[ 32.711870] kauditd_printk_skb: 9 callbacks suppressed [ 32.711876] audit: type=1800 audit(1568846717.222:33): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 32.745349] audit: type=1800 audit(1568846717.222:34): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 37.878354] random: sshd: uninitialized urandom read (32 bytes read) [ 38.433356] audit: type=1400 audit(1568846722.942:35): avc: denied { map } for pid=7034 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 38.484383] random: sshd: uninitialized urandom read (32 bytes read) [ 39.116626] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.243' (ECDSA) to the list of known hosts. [ 44.730675] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/18 22:45:29 fuzzer started [ 44.930579] audit: type=1400 audit(1568846729.442:36): avc: denied { map } for pid=7043 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 45.914010] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/18 22:45:31 dialing manager at 10.128.0.105:45739 2019/09/18 22:45:32 syscalls: 2466 2019/09/18 22:45:32 code coverage: enabled 2019/09/18 22:45:32 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/18 22:45:32 extra coverage: extra coverage is not supported by the kernel 2019/09/18 22:45:32 setuid sandbox: enabled 2019/09/18 22:45:32 namespace sandbox: enabled 2019/09/18 22:45:32 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/18 22:45:32 fault injection: enabled 2019/09/18 22:45:32 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/18 22:45:32 net packet injection: enabled 2019/09/18 22:45:32 net device setup: enabled [ 48.541446] random: crng init done 22:46:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000020000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 22:46:52 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:46:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) stat(0x0, &(0x7f0000000200)) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000180)={0x0, 0x8, [0x0, 0x0]}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 22:46:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503080028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185c00000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000040000000000000079fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) [ 127.678452] audit: type=1400 audit(1568846812.182:37): avc: denied { map } for pid=7043 comm="syz-fuzzer" path="/root/syzkaller-shm695217077" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 22:46:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x134}) 22:46:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003600)='tunl0\x003;\xb6n\\\x9d\x8f\xdf\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) [ 127.714206] audit: type=1400 audit(1568846812.202:38): avc: denied { map } for pid=7060 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13754 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 128.181040] IPVS: ftp: loaded support on port[0] = 21 [ 129.092324] IPVS: ftp: loaded support on port[0] = 21 [ 129.099212] chnl_net:caif_netlink_parms(): no params data found [ 129.148227] IPVS: ftp: loaded support on port[0] = 21 [ 129.164200] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.171087] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.178325] device bridge_slave_0 entered promiscuous mode [ 129.187705] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.194307] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.201584] device bridge_slave_1 entered promiscuous mode [ 129.233394] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 129.261436] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 129.296652] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 129.304188] team0: Port device team_slave_0 added [ 129.312980] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 129.321086] team0: Port device team_slave_1 added [ 129.326136] chnl_net:caif_netlink_parms(): no params data found [ 129.339337] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.353789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.403906] IPVS: ftp: loaded support on port[0] = 21 [ 129.472689] device hsr_slave_0 entered promiscuous mode [ 129.510517] device hsr_slave_1 entered promiscuous mode [ 129.553180] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 129.572157] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.578578] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.585645] device bridge_slave_0 entered promiscuous mode [ 129.592195] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 129.598875] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.605297] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.612298] device bridge_slave_1 entered promiscuous mode [ 129.626784] chnl_net:caif_netlink_parms(): no params data found [ 129.663852] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 129.674287] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 129.709616] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 129.716907] team0: Port device team_slave_0 added [ 129.725794] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 129.733114] team0: Port device team_slave_1 added [ 129.739081] IPVS: ftp: loaded support on port[0] = 21 [ 129.751680] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 129.760083] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.766554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.773533] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.779956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.788976] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 129.802785] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.809523] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.817011] device bridge_slave_0 entered promiscuous mode [ 129.826594] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.833181] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.840605] device bridge_slave_1 entered promiscuous mode [ 129.903488] device hsr_slave_0 entered promiscuous mode [ 129.960465] device hsr_slave_1 entered promiscuous mode [ 130.013636] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.028494] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 130.035765] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 130.047965] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.106507] chnl_net:caif_netlink_parms(): no params data found [ 130.127671] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 130.135872] IPVS: ftp: loaded support on port[0] = 21 [ 130.137778] team0: Port device team_slave_0 added [ 130.159927] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.166398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.173089] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.179454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.194025] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 130.201464] team0: Port device team_slave_1 added [ 130.207646] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.214746] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.223000] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.229587] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.256146] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.262741] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.269687] device bridge_slave_0 entered promiscuous mode [ 130.276474] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 130.289511] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.296650] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.303686] device bridge_slave_1 entered promiscuous mode [ 130.309872] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 130.356027] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 130.393955] device hsr_slave_0 entered promiscuous mode [ 130.450543] device hsr_slave_1 entered promiscuous mode [ 130.540325] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 130.549543] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 130.571778] chnl_net:caif_netlink_parms(): no params data found [ 130.589685] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 130.606870] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 130.614896] team0: Port device team_slave_0 added [ 130.629104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.647700] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 130.655199] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 130.663030] team0: Port device team_slave_1 added [ 130.668452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 130.688692] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 130.752308] device hsr_slave_0 entered promiscuous mode [ 130.790423] device hsr_slave_1 entered promiscuous mode [ 130.851957] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 130.859344] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.868156] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 