000c000900d2480208", @ANYPTR, @ANYBLOB="080006000200004d7062e28e4fbab6ad1200"], 0x5}, 0x1, 0x0, 0x0, 0x4040}, 0x20000001) 03:53:08 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x0) getpid() ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/keycreate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000200)=0x6) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x8000000000000, 'memory'}]}, 0x8) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/36) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000180)={0x2, 0x4, 0xc90, 0x6}) 03:53:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000]}) [ 2646.179328] kauditd_printk_skb: 8 callbacks suppressed [ 2646.179342] audit: type=1804 audit(1547869988.106:2759): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2465/memory.events" dev="sda1" ino=17421 res=1 [ 2646.221680] bridge0: port 2(bridge_slave_1) entered disabled state 03:53:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x35a) 03:53:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2646.228182] bridge0: port 1(bridge_slave_0) entered disabled state [ 2646.235147] audit: type=1804 audit(1547869988.156:2760): pid=14981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2465/memory.events" dev="sda1" ino=17421 res=1 [ 2646.313010] kvm_set_msr_common: 6 callbacks suppressed [ 2646.313023] kvm [14974]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2646.318048] audit: type=1804 audit(1547869988.156:2761): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2465/memory.events" dev="sda1" ino=17421 res=1 03:53:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 03:53:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000]}) [ 2646.434034] audit: type=1804 audit(1547869988.186:2762): pid=14983 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2465/memory.events" dev="sda1" ino=17421 res=1 03:53:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, 0x0, 0x0, 0x0) [ 2646.595812] kvm [14995]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2646.881124] bridge0: port 2(bridge_slave_1) entered blocking state [ 2646.887646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2646.894439] bridge0: port 1(bridge_slave_0) entered blocking state [ 2646.900869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2646.946925] audit: type=1804 audit(1547869988.866:2763): pid=15002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2466/memory.events" dev="sda1" ino=17421 res=1 [ 2646.989731] device bridge0 entered promiscuous mode [ 2647.015227] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2647.107190] kvm [14995]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2647.169449] bridge0: port 2(bridge_slave_1) entered disabled state [ 2647.176032] bridge0: port 1(bridge_slave_0) entered disabled state [ 2647.183444] audit: type=1804 audit(1547869989.106:2764): pid=15002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2466/memory.events" dev="sda1" ino=17421 res=1 [ 2647.245952] device bridge0 left promiscuous mode [ 2647.263402] audit: type=1804 audit(1547869989.156:2765): pid=14994 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2466/memory.events" dev="sda1" ino=17421 res=1 [ 2647.312467] audit: type=1804 audit(1547869989.156:2766): pid=15002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2466/memory.events" dev="sda1" ino=17421 res=1 03:53:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, 0x0, 0x0, 0x0) 03:53:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:09 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) creat(&(0x7f00000006c0)='./bus\x00', 0x0) r3 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) write$P9_RFLUSH(r3, &(0x7f00000004c0)={0x3fc}, 0x1a6db1e6) fsync(r3) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000400)={0x0, {{0xa, 0x4e23, 0x0, @local}}}, 0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00') 03:53:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = getpgid(r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x40140, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000200)={{0x100000000, 0x8}, 'port1\x00', 0x30, 0x0, 0x1, 0x1, 0x3, 0x400, 0x8, 0x0, 0x7, 0x6}) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000180)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRESOCT=r0], 0x1f) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:53:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) ioctl$KDSKBLED(r1, 0x4b65, 0x9) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:53:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 03:53:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') preadv(r0, 