130.885816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.892667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 130.901996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.909550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.918395] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 130.925049] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.942936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 130.952376] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 130.959356] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.966002] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.973364] device bridge_slave_0 entered promiscuous mode [ 131.011565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.018616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.031989] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 131.039364] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.045925] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.053716] device bridge_slave_1 entered promiscuous mode [ 131.071727] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.082788] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.091523] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 131.098295] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.105981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.119389] chnl_net:caif_netlink_parms(): no params data found [ 131.136487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.145188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.152927] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.159264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.175344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.190378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.201782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.220530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.228448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.236575] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.242986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.249992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.258590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.266334] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.272724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.279515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.287444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.295107] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.301517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.315764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.323587] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 131.331656] team0: Port device team_slave_0 added [ 131.344153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.352205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 131.359024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.366958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.378121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.385657] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 131.393368] team0: Port device team_slave_1 added [ 131.402222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 131.413265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.421315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.431389] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 131.439812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 131.454317] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 131.461906] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 131.470770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 131.481295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 131.488120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.496141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.503851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.511546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.518976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.527776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.535296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.543029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.550861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.557774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.580155] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 131.593951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 131.601657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 131.608537] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.617534] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.625180] device bridge_slave_0 entered promiscuous mode [ 131.632267] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.638608] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.645725] device bridge_slave_1 entered promiscuous mode [ 131.655326] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 131.661624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.669133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.677173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.684729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.692122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.698990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.762338] device hsr_slave_0 entered promiscuous mode [ 131.800430] device hsr_slave_1 entered promiscuous mode [ 131.840761] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 131.849623] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 131.871392] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.881306] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 131.887396] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.894475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.902129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.911164] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 131.919225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 131.927991] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 131.934108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.941962] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.962887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.970819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.981671] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 131.988060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.002661] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.009801] team0: Port device team_slave_0 added [ 132.017940] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.025325] team0: Port device team_slave_1 added [ 132.035838] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 132.043369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 132.054754] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 132.065444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 132.073191] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 132.081010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.088690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.097099] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.103519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.110917] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.119285] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 132.127539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.182332] device hsr_slave_0 entered promiscuous mode [ 132.220520] device hsr_slave_1 entered promiscuous mode [ 132.260956] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 132.268247] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 132.276661] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 132.286507] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 132.297005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.305153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.312969] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.319307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.333727] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 132.347337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.356978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 132.389646] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 132.396697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.405527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.412611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.421352] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 132.430856] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 132.439274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.467870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.477072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.487532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.495463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.512442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 132.529808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.538354] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 132.550834] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.557002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.565344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.576116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 132.588820] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 132.598465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 132.606449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.621849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.632553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.643251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.652413] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.658806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.674920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 22:46:57 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 132.695088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.707337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 132.715313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.723122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.732812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 22:46:57 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 132.741843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.749734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.765668] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.772107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.782327] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 132.788460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 22:46:57 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 132.800915] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 132.810873] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 132.819373] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 132.834988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 22:46:57 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 132.852647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.869208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.880000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.891864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:46:57 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 132.901504] 9pnet: Insufficient options for proto=fd [ 132.907210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.929124] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 132.953452] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 132.959588] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.978101] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 132.985301] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.991170] 9pnet: Insufficient options for proto=fd 22:46:57 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 132.999379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 133.018023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.027187] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 133.039368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 133.054508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.055543] 9pnet: Insufficient options for proto=fd [ 133.063292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.075857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.090178] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.097017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.107436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.117237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.128419] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.134887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.145223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.159440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 133.177222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 133.188562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.197175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.207299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.215163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.223598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.231845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.239393] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.245842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.252785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.260773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.268321] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.274715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.284362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.294590] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 133.304281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 22:46:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2d2, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x20000000000039, 0x829, 0x0, 0x0, {0x1, 0x1000000}}, 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) 22:46:57 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = dup2(0xffffffffffffffff, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 133.312670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.319618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.327604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.341551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.350776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.361042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 133.377471] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 133.381291] 9pnet: Insufficient options for proto=fd [ 133.393319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 133.404529] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 133.417468] audit: type=1400 audit(1568846817.922:39): avc: denied { create } for pid=7173 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 133.444068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.452367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.460299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.473002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.480959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.490782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.504600] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 133.515967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.539468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.551241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.558898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.567077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.575984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.589249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.597338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.606752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 133.616828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 133.626845] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 133.637547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.645829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.653905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.661989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.669498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.679213] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 133.689061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.701508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.709136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.718985] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 133.726134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.734511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 133.742765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.751848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.762862] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 133.770894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.778476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.794017] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 133.803040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 133.816141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.823328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.833110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.843984] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 133.851086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.871729] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 133.881194] 8021q: adding VLAN 0 to HW filter on device batadv0 