0x0, 0x0, 0x0) 03:53:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x5, 0x40000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000001180)={&(0x7f0000ffd000/0x1000)=nil, 0x80, 0x4, 0x62, &(0x7f0000ffc000/0x4000)=nil, 0x4}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9689, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000180)=""/4096) [ 2647.866766] kvm [15019]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2647.912475] kvm [15019]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000000), 0x33e, 0x0) 03:53:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 03:53:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2648.202761] audit: type=1804 audit(1547869990.126:2767): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2467/memory.events" dev="sda1" ino=17422 res=1 03:53:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x33e, 0x8004) 03:53:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) [ 2648.441342] audit: type=1804 audit(1547869990.366:2768): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2467/memory.events" dev="sda1" ino=17422 res=1 [ 2648.518532] kvm [15054]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in=@multicast2}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x400000000000308, 0x10000, &(0x7f0000001000)={0x77359400}) 03:53:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2648.578158] kvm [15054]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2648.587798] net_ratelimit: 24 callbacks suppressed [ 2648.587806] protocol 88fb is buggy, dev hsr_slave_0 [ 2648.597950] protocol 88fb is buggy, dev hsr_slave_1 03:53:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(r1, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:53:10 executing program 0: setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) syz_read_part_table(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x0, r1}) umount2(0x0, 0x0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) rename(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0xffffffffffffffff) mknod(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0, 0x0) 03:53:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) [ 2648.911305] kvm [15074]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:53:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:10 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000200)=0x80) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @rand_addr, @initdev}, &(0x7f0000000280)=0xc) r2 = gettid() r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x80) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) clone(0x2e828903, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_GET_KEEPCAPS(0x7) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x4002, 0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) wait4(0x0, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000002c0)) fremovexattr(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="5b22f41b00"]) 03:53:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe2b, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0) [ 2648.975204] kvm [15074]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 03:53:11 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x460000, 0x0) sendto$llc(r0, &(0x7f0000000580)="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", 0x1000, 0x10, &(0x7f0000000100)={0x1a, 0xb, 0x7fff, 0x1, 0x400, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) listen(r0, 0x74f4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$void(r2, 0xc0045878) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:53:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2649.355737] kvm [15103]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 03:53:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2649.627856] protocol 88fb is buggy, dev hsr_slave_0 [ 2649.633052] protocol 88fb is buggy, dev hsr_slave_1 [ 2649.638267] protocol 88fb is buggy, dev hsr_slave_0 [ 2649.643338] protocol 88fb is buggy, dev hsr_slave_1 03:53:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xffffffffffffffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x2, 0xfff, 0x7ff, 0x5}, 0x98) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0000001000005200"], 0x200600) 03:53:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 03:53:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2649.947799] protocol 88fb is buggy, dev hsr_slave_0 [ 2649.953009] protocol 88fb is buggy, dev hsr_slave_1 [ 2649.958227] protocol 88fb is buggy, dev hsr_slave_0 [ 2649.963333] protocol 88fb is buggy, dev hsr_slave_1 