22:46:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) stat(0x0, &(0x7f0000000200)) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000180)={0x0, 0x8, [0x0, 0x0]}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 22:46:59 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = dup2(0xffffffffffffffff, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 134.945081] hrtimer: interrupt took 44207 ns [ 134.956590] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 22:46:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2f, 0x3ff, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) accept4(r1, &(0x7f0000000180)=@caif=@dbg, &(0x7f00000000c0)=0x80, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, 0x0, 0x0) 22:46:59 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 22:46:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000002640)=ANY=[@ANYPTR, @ANYBLOB="c85d295868a247a6bb"], 0x11) recvmmsg(r1, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1}}], 0x2, 0x0, 0x0) 22:46:59 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5500000018007f6800fe01b2a4a280930a060001fe80000214", 0x19}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x800000000080003, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a", 0x5) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 135.028150] 9pnet: Insufficient options for proto=fd 22:46:59 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = dup2(0xffffffffffffffff, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 135.078144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 22:46:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) stat(0x0, &(0x7f0000000200)) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000180)={0x0, 0x8, [0x0, 0x0]}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 22:46:59 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f00000001c0)="21a32dac002862b42ddcd93a5b486f8d", 0x10) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) [ 135.130476] audit: type=1400 audit(1568846819.632:40): avc: denied { write } for pid=7225 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 135.168821] 9pnet: Insufficient options for proto=fd 22:46:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 22:46:59 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000000c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000400)={0x40, {{0xa, 0x4e22, 0x7a4e, @mcast2, 0x5}}, {{0xa, 0x4e21, 0x3a5e, @mcast1, 0x1000}}}, 0x108) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWALK(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x10099b7) 22:46:59 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 22:46:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x400c12f5, 0x8126000) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x400c12f5, 0x8126000) unshare(0x8000400) mkdirat(0xffffffffffffffff, &(0x7f0000000740)='./bus\x00', 0x0) mq_open(0x0, 0x0, 0x104, 0x0) [ 135.300750] audit: type=1400 audit(1568846819.702:41): avc: denied { accept } for pid=7225 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 135.372585] 9pnet: Insufficient options for proto=fd 22:46:59 executing program 5: mlock(&(0x7f0000006000/0x1000)=nil, 0x1000) 22:46:59 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 22:47:00 executing program 1: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 22:47:00 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:00 executing program 3: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x205e3000}, 0x200000}) 22:47:00 executing program 5: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:00 executing program 4: 22:47:00 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) 22:47:00 executing program 4: 22:47:00 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 135.653454] 9pnet: Insufficient options for proto=fd 22:47:00 executing program 5: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000180), &(0x7f0000000400)}, 0x1f) 22:47:00 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 22:47:00 executing program 5: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) [ 135.751773] 9pnet: Insufficient options for proto=fd 22:47:00 executing program 1: 22:47:00 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5500000018007f6800fe01b2a4a280930a060001fe80000214", 0x19}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x800000000080003, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 135.926044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 22:47:00 executing program 3: 22:47:00 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:00 executing program 5: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:00 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) 22:47:00 executing program 4: 22:47:00 executing program 1: 22:47:00 executing program 3: 22:47:01 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:01 executing program 4: 22:47:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 22:47:01 executing program 5: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:01 executing program 3: 22:47:01 executing program 4: 22:47:01 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:01 executing program 3: 22:47:01 executing program 2: 22:47:01 executing program 5: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:01 executing program 4: 22:47:01 executing program 3: 22:47:01 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 22:47:01 executing program 4: [ 136.780486] 9pnet: Insufficient options for proto=fd 22:47:01 executing program 1: 22:47:01 executing program 3: 22:47:01 executing program 5: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:01 executing program 2: 22:47:01 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 22:47:01 executing program 4: 22:47:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503080028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071183900000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000040000000000000079fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 22:47:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503080028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071183100000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000040000000000000079fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 22:47:01 executing program 5: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503080028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071183500000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000040000000000000079fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) [ 136.963838] 9pnet: Insufficient options for proto=fd 22:47:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503080028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071184300000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000040000000000000079fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 22:47:01 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 22:47:01 executing program 2: 22:47:01 executing program 5: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:01 executing program 1: 22:47:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/cuse\x00', 0x2, 0x0) io_submit(r1, 0x2, &(0x7f0000001480)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0xfffffffffffffff9}]) [ 137.134175] 9pnet: Insufficient options for proto=fd 22:47:01 executing program 5: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:01 executing program 4: socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 22:47:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"cc9ff1fec8183a8ba1fbb4684654613fc40c5e6b419061015dfb9410e219962979023812aa70a68d04aa3eb49afb6d5559750069a3798d8562b30a5dfb60112bf8bbcceb6631bbe20f7a0c346cc08d71e39983d4ff985c07c4acf6b1b4c392df66dff327bde17aa79cce87c0eb8d0c11e0fe28f595e401844318cff6773a483e3c37baa48be1e9c409191217f763d186b79d69583b344d9903d6167f74662a57dc715bfe42dfb946496d36bd37fd2eba69940c7af1c44037bcaea4dc2f6c1da2942c3d12ff4b4d0b32ef1e3f9848293d1addf600e5b19e1affe6bf715c57dd1e3fbd7c89a9f8acdfb3dd401d150eadfe1c8415e5627cf52300d223ca915648c4036f375475742ff8e85a19dba63374891a84c54771a410f6c410458625d9469fca01cb324258295ecec5390c9f5f76f9eae6e27ace72ff46851ab57f4a2126abd7f7dd33b30046d7258a47130b97656010ee61b6877ae2af6119376281f5af664281792bb9de07f38f00ba407316c6d29473bc6e6adeb0fd0a59d7f27a6f142fc170a2403d87a96d1dbda40b358502a75738068ceab0ddf4d909595d21d0e21c3474e5ba5347c7daa1186d0bfac56bcb223d6fcf1ee3997251603dac9454d0459d9992853f59a3c7f8568b07d72b3640e4559794f43821fdd74e7533b91c90113c4f5fa1accb0e97669b08f2a46f275e3b0960b5c0d7be5004876374ee5257388749c2803bfc26ada03929612704e3cecef39ecabc6c23cae4d2a79a3d8557ce70c53c5b49f6bc89f8a4929f435e5bc847d120b8548d2551cc8561e39a2fc10dc04adc7b49c16433aa5744efe1421c2da15efa6fb734c4502d7adcc90ec6f5320002ec29cfc10684ab15817eb7e3347473a0edbbbc1bdf64ef24109c590a403fd5cc8667df106bb4a7480e72eee8c46da4c1da46b9cb0c0c20281aa06b47b0fb6324246cbda692ed6fe53dc51daf42c6b5b748e453b04e8b8798c921cf8ca5d1aa16652cb0988a3641d821283aa065b143c58e276a41dee7dfc74d03411f6a73789ff92275defd2b16ea666d968ba248aea6a89bd6f965116d7d1b7c59cec604cf9708a395791e08be3a449b711c0cc0cc94c4b3447b33e25b451559cd45a678fa0b059d15097756b9021240e367c272ac66c5210de710bb70b816eef6217c9b85c45bcab0016dd92e0da377f1482edd92d62f3ef73ee56505ce21d54629061f9dd8b36fe4e72cadab475582fc824f10b6c54a5dcedfb7cb95f09ba657fd82ff753fd23014e579ae2a2830b0fcd0032a26b74654d9de57f1cf5cc7589415949b6582f58d46ffa33296683b2638d1a7c1e9c4daabe7a056f406a748bfbacd1584472fe302c35aa4de8c41d83d38955e3a456785cf0a6196949018cb9c974fd02621e606ccaf13aefba484d3838844c7c1ac7e2be4d353d3d6347048873d78a8d6"}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) 22:47:01 executing program 0: r0 = socket(0x0, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r1) close(r2) pipe(&(0x7f0000000140)) ioctl$int_in(r1, 0x5452, &(0x7f0000004900)=0xfffffffffffffff9) splice(r0, 0x0, r2, 0x0, 0xc0, 0x0) write(r0, &(0x7f0000000080)="2400000012005f3414f9f40700090400818a0400"/36, 0x24) 22:47:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/cuse\x00', 0x2, 0x0) io_submit(r1, 0x2, &(0x7f0000001480)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0xfffffffffffffff9}]) 22:47:01 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:01 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:01 executing program 5: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) [ 137.346301] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns [ 137.355655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.373760] 9pnet: Insufficient options for proto=fd 22:47:01 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000)='\\', 0x0}, 0x20) 22:47:01 executing program 0: r0 = socket(0x0, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 137.429131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:47:02 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x7, 0x80, [@remote]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) [ 137.503749] 9pnet: Insufficient options for proto=fd 22:47:02 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev, {[@generic={0x86, 0xf, "e0799a782c090fae2792605814"}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:02 executing program 5: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:02 executing program 0: r0 = socket(0x0, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:02 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x7, 0x80, [@remote]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:02 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:02 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x7, 0x80, [@remote]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:02 executing program 5: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) [ 138.055207] 9pnet: Insufficient options for proto=fd 22:47:02 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x7, 0x80, [@remote]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:02 executing program 0: r0 = socket(0x1e, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:02 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:02 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x7, 0x80, [@remote]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) [ 138.192585] 9pnet: Insufficient options for proto=fd 22:47:02 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:02 executing program 0: r0 = socket(0x1e, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) [ 138.339249] 9pnet: Insufficient options for proto=fd 22:47:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:03 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 22:47:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:03 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:03 executing program 0: r0 = socket(0x1e, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) 22:47:03 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 138.522478] 9pnet: Insufficient options for proto=fd 22:47:03 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 22:47:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:03 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:03 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:03 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 22:47:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:03 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:03 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:03 executing program 2: syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x7, 0x80, [@remote]}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) 22:47:03 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:03 executing program 2: syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x7, 0x80, [@remote]}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:03 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:03 executing program 4: accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2f, 0x3ff, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) [ 139.054553] 9pnet: Insufficient options for proto=fd 22:47:03 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:03 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:03 executing program 2: syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x7, 0x80, [@remote]}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:03 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:03 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:03 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) [ 139.376079] 9pnet: Insufficient options for proto=fd 22:47:03 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:03 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:03 executing program 4: syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0xb, 0x80, [@remote, @loopback]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:04 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) [ 139.497623] 9pnet: Insufficient options for proto=fd 22:47:04 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:04 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:04 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:04 executing program 2: syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:04 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) [ 139.790404] 9pnet: Insufficient options for proto=fd 22:47:04 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x7, 0x0, [@remote]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:04 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:04 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) [ 139.929676] 9pnet: Insufficient options for proto=fd 22:47:04 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:04 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:04 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x7, 0x0, [@remote]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:04 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x41) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:04 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) [ 140.195342] 9pnet: Insufficient options for proto=fd 22:47:04 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x7, 0x0, [@remote]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:04 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:04 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x18) 22:47:05 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:05 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r0, 0x0, r2, 0x0, 0xbc, 0x0) 22:47:05 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x18) 22:47:05 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:05 executing program 2: syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3, 0x80}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x18) 22:47:05 executing program 2: syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3, 0x80}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:05 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) [ 140.601917] 9pnet: Insufficient options for proto=fd 22:47:05 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) [ 140.698161] 9pnet: Insufficient options for proto=fd 22:47:05 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:05 executing program 2: syz_emit_ethernet(0x32, &(0x7f00000003c0)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@ssrr={0x89, 0x3, 0x80}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 22:47:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:05 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r0, 0x0, r2, 0x0, 0xbc, 0x0) 22:47:05 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:05 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:05 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) [ 141.413567] 9pnet: Insufficient options for proto=fd 22:47:05 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:05 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:06 