03:53:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="44e9d546cdf4e181", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=r1], @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYPTR64], @ANYPTR], @ANYRES64=r1, @ANYBLOB="cedd809b284e940530680b055bc187d9a04726c94b9fb4830cc8c555a8cb26230c8a1084e720465f8aaa774bc4af3e3998004799d77ec4b2ab03dd4cdb3295370b8e68973824e6ded57458a35145e9cdafe348ebdfc172f9a6f7e6e46c444278a91a8b2408c0e2120f8be3c8be10856c27489b452baf19189c5e178d3a0004637da4a3ba3f928b41cfd2206d422ee89e224f3c629c4648e9582e5a070256880e02b6bbc75ced8db2634d3e36cf5b5c5d920c1b63ae165c97733f4b0d556b90b4b24f35bf479fea6490476fa7d77c9afbef06cea8a602ce2c7f071e2e987c728d09337c38ae6ca28f66c80e204da91a6ee829676e9dc17516c408f42892f82abf1173c39df0f20b3fab2f01971503e8c58cc1d623c488d928f90e6baa5d96c23e7b76a9d4b34947d44a56a19a02cf1f7d28e99944f380704299d5d13653a827f610d90843c4ff76ed48df19e9ca5b4416509f484511b5df09cfa04114c3bb6349d595d2fafda3b9d6ac5d2312526f148904d34f382b30b11daeb1dfc78bb5385078f1e581ba3b09b689ac4ef01d0d50cb47e0b870012cefa84d02c182c7c0222539fb3e474e6e088ff1c18434fa357d0d2624588f7b9b4303439fb065b41d1a1e50f066c375848c569a7cc0ea06a13acc775346cfed313b396751954cc54eed12b3024dff1d34b54e2b96a7c966a7b539c11ced9639dc27bcaaca9a3ecf54e95e6749306ae151a66159fac9b9cbcdab04bcfa15ab689c78e748ef19d7dee3f8c9466572cc72c2ff092115501d5f39e3100e0c370c9102d725eb8f2e0d3f57ab9422ffb9506fcd1a405eed6b0b0cc34a805b6a62662820f71423ea1ae1ae69df12f3d03b7094a6ba0f71daa59cd64a940390fc5e1e99b227c69f72b2cbde7992211314573659718f3bc826fca376caeed151c08bbc007feeb4ba67f92a23b2445b59b077f195e80bc41ca5a513c8b18ed20881e71d09c068af86d8a6f0783dad2727b24960505ead538f26686f763a8a4166ec3592738e9d28b4b109faea0b05b7711b0d866278730b0b87bed87aadec1061f065e945661d0e7c859da920efb6b8f07ce44a83c68f8a0ae9016a9a2cb17c6b83acde803de91aa1a4071f255b815e53f1b95d4a5301092eb797f05478dee7d0140e18ce41ef7e103f44e899d2c6ec448b45e67834913dedfab07cb659c694be8a6d5612e4e3de485215fd0436835cf31f085259345fa244258130e4972e6cd3caf4fff96dceb31edd8403339889107a3ad11167e186711c410cb49afdf7ba0aad594bb7c9b42811995c4f4b9dc0ffab5a044fbc766d3794d450c48568c894faa2f689a674f1da655eba69ce2bfa6467da7be4c1c297140ca9eaf95f8dc7b1fa77eb7491017b5c056eedf425ae8b03334b6eefce7c4527d503a226073bd64c97298c0eb35121c00dcd0a86999dd3250ca037b3584ef50ed000ba98df9efcdcdd480c60e5c7cad22abb4fb587b44a026cd14622630c938396618f0dc05f27f9b19ac1a78e868c685ac4045c3e428a92ea1d142c4d84901a14b809ab8f4f0b880832217fc39ff03c08873880d09fb72eddeef44ea8b9463dd8110ce1cbb03b3f5608cb70eed11ca8915dfc5f13dd6175d1459666c1f976f0c96efbe43c16a9971db24663143e0671014b4e4c0c46921ab9c3fdc819d10912167ca56913961e1c690dc12d6fb38b9021aeb5ff2d657abc6536138a2f608463b40bfa90b3632f8b61c6f81596e8883787bf74c873f2aedac652ae44e5203d4382021164be1480dcc3be086e6fbd31008ecf2ec6d84b9630fd0f1a21f6be163d66b3e0d237276fdba7f3bd4074c0fe7be776f133d68dc6248e26a95cbe931a59f9922ac5ef12f6b0efa164b9b0003548359f5b7a18c5179815be212320019197f0199d7f0a2b52ec8250075a926b920da0b2622a9a4508fb05ec7ca445522afb2509f2d3ac821c22b18acc758c91d3e7e1e030323c4d0e8e31106516c3efda4a60284e51d8f2c4318ae05e65a8b17787300d5694b60303ed226398be97a67cf36cb2c705a5d3da50a4271a10adfdb051652c79a99f97f2113b725f1a61cf55d0b5a3de9a965cd14e8659350cf8fd14a241390f2e293c74a9c532d760f61d5aa47894730fc66aacb9871f9e650d99494eddde525d027e132b37c70ec4e5dcf4c5d4de93b42ea1e091d2f399c096e8997c9c211caffd328cd7b623d87e020bd50a24d16f51c09d3fc19b799a3a5e39ef20c8e6864f747a1529fb5d913236f6270a4cd8c662b5ef12afc2a1cdd47541c29f64fa9f361ddd515f8cb90460a88779620e5b4b41c89622e544114c626b102454b675be7a88f68588f4f8ac2f822014694870edf1926446c029f2b7f49c4f58350f65858c936285ae4f9e0cabe939cb8c3f39b9e6e4c28c0b1f44e25b5e88e2847ba43298a55d01b73e9975c2c9f33a8863720d455adad7481a06e24eec7d78e72db203f277f7d1a3931dc0f7056eeede113c1e4b45d2d4925b0c96ec9efd8e5bf0c7e080555985667d85e8b73717ac5fcb834765f4209a7c38f8f47e77706d16748adec119a85e46c7e57dc8211b4c4e8797b2d0132dbded9daf386e678b425cc9999ae2436f77051349be805a9b7d7122da4b4563f457d8e803cb00ef67f6b5d97b9e9fae4c1f10bedcc3c4938c7f285245ccd75e8db9f8534afa7820a70360d9ff8e21cf8fbab10ced6e0af5866a1de7e03aae8c7ea7742958b25d2fb7684a09a3eb06b7a9fd5c7e4a16d7f52ee7484eace48fb8e64f07ff57f89e167c466c3ea264532cecbd91f89be828ae8983088e6d78de1ac180b3420b0e02539cdb1b6894a4499268690859801ca53dc7c8d80f7b03dbe53c295b83f28269a87df61eeb68d1d44f48bff7f5f4cb2e921bf0fa0db7cc86532fa9298d979595b4e768118b452de7fde632d5ef9712564dcd4023ba5324741debf7e49ffdf275c636be8d8796c5db0d87d68320750f2f8bc130bbf13da8604def28ff25b2afcc19a3ea5b5074384dc376208ea0f6c8b0dce32dca946d2fcc408edef203579d59ad2c081b496ff4ca09ea646f1b2bc9fd83f5b1283248504ebe0e50562aa728cc44e4a633046e30af28a1a8a3d1ba8be85357c2b522cf06a0f6ca58bffd4c1e8c19b7cd4b42ede2026d0945dbc103b7a12690df54c78ae32dea4ed201a345fd5439d2de3a7d4de700d5a04974abee3a90226806248c568636aed92892fb1074b9f496fcd73d9508973e6aeb78fa909d6ca274093657a44eb596dc54df3bd8502ab675a06c9f404f71e355e7e8c303595f89ef6fcc84988a87c2d42f4ddcd1e6ffd4c6b46ed5bd459c6cef8f8b0260f4f8e4b414cfc9a5e20bade2193290b661ad2c1a1d2082d1befdb9d255a6840d69e6e3c503b5de98da2c6e5ef358869574402149faa155722e49759fd4a6d78120bf75fa7a90b2fb3f07f8c6d7021e549a3088c6527bc1cc2b93be361463a0e9278268c256c80d4fb394a47f7a90a79dbb7a504a0c9c30c06fb4ec15da179cc110b11898e020910fc4418f26029925bb7bd84829f1b85356abb2bca5ffdfef1150f3daa4f0c51ab8fb737e7d1473cd5e4c6a478bb210c8775d3de0ab35a7dc11e86ae7dcde4b842225c17d8d72ead0f22fb4e8e8e048d8bbf87ba2546d4c7a2400feb33a7e2eda181e6a33630829f3d105adfc650bd86129e21cf02cdc89cdf97623c69c9ec4ead9992bd8954b127d85c99d75dbd200379a7a32546dd90f275be4f4c91d152bd74f58112d63fce33d1aa31ecd4cd78efa0c80d713a033e2f099ecc20d626cb4f479e74c346c8374a3c9f6e7f53387022778d64c8fce4af8772e8326f2b88143b96a2d7983e73539154fb54026521da63d459d770ac40d1b876f4e975e7e15a109608cb043cb08dd6f3a1bbede20b3298f85dace2bf4961ec4efb8ffcdfa512401a4a46ac10cfb2a8617dd95d781d7f4344b6823152620e62e5846a0c20940d4e0ce185307396a32f4fb9d0122b5272139672492cbc36933ed88945544c73ca8d2bce8e2c97556119278783ad19174fc7bc118f40a7dd8b4182e6127150289972fe75f90f518bfd89942b26bbac374db59f370d896c30e45a21bf16c117f112aa58650110ea84c15e777859b696989b56b27c13b66144bbfe697792d0d3d185c26859343ab43ed10b4d698c088c1d042723a15533cc4f786d598c2db9c090251a80983842fa901daafd8dcaf410fd804157767e74bd88dba477f3598062908fc3f17720bd5fe1d94b0fcb070e0581f6a1437aa024f1871df5f90f990b858b16625cf8dd29403f6b5725f1f40c5207613f02d3763a0d5709b13ad9a46572d4ae444e8df0ca38fb7c883e9d397eacfa571944f830569e25007f304adb69902d6b931fea8b4b9cd5c8fee6860dd7f367f90fe7e6fa588c9544522e26c53dec1578fb4773597711ff0a6126499a9b2c712510f8d24403b2ac09cea82ac9a47980ef9fe7eb4ee6608addf38d1cfd954f2c7eae69d01f2657cf5c73ae87539d6e79763ce8a92f49f6f3e3f91ec4576931816798508a1836f88ccbb092afa5e5d2785bb1b0b66ede987d6740b9e3537b66f093aec223cd7f208b9283694cca5cc563ab0536d89954a48bccbd5eb9e03e5deb70308bfef85ac09e10e2d9dbfbdd24d0d14e4fb84df6fd38d15a95677efc3405bd8defc1c1da1dffb6de3f58511f94664307d1ea6ba4ad60e86ebc9eec09875d4872ae15fead1b1aa3f37d28131150070afd221ffc7d072c0c0410ec38bd64d2b653f0bccd4a950eb217ea6672dd7d15a8134a3e830b283f4da5c007743d5b5b58bda1d9a4bbe92051ffe59055bb3f39cf32028e12c79a65db4978884cf506fba476022117fb1cf3b9a67cd2714a1919a9aa6cf80cb68bb8d8740b32246cb4ae41325e67f9d717824566df3145b781db04661e599979c2e6066fdbb96b422d203dfae8ce4fcb1f8cd798ffd0a46b6c899aec13c344a803e1ea09fbb2f360e560ca6d814a9f0a99608a2634f19ac40fe3ade889c029ac89a1995e4c65e487fa38f7f4ffa4fc0a3665962ad6b3114f9c69103e262804bc6a2b9ab46bfa4c621d24a79a7e505f293d79056062162f5eaa172139f9ded35e8ee455b3be742618a346a84e77c244fe042511f503b9e7be488b35135ccde61d79f055d809ee72c4e4ee44bae6c068806221f0887f746cf711f9afa73ba293eda755a8909d1f0f02a59653042a42d4b0fcaad51b9443e1dd12628eb4609d6cb4d0e5f2903c7aaa74a2022991816740895bc01af69ac07000822d9998a5b7ef1bc611e36bb069cc6238b6fc0d38625d4c15dca4be8aa56de4d30cb015e627a4a045ed7064b5fd65f387eb2804cc32f99c77506598915f5051ea6bada306b084860e8d5998fa8c5acc45778bfe7291f7223955522c0df25bb6f055eab8bb5e8394879db6501e2a3e88303007d251e3a73547fcaef3f1365711d5c829de7317a503a4fa36541a42447d3a2a47bd38e22993ecafc73f8faa515af97494e806b5b93226d57fb75c82a62bb3f60924d51ea7f40d30de95305b0e073b27e62695427515e14a90ad175b7df4446a7c4dcd3a4faf085b4925b8a0305f09a083752426bfebdcf8aef607cd0156bfd8c68f612dd801b382fded06bf58278a5a1573c0147268b89965eb0e1f0dcb6bdaeb4b625a63c83c2811d90c16150babf7e8fe8b4b39f7b1f1162d36c79a64e07782c236fe22c1a40f93ed4737377f1d319594fcc8e975554fd460cac5cc05002b9dfc1af0879c1843f43", @ANYBLOB="3ec975"], 0x1037) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:53:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() getsockname(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) write(r0, 0x0, 0xffffffffffffffd7) tkill(r1, 0x1000000000016) 03:53:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xb00000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 03:53:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000045040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="43037f632e7592319135dad4e437", 0x0, 0x100}, 0x28) 03:53:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:53:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 03:53:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="006d6f7200609f70283b8b7920"], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 