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000400)={0x40, {{0xa, 0x4e22, 0x7a4e, @mcast2, 0x5}}, {{0xa, 0x4e21, 0x3a5e, @mcast1, 0x1000}}}, 0x108) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWALK(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ftruncate(r3, 0x10099b7) 22:47:06 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, 0x0) [ 141.514867] 9pnet: Insufficient options for proto=fd 22:47:06 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:06 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:06 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 141.617405] 9pnet: Insufficient options for proto=fd [ 141.678701] 9pnet: Insufficient options for proto=fd 22:47:06 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r0, 0x0, r2, 0x0, 0xbc, 0x0) 22:47:06 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, 0x0) 22:47:06 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:06 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:06 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) 22:47:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:06 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:06 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, 0x0) 22:47:06 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x0, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:06 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:06 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x6}, @exit], &(0x7f0000000100)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 22:47:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x21, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="06630440000000000063404000000000000000000000000000000000000000ffff"], 0x0, 0x0, 0x0}) 22:47:07 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x0, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:07 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:07 executing program 2: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}, 0x200000}) 22:47:07 executing program 5: ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec", 0xa}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) accept4$netrom(0xffffffffffffffff, &(0x7f0000000200)={{}, [@netrom, @bcast, @rose, @rose, @rose, @null, @null, @rose]}, &(0x7f00000002c0)=0x48, 0x800) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x2101}], 0x2, 0x0) socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) 22:47:07 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x0, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:07 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:07 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2f, 0x3ff, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 22:47:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000002a00)=ANY=[@ANYBLOB="2b706964732019c95561502c0ff99d189d4f686a92d95d0f7ce07567f7bc0e66a0bed7aef34314199546b630513fdfb38a23b9e12d1a0ad3627f14db78750ec86e86c9642319031e1e47c6a7ab0e7090e1643414631c6e3e5afc469c7741a5f7a145ae56cb8c176433de2fb39910e1f7bc4ac7eb85b4ee61218542ea4864c180c0b169bc2ab35193666868a90e593f45ba319f8c8138901f7c7da572c1d65e85d97ff76c00"/175], 0x6) 22:47:07 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x0, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:07 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:07 executing program 0: socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 22:47:07 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bbe000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}}) 22:47:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x0, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:08 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:08 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f00000003c0)={{&(0x7f0000152000/0x3000)=nil, 0x3000}}) 22:47:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xbc, 0x0) 22:47:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) unshare(0x8000400) mkdirat(0xffffffffffffffff, &(0x7f0000000740)='./bus\x00', 0x50) mq_open(&(0x7f0000000540)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) 22:47:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x0, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:08 executing program 0: socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 22:47:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xbc, 0x0) 22:47:08 executing program 0: socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 22:47:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, r4, 0xd0f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x2, 0x0, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 22:47:08 executing program 5: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0x4038ae7a) 22:47:08 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 143.734258] audit: type=1400 audit(1568846828.232:42): avc: denied { read } for pid=7931 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 143.766129] Bearer rejected, not supported in standalone mode [ 143.801783] 9pnet: Insufficient options for proto=fd 22:47:08 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xbc, 0x0) 22:47:08 executing program 2: syz_open_dev$sndpcmc(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000013c0)="ab", 0x1) 22:47:08 executing program 5: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f0000000040)={r2}, 0xc) 22:47:08 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) [ 144.047637] 9pnet: Insufficient options for proto=fd 22:47:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:08 executing program 0: r0 = socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r2, r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 22:47:08 executing program 2: syz_open_dev$sndpcmc(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000013c0)="ab", 0x1) 22:47:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) [ 144.145898] 9pnet: Insufficient options for proto=fd 22:47:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:08 executing program 2: sched_setaffinity(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x82006, 0x800000000000004) ioctl(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xf16cd35ac1de4497, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x1, 0x4c, 0x8, @buffer={0x0, 0x86, &(0x7f0000000200)=""/134}, &(0x7f00000000c0)="c17c4a403d5bacc0a46b8fee65075f5732bbde50e6ccd07a9295ff3bcda01337ba4d5563be160099d926e80ee02cb83f6ebce7f3976746b7e8eec8d38341774f23a17964476eac3aad1a18f7", &(0x7f00000002c0)=""/77, 0x6, 0x4, 0xffffffffffffffff, 0x0}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x6) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200}) ioctl(0xffffffffffffffff, 0x3ff, &(0x7f0000000140)="7c940950f4486425240444e7056f7f7463e993f8770376b0f9da071c134c") dup(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 22:47:08 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:08 executing program 0: socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 22:47:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x53, 0x1, 0x2, 0x0, 0x0}, 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000280)="c2", &(0x7f0000000340)=""/164}, 0x18) 22:47:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:08 executing program 2: sched_setaffinity(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x82006, 0x800000000000004) ioctl(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xf16cd35ac1de4497, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x1, 0x4c, 0x8, @buffer={0x0, 0x86, &(0x7f0000000200)=""/134}, &(0x7f00000000c0)="c17c4a403d5bacc0a46b8fee65075f5732bbde50e6ccd07a9295ff3bcda01337ba4d5563be160099d926e80ee02cb83f6ebce7f3976746b7e8eec8d38341774f23a17964476eac3aad1a18f7", &(0x7f00000002c0)=""/77, 0x6, 0x4, 0xffffffffffffffff, 0x0}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x6) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200}) ioctl(0xffffffffffffffff, 0x3ff, &(0x7f0000000140)="7c940950f4486425240444e7056f7f7463e993f8770376b0f9da071c134c") dup(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 144.404866] 9pnet: Insufficient options for proto=fd 22:47:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r2, 0x0, 0xbc, 0x0) 22:47:09 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x53, 0x1, 0x2, 0x0, 0x0}, 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000280)="c2", &(0x7f0000000340)=""/164}, 0x18) 22:47:09 executing program 0: socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 22:47:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:09 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r2, 0x0, 0xbc, 0x0) [ 144.558192] 9pnet: Insufficient options for proto=fd 22:47:09 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x53, 0x1, 0x2, 0x0, 0x0}, 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000280)="c2", &(0x7f0000000340)=""/164}, 0x18) 22:47:09 executing program 0: socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00\xa1\xd6\xeb\xd9h1\xbdPO\x1e\x1b\x04\xcc\x18\xbdCKwMj\x8f~\x1f\xe0\xa6v-=\x8d\x89\xfe\xac\x02\xf8\x92\xf0B^\xed\v\xd1w', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 22:47:09 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r2, 0x0, 0xbc, 0x0) 22:47:09 executing program 2: sched_setaffinity(0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x82006, 0x800000000000004) ioctl(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xf16cd35ac1de4497, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x1, 0x4c, 0x8, @buffer={0x0, 0x86, &(0x7f0000000200)=""/134}, &(0x7f00000000c0)="c17c4a403d5bacc0a46b8fee65075f5732bbde50e6ccd07a9295ff3bcda01337ba4d5563be160099d926e80ee02cb83f6ebce7f3976746b7e8eec8d38341774f23a17964476eac3aad1a18f7", &(0x7f00000002c0)=""/77, 0x6, 0x4, 0xffffffffffffffff, 0x0}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x6) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x200}) ioctl(0xffffffffffffffff, 0x3ff, &(0x7f0000000140)="7c940950f4486425240444e7056f7f7463e993f8770376b0f9da071c134c") dup(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 22:47:09 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000700)='tls\x00', 0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0xfffffffffffffe01, 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) unshare(0x8000400) mq_open(&(0x7f0000000540)='-$\x00', 0x6e93ebbbcc0884f2, 0x104, 0x0) 22:47:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) [ 144.698392] 9pnet: Insufficient options for proto=fd 22:47:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xbc, 0x0) 22:47:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 22:47:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:09 executing program 5: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000700)='tls\x00', 0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0xfffffffffffffe01, 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) unshare(0x8000400) mq_open(&(0x7f0000000540)='-$\x00', 0x6e93ebbbcc0884f2, 0x104, 0x0) 22:47:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 22:47:09 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:09 executing program 2: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000700)='tls\x00', 0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0xfffffffffffffe01, 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) unshare(0x8000400) mq_open(&(0x7f0000000540)='-$\x00', 0x6e93ebbbcc0884f2, 0x104, 0x0) 22:47:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xbc, 0x0) 22:47:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:09 executing program 0: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000700)='tls\x00', 0x4) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0xfffffffffffffe01, 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) unshare(0x8000400) mq_open(&(0x7f0000000540)='-$\x00', 0x6e93ebbbcc0884f2, 0x104, 0x0) 22:47:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503080028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe000000008500000003000000b7000000000000009500000000000000040000000000000079fc9e94af69912461917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646cb77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 22:47:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) sendto$inet6(r2, &(0x7f00000000c0), 0xffffffeb, 0x0, 0x0, 0x535e2f3003f56a5b) 22:47:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:09 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xbc, 0x0) 22:47:09 executing program 4: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xbc, 0x0) 22:47:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) [ 145.496437] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:47:10 executing program 4: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xbc, 0x0) 22:47:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, 0x0, 0x0) 22:47:10 executing program 0: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0x4008ae48) 22:47:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:10 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:10 executing program 4: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xbc, 0x0) 22:47:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6}, 0x98) 22:47:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:10 executing program 0: setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0xa, 0x209e1e, 0x3, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r0, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 22:47:10 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$FIGETBSZ(r1, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:47:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:10 executing program 3: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8e18) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(0xffffffffffffffff, 0x3, 0xa000, 0x8000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(0xffffffffffffffff, 0x3, 0x5e89, 0xfff9) [ 146.148071] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 22:47:10 executing program 3: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8e18) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(0xffffffffffffffff, 0x3, 0xa000, 0x8000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(0xffffffffffffffff, 0x3, 0x5e89, 0xfff9) 22:47:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:10 executing program 0: set_robust_list(0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) listen(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) 22:47:10 executing program 3: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8e18) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(0xffffffffffffffff, 0x3, 0xa000, 0x8000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(0xffffffffffffffff, 0x3, 0x5e89, 0xfff9) 22:47:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) [ 146.399019] audit: type=1800 audit(1568846830.902:43): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=3 res=0 22:47:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6}, 0x98) 22:47:10 executing program 3: r0 = creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:11 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6}, 0x98) 22:47:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:11 executing program 0: set_robust_list(0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) listen(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) 22:47:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:11 executing program 3: r0 = creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) [ 146.576415] audit: type=1804 audit(1568846830.932:44): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir323007980/syzkaller.FFgvjR/61/file0/file0" dev="loop0" ino=3 res=1 22:47:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:11 executing program 3: r0 = creat(0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:11 executing program 2: init_module(&(0x7f0000000b00)=',-\x00', 0xffeec, &(0x7f0000000880)='\x00\x04\xbejhy\xbc\xa3\x8f:\xce\x1fS*4\x02O\xf8\xb1\x9d#\xf8\xe1\xf9\xa9G\xca\xf7\x1c\x00R~c~\xf9&\x1e\xde\xc2)i\x86\xc9\x04\x01\xcd\x92|\xad\xad.\xb3{Z\xf3\x93\xd1\xe2\fL\xcf\xce\x80\x11\x9f\x80f\xdc\xe34\x98>@\xf0\x82\xc7\bp0\x16\xa5\xb0/\x8dA\x01*\x9f}\xbeBjJ\xfa\xff\xbd\xbc\x92\x86\xbeXi\x1e\x83\x8f\xee\x8e\x03\xc2\xcb\x0e\xdc\xcb\xd4\xe4)=\x0e\xda\bF\x83\'\x05IgJ\xf3Z\xaf\xf4Z5i\xa8\tM\x82\xaf\xba\x15\xf1\x8b=`\x85\"\xa7G\x9am(\x8cF\x8b\xce?\x93mX\xcd\xac\xdb(\xbe\x9a4\x8a\xe8Fv\x7fU\x17B\x9c,\x7f\'\xafr;1\xb8_q7\x9f\fux\x1d\x84\x05eR0\x7f\x18=-#\x8f\xb7;7S\x13\xe7\f\x1a\x1c\xfb\xb1Q!F\x0f]#\xb3\x97\xea\xdc\xf6\"_\x1b]D\f\xc4\xf5\x89\xdarr\xf1E\xf3\xb8\x84\xf67\xfa\xa5\x81R\x1e\xab\xac$&`9\x83o\x8b\xc5\xfd\xd9U\n#\xa3\xdb\xf3\vuh\xed\x17\xbe\xe2\xfa\x117\xd0y\x9d\xa1E\a\xff|\xb7D\xc8\xf9\xd4Nw\xc8\x8e\xd2s\v\xdb\x1d\x1a\x01#N\xab\xe0*\xb4\xad\x84\x93\xdc\x1c\'\x9c\x0f\xd2\x88=\xcf~\x1d\x14/WX\xc5\x17Pr\x19\xc7\xcd\xd6\xee9\xb4(\x8b\xd8\aB\xa5\xe9IE\x9e\xc8\xea\xe1\xc9\x1e\x9bq\xb5\xef\x11T\r@\xd8d\xa8\x8e\xe1\xd8\x1eS\x893W+\xfe\xf9j&F \x9eJ\xd7J\xaa\xd04\x8f6\xdc?t\xe7\x00\xd8.\x9d\x8cD\xfc\x7f\xab\x84!\xfd\x18h\x7f\f\xc3Orb^|\xab\t\x1fqN\x99z\xd4\xc9\xc2\xd4F{\x84?U\xf0\x06T\x1d\x8at_\xc8\xf9YBl\'\xb7\xf2\xc25\x19\xc2&W[\x0f+n~\xa8\x9b^i\xb7\x8d\xc3be\x84\xba\xa6\xda\xf0;\xe9\f\xbeS\x89\xa9\\_\rU\"\x936\xd7d\xa8\xeb\x82\x8e\xc5\xae\xc5F\t\xb7\x17\xe6*p+\xe5\xb1\xb20\xff\x18\xb7\'\xca19\xfdy=iuY\x03g.\x9a\x8dxFnQ\x94b\xd4\xf1i\x9al:M\xdb\xfdg`tX\xf9\x1e\x00\xc2\x10B\x8d\xe8\x85\x8d\xec\xfb\xa9\xd3\xa8\xe0\xac\xe7\xe7!