2652.134350] kvm_set_msr_common: 5 callbacks suppressed [ 2652.134364] kvm [15150]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2652.162026] kauditd_printk_skb: 6 callbacks suppressed 03:53:14 executing program 0: [ 2652.162059] audit: type=1804 audit(1547869994.086:2775): pid=15157 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2471/memory.events" dev="sda1" ino=17447 res=1 [ 2652.212617] kvm [15150]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 03:53:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xc00000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 03:53:14 executing program 0: [ 2652.579611] kvm [15170]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:14 executing program 4: [ 2652.608178] audit: type=1804 audit(1547869994.536:2776): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2471/memory.events" dev="sda1" ino=17447 res=1 03:53:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xd00000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:14 executing program 0: [ 2652.672390] kvm [15170]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2652.692311] audit: type=1804 audit(1547869994.566:2777): pid=15157 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2471/memory.events" dev="sda1" ino=17447 res=1 03:53:14 executing program 4: [ 2652.835930] audit: type=1804 audit(1547869994.566:2778): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2471/memory.events" dev="sda1" ino=17447 res=1 03:53:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000100)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000080)={0x8, {0x1, 0x8, 0x88, 0x9}, {0x6, 0x1, 0x2, 0x9}, {0x0, 0x1}}) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) 03:53:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) ftruncate(r1, 0x6) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200697) 03:53:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}) 03:53:14 executing program 0: 03:53:14 executing program 4: 03:53:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xe00000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:15 executing program 4: 03:53:15 executing program 0: [ 2653.126410] kvm [15188]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2653.173239] kvm [15188]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:15 executing program 0: 03:53:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0xf00000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:15 executing program 4: 03:53:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) [ 2653.418662] audit: type=1804 audit(1547869995.346:2779): pid=15199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2472/memory.events" dev="sda1" ino=17423 res=1 [ 2653.468651] kvm [15211]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2653.509922] audit: type=1804 audit(1547869995.396:2780): pid=15199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2472/memory.events" dev="sda1" ino=17423 res=1 [ 2653.545983] kvm [15211]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2653.586429] audit: type=1804 audit(1547869995.406:2781): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2472/memory.events" dev="sda1" ino=17423 res=1 [ 2653.683742] audit: type=1804 audit(1547869995.606:2782): pid=15199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2472/memory.events" dev="sda1" ino=17423 res=1 [ 2653.787808] net_ratelimit: 16 callbacks suppressed [ 2653.787817] protocol 88fb is buggy, dev hsr_slave_0 [ 2653.798072] protocol 88fb is buggy, dev hsr_slave_1 [ 2653.803211] protocol 88fb is buggy, dev hsr_slave_0 [ 2653.808302] protocol 88fb is buggy, dev hsr_slave_1 03:53:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)='/dev/ptmx\x00', 0xa, 0x2) 03:53:15 executing program 4: 03:53:15 executing program 0: 03:53:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 03:53:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x5, 0x4000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x60, "36b1f31ef4316f67ff7760697859012365a10bb0753444d9f50541532a8a53725397b2a74d52fe29a74c8880cdd01a93e5b4b89f6f52d3a17e09cd3ef177b16209057819c411bf7afb8280acb5faae1eab4390602ce5007d0c569525ecc365f0"}, &(0x7f0000000080)=0x68) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e22, 0x0, @empty}}, 0xffffffffffffffc0, 0x7}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:53:16 executing program 4: 03:53:16 executing program 0: [ 2654.107790] protocol 88fb is buggy, dev hsr_slave_0 [ 2654.113034] protocol 88fb is buggy, dev hsr_slave_1 [ 2654.118242] protocol 88fb is