\x00#;\x04 =u.;\x86\xe2\xf3\x8dh\xc0\x06\xe2\x1c\x9d\xff\xef\xae\x1603\xd0jB\xear\x93\xe3\xa5\xb1\xcf') 22:47:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)='Y', 0x1}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) 22:47:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) [ 146.744572] audit: type=1400 audit(1568846831.252:45): avc: denied { module_load } for pid=8200 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=system permissive=1 22:47:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:11 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="594eeccd57ef994c0f38654e0e8bd3b13b", 0x11}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) [ 146.921389] audit: type=1800 audit(1568846831.342:46): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=4 res=0 [ 146.987553] audit: type=1804 audit(1568846831.362:47): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir323007980/syzkaller.FFgvjR/62/file0/file0" dev="loop0" ino=4 res=1 22:47:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)='Y', 0x1}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) 22:47:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:12 executing program 0: socket$inet(0x2, 0x2000000000003, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@fragment, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, 0x0, 0x0) 22:47:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x18) 22:47:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="594eeccd57ef994c0f38654e0e8bd3b13b", 0x11}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) 22:47:12 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) [ 147.621927] syz-executor.0 (8212) used greatest stack depth: 24400 bytes left 22:47:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)='Y', 0x1}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) 22:47:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 22:47:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="594eeccd57ef994c0f38654e0e8bd3b13b", 0x11}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) 22:47:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 22:47:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="594eeccd57ef994c0f38654e0e8bd3b13b", 0x11}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) 22:47:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:12 executing program 0: socket$inet(0x2, 0x2000000000003, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@fragment, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, 0x0, 0x0) 22:47:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 22:47:12 executing program 5: getrandom(&(0x7f0000000100)=""/115, 0x73, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 22:47:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="594eeccd57ef994c0f38654e0e8bd3b13b", 0x11}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) 22:47:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:12 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8e18) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x18) 22:47:12 executing program 5: openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) getpgrp(0xffffffffffffffff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 22:47:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="594eeccd57ef994c0f38654e0e8bd3b13b", 0x11}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) 22:47:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x18) 22:47:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="594eeccd57ef994c0f38654e0e8bd3b13b", 0x11}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) 22:47:12 executing program 0: r0 = getpid() sched_setaffinity(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEXC(0xb, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r1, 0x80000) connect$inet(r3, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fc5000/0x18000)=nil, 0x0, 0xffffffffffffff69, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 22:47:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x18) 22:47:12 executing program 5: openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) getpgrp(0xffffffffffffffff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 22:47:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:13 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x3, 0xa000, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fallocate(r0, 0x3, 0x5e89, 0xfff9) 22:47:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="594eeccd57ef994c0f38654e0e8bd3b13b", 0x11}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) 22:47:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) 22:47:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:13 executing program 0: mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) dup2(r0, 0xffffffffffffffff) r1 = dup(0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x80, 0x9ca}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000014c0)={r1, &(0x7f0000001340)="b3507775c7dda95b7bad765fc7be40fc8427eda5488a082374bbf76cc0e9300b3b1b3cf0792c67f92edc520fe6f00aae760401ce39edb4865cb932431eb1b49f4c7ae162e569d28e2995fe845a15eb272f39009a64e38547df4e0d02d67a12c878d3cc0347b62255c0a27a7c5c5e87946a7bd3e3e87eac94a93988f5e4e1a1ed8ee043af6d0bdf2cb778b6a93f85d2d97e52a5367f638eb7227ea4c8f4a6bce94558893f14ce9c057e5f656b59ed5cbf399d808235360d3b86400ff51780823896735b07082b8e41be42c589ca4d4c44b31589ba52165e65f3b667915c15", &(0x7f0000001440)="ba5b0434dcbc1ef1e46c39e6e671743267d98ffea69b79b92b0b1feb2ae60998cab06f3d04e644272d1e30cda9e8a521a4c31cb855ef5388c1b7", 0x9748216d204c34cc}, 0x20) 22:47:13 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2f0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000003480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003300)=""/222, 0xde}], 0x6}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r3, 0x80003) init_module(&(0x7f0000000b00)=',-\x00', 0xffeec, &(0x7f0000000880)='\x00\x04\xbejhy\xbc\xa3\x8f:\xce\x1fS*4\x02O\xf8\xb1\x9d#\xf8\xe1\xf9\xa9G\xca\xf7\x1c\x00R~c~\xf9&\x1e\xde\xc2)i\x86\xc9\x04\x01\xcd\x92|\xad\xad.\xb3{Z\xf3\x93\xd1\xe2\fL\xcf\xce\x80\x11\x9f\x80f\xdc\xe34\x98>@\xf0\x82\xc7\bp0\x16\xa5\xb0/\x8dA\x01*\x9f}\xbeBjJ\xfa\xff\xbd\xbc\x92\x86\xbeXi\x1e\x83\x8f\xee\x8e\x03\xc2\xcb\x0e\xdc\xcb\xd4\xe4)=\x0e\xda\bF\x83\'\x05IgJ\xf3Z\xaf\xf4Z5i\xa8\tM\x82\xaf\xba\x15\xf1\x8b=`\x85\"\xa7G\x9am(\x8cF\x8b\xce?\x93mX\xcd\xac\xdb(\xbe\x9a4\x8a\xe8Fv\x7fU\x17B\x9c,\x7f\'\xafr;1\xb8_q7\x9f\fux\x1d\x84\x05eR0\x7f\x18=-#\x8f\xb7;7S\x13\xe7\f\x1a\x1c\xfb\xb1Q!F\x0f]#\xb3\x97\xea\xdc\xf6\"_\x1b]D\f\xc4\xf5\x89\xdarr\xf1E\xf3\xb8\x84\xf67\xfa\xa5\x81R\x1e\xab\xac$&`9\x83o\x8b\xc5\xfd\xd9U\n#\xa3\xdb\xf3\vuh\xed\x17\xbe\xe2\xfa\x117\xd0y\x9d\xa1E\a\xff|\xb7D\xc8\xf9\xd4Nw\xc8\x8e\xd2s\v\xdb\x1d\x1a\x01#N\xab\xe0*\xb4\xad\x84\x93\xdc\x1c\'\x9c\x0f\xd2\x88=\xcf~\x1d\x14/WX\xc5\x17Pr\x19\xc7\xcd\xd6\xee9\xb4(\x8b\xd8\aB\xa5\xe9IE\x9e\xc8\xea\xe1\xc9\x1e\x9bq\xb5\xef\x11T\r@\xd8d\xa8\x8e\xe1\xd8\x1eS\x893W+\xfe\xf9j&F \x9eJ\xd7J\xaa\xd04\x8f6\xdc?t\xe7\x00\xd8.\x9d\x8cD\xfc\x7f\xab\x84!\xfd\x18h\x7f\f\xc3Orb^|\xab\t\x1fqN\x99z\xd4\xc9\xc2\xd4F{\x84?U\xf0\x06T\x1d\x8at_\xc8\xf9YBl\'\xb7\xf2\xc25\x19\xc2&W[\x0f+n~\xa8\x9b^i\xb7\x8d\xc3be\x84\xba\xa6\xda\xf0;\xe9\f\xbeS\x89\xa9\\_\rU\"\x936\xd7d\xa8\xeb\x82\x8e\xc5\xae\xc5F\t\xb7\x17\xe6*p+\xe5\xb1\xb20\xff\x18\xb7\'\xca19\xfdy=iuY\x03g.\x9a\x8dxFnQ\x94b\xd4\xf1i\x9al:M\xdb\xfdg`tX\xf9\x1e\x00\xc2\x10B\x8d\xe8\x85\x8d\xec\xfb\xa9\xd3\xa8\xe0\xac\xe7\xe7!\x00#;\x04 =u.;\x86\xe2\xf3\x8dh\xc0\x06\xe2\x1c\x9d\xff\xef\xae\x1603\xd0jB\xear\x93\xe3\xa5\xb1\xcf') getresgid(&(0x7f0000000300), 0x0, 0x0) getgroups(0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000001840)=@ax25, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001e40)=""/169, 0x42}}], 0x21b, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) 22:47:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x2, 0x4, 0x4, 0x100000009}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) 22:47:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) [ 148.744451] kasan: CONFIG_KASAN_INLINE enabled 22:47:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="594eeccd57ef994c0f38654e0e8bd3b13b", 0x11}, {&(0x7f00000000c0)="03", 0x1}], 0x2}}], 0x1, 0x0) [ 148.773731] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 148.813193] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 148.819481] Modules linked in: [ 148.822686] CPU: 1 PID: 8345 Comm: syz-executor.5 Not tainted 4.14.144 #0 [ 148.829741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.839107] task: ffff888083290080 task.stack: ffff888062c90000 [ 148.845204] RIP: 0010:do_tcp_sendpages+0x33d/0x18f0 [ 148.850218] RSP: 0018:ffff888062c976b0 EFLAGS: 00010202 [ 148.855576] RAX: 0000000000000010 RBX: 0000000000000000 RCX: ffffc90005e5d000 [ 148.862842] RDX: 0000000000006bc6 RSI: ffffffff8523f03b RDI: 0000000000000080 22:47:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200), 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) 22:47:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200), 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) [ 148.870115] RBP: ffff888062c977d8 R08: ffff888083290080 R09: 0000000000000001 [ 148.877385] R10: 0000000000000000 