buggy, dev hsr_slave_0 [ 2654.123375] protocol 88fb is buggy, dev hsr_slave_1 [ 2654.153638] kvm [15225]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:16 executing program 4: 03:53:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x9, 0x6, 0x4, 0x5, 0x1a, 0x8, 0xfffffffffffffff7, {0x0, @in6={{0xa, 0x4e22, 0x5e6, @mcast1, 0x7fff}}, 0x7fff, 0x80000000, 0x3, 0x0, 0x6}}, &(0x7f0000000080)=0xb0) accept4$bt_l2cap(r1, &(0x7f00000002c0), &(0x7f0000000300)=0xe, 0x80000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000240)={r4, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x7fffffff, @mcast2, 0xa00000000000}]}, &(0x7f0000000280)=0x10) [ 2654.249252] kvm [15225]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:16 executing program 0: 03:53:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1100000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2654.587919] protocol 88fb is buggy, dev hsr_slave_0 [ 2654.593120] protocol 88fb is buggy, dev hsr_slave_1 [ 2654.633935] audit: type=1804 audit(1547869996.556:2783): pid=15247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2474/memory.events" dev="sda1" ino=17431 res=1 [ 2654.765898] audit: type=1804 audit(1547869996.686:2784): pid=15247 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2474/memory.events" dev="sda1" ino=17431 res=1 03:53:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="1900396c62d8639cfe85e9f30100b6cc0cbc7b3e442532dd82af7a0615bcbdce6856c1bf810a37484d80897b20c15e12b22917e9a34e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x1, 0x4, [0x1000, 0x9, 0x1, 0x1]}, &(0x7f0000000180)=0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000001c0)={0xffffffffffffff17, 0x2, 0x0, {0x3, 0x5, 0x2}}, 0x28) 03:53:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) 03:53:16 executing program 4: 03:53:16 executing program 0: 03:53:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1300000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='\xf8\xff\xff\xff\xff\xf7\xff\xff\xc4\x8e.eve\x16S\x1d\xb6\xf24\x18\xa9\xfc\x0f/\xcb\x8ex\xfa\xedp\x88Kr\x1dj\x0f5\v\xb8\xb8\xf1\x9ceN\x97k0 \xb9\xaf\xe3\xd0%6\v\x9d_\x97\x8d0Ms\x8d\xe2\x06)?\x89\x8f\b\xe9J\xcf#0xffffffffffffffff}) accept4$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14, 0x80800) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000940)={@hci={0x1f, r1, 0x3}, {&(0x7f0000000800)=""/227, 0xe3}, &(0x7f0000000900), 0x24}, 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x3, 'memory'}]}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:53:17 executing program 4: 03:53:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1400000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:17 executing program 0: 03:53:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={0x0, 0xff, 0x0, 0x20, &(0x7f0000ffa000/0x4000)=nil, 0x756b}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:53:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}) 03:53:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0xae3, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="434d7b9712a266427d749c51c284a90e6cef39d97f50ae31bd3eb4ba8e62f4157d", 0x21, 0x2146}], 0x1040000, &(0x7f0000000340)={[{@nls={'nls', 0x3d, 'macgreek'}}, {@uid={'uid', 0x3d, r3}}], [{@audit='audit'}, {@appraise='appraise'}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x20000, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:53:17 executing program 4: 03:53:17 executing program 0: 03:53:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1500000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:18 executing program 4: 03:53:18 executing program 0: 03:53:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 03:53:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1600000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:18 executing program 4: 03:53:18 executing program 0: 03:53:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0xfb6c, 0x1d24}) 03:53:19 executing program 4: 03:53:19 executing program 0: 03:53:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 03:53:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1700000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:19 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) write$nbd(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="67446698000000000200030004000000c2f8556b9dd3b9ac0e241d17202a669fae186fcb91df5961c30ebc9c49dd326fdb17a1ad16a8b716ed7afc8e3e459b12d561c57ef93130b50612ced61b4dbcfe5e25fcfcd0271ea1ce1e3fc5d90ba4eac55066b038ab79c9e2689a7d54fa7a7977b2ab76930888ab583ada2f50d7d76f3cca55c5a5acd88204e49bc5510559a66a4515db984e5c5fd13d8b0b8ada34950d0fc5d538b521669c7bd1ec1c5083bdd0c97ff2e6d0afa0944d395f4c6c0e819c80aad03684"], 0x53) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) dup3(r0, 0xffffffffffffffff, 0x80000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) 03:53:19 executing program 4: 03:53:19 executing program 0: [ 2657.205302] kauditd_printk_skb: 6 callbacks suppressed [ 2657.205315] audit: type=1804 audit(1547869999.126:2791): pid=15325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2478/memory.events" dev="sda1" ino=17701 res=1 03:53:19 executing program 4: 03:53:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x400000, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x80000001, 0x20c0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x101) getsockname$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:53:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x190f000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:19 executing program 0: 03:53:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 03:53:19 executing program 4: [ 2657.617131] audit: type=1804 audit(1547869999.536:2792): pid=15325 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2478/memory.events" dev="sda1" ino=17701 res=1 03:53:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x6) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r0, 0x541b, 0xffc000000000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10002, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xffffffffffffffff}, &(0x7f00000000c0)=0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x100}, &(0x7f0000000180)=0x8) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20090000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x102, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 03:53:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x1000000, 0x5000000) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="006d656d6f7279034cb79fb7591259729acfdc96928897d2af94e35e7bfc3f561054540fc3a10099786d"], 0x200600) 03:53:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="bf16000000000000b707000001001000487000000000e0ff40000000000000009500000200000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000100)="45a61212a20e292982a393239716cc", 0x0, 0x3fb}, 0x28) [ 2657.738132] kvm_set_msr_common: 6 callbacks suppressed [ 2657.738144] kvm [15342]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x1f00000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2657.773878] audit: type=1804 audit(1547869999.566:2793): pid=15344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2478/memory.events" dev="sda1" ino=17701 res=1 03:53:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:53:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) lsetxattr(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)='lo\x00', 0x3, 0x0) [ 2657.869492] kvm [15342]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r0, &(0x7f0000000180)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00\xba\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\xc2\xed0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000100)={0x200000003, 0x0, [0xc0000100, 0x0, 0x40000082], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) 03:53:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) 03:53:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20c0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @multicast2}, &(0x7f0000001180)=0xc) bind$can_raw(r1, &(0x7f00000011c0)={0x1d, r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) getsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$inet6_dccp_buf(r3, 0x110, 0x3, 0x0, 0x4) read$FUSE(r0, &(0x7f0000000180), 0x1000) ioctl$TCFLSH(r0, 0x541b, 0x709000) 03:53:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) lsetxattr(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)='lo\x00', 0x3, 0x0) [ 2658.228706] kvm [15372]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 03:53:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r3 = syz_open_pts(r0, 0x0) dup2(r2, r3) [ 2658.316534] kvm [15372]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 2658.325570] audit: type=1804 audit(1547870000.256:2794): pid=15363 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2479/memory.events" dev="sda1" ino=17699 res=1 [ 2658.398452] ------------[ cut here ]------------ 03:53:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x2010000000000000, 0x0, 0x0, 0x400, &(0x7f0000000780)={[{@block={'block', 0x3d, 0xa00}}, {@block={'block', 0x3d, 0x200}}, {@check_relaxed='check=relaxed'}, {@check_relaxed='check=relaxed'}, {@sbsector={'sbsector', 0x3d, 0x100000000}}], [{@obj_user={'obj_user', 0x3d, ')eth1vmnet1*.trusted'}}, {@dont_hash='dont_hash'}, {@euid_lt={'euid<'}}]}) [ 2658.457869] do not call blocking ops when !TASK_RUNNING; state=1 set at [<00000000160020b1>] n_hdlc_tty_read+0x32a/0x810 [ 2658.515577] WARNING: CPU: 0 PID: 15387 at kernel/sched/core.c:6094 __might_sleep+0x13d/0x190 [ 2658.524213] Kernel panic - not syncing: panic_on_warn set ... [ 2658.530113] CPU: 0 PID: 15387 Comm: syz-executor3 Not tainted 5.0.0-rc2+ #32 [ 2658.537306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2658.546665] Call Trace: [ 2658.549270] dump_stack+0x1db/0x2d0 [ 2658.552917] ? dump_stack_print_info.cold+0x20/0x20 [ 2658.556552] audit: type=1804 audit(1547870000.436:2795): pid=15363 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2479/memory.events" dev="sda1" ino=17699 res=1 [ 2658.557973] ? __might_sleep+0x50/0x190 [ 2658.585390] panic+0x2cb/0x65c [ 2658.588613] ? add_taint.cold+0x16/0x16 [ 2658.592608] ? __might_sleep+0x13d/0x190 [ 2658.596699] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2658.602264] ? __probe_kernel_read+0x1f4/0x250 [ 2658.606856] ? __warn.cold+0x5/0x48 [ 2658.610601] ? __might_sleep+0x13d/0x190 [ 2658.614672] __warn.cold+0x20/0x48 [ 2658.618231] ? __might_sleep+0x13d/0x190 [ 2658.622300] report_bug+0x263/0x2b0 [ 2658.626007] do_error_trap+0x11b/0x200 [ 2658.629919] do_invalid_op+0x37/0x50 [ 2658.633642] ? __might_sleep+0x13d/0x190 [ 2658.637722] invalid_op+0x14/0x20 [ 2658.641213] RIP: 0010:__might_sleep+0x13d/0x190 [ 2658.645894] Code: 65 48 8b 1c 25 40 ee 01 00 48 8d 7b 10 48 89 fe 48 c1 ee 03 80 3c 06 00 75 2b 48 8b 73 10 48 c7 c7 c0 23 4b 88 e8 c3 13 f3 ff <0f> 0b e9 43 ff ff ff e8 f7 b5 6d 00 e9 26 ff ff ff e8 ed b5 6d 00 [ 2658.664805] RSP: 0018:ffff88805d0d79a8 EFLAGS: 00010286 [ 2658.670185] RAX: 0000000000000000 RBX: ffff888084936700 RCX: ffffc9000c7d8000 [ 2658.677487] RDX: 0000000000014a16 RSI: ffffffff81685456 RDI: 0000000000000005 [ 2658.684767] RBP: ffff88805d0d79d8 R08: ffff888084936700 R09: ffffed1015cc5021 [ 2658.692049] R10: ffffed1015cc5020 R11: ffff8880ae628107 R12: ffffffff88819660 [ 2658.698306] audit: type=1804 audit(1547870000.436:2796): pid=15369 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir411331326/syzkaller.PmyciT/2479/memory.events" dev="sda1" ino=17699 res=1 [ 2658.699323] R13: 0000000000000019 R14: 0000000000000000 R15: ffff888084936700 [ 2658.699365] ? vprintk_func+0x86/0x189 [ 2658.734378] ? __might_sleep+0x13d/0x190 [ 2658.738453] ? n_hdlc_buf_return+0x290/0x290 [ 2658.742884] __might_fault+0xc6/0x1e0 [ 2658.746705] _copy_to_user+0x30/0x120 [ 2658.750540] n_hdlc_tty_read+0x60f/0x810 [ 2658.754623] ? n_hdlc_tty_write+0x790/0x790 [ 2658.758959] ? __fget+0x499/0x710 [ 2658.762430] ? wake_up_q+0x100/0x100 [ 2658.766158] ? ldsem_down_read+0x33/0x40 [ 2658.770235] ? ldsem_down_read+0x33/0x40 [ 2658.774316] tty_read+0x196/0x2a0 [ 2658.777777] ? n_hdlc_tty_write+0x790/0x790 [ 2658.782118] __vfs_read+0x116/0xb20 [ 2658.785754] ? tty_poll+0x1a0/0x1a0 [ 2658.789398] ? vfs_copy_file_range+0xbb0/0xbb0 [ 2658.793994] ? fget_raw+0x20/0x20 [ 2658.797464] ? trace_hardirqs_off_caller+0x300/0x300 [ 2658.802593] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2658.808143] ? security_file_permission+0x94/0x320 [ 2658.813088] ? rw_verify_area+0x118/0x360 [ 2658.817238] vfs_read+0x194/0x3e0 [ 2658.820705] ksys_read+0x105/0x260 [ 2658.824256] ? kernel_write+0x120/0x120 [ 2658.828235] ? trace_hardirqs_off_caller+0x300/0x300 [ 2658.833345] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2658.838121] __x64_sys_read+0x73/0xb0 [ 2658.841948] do_syscall_64+0x1a3/0x800 [ 2658.845842] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2658.850779] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2658.855801] ? __switch_to_asm+0x34/0x70 [ 2658.859873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2658.864735] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2658.869927] RIP: 0033:0x458099 [ 2658.873121] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2658.892018] RSP: 002b:00007fbe2bcb1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2658.899726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 2658.906992] RDX: 0000000000001000 RSI: 0000000020000180 RDI: 0000000000000003 [ 2658.914263] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2658.921529] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe2bcb26d4 [ 2658.928816] R13: 00000000004c4c0a R14: 00000000004d83c8 R15: 00000000ffffffff [ 2658.938092] Kernel Offset: disabled [ 2658.941951] Rebooting in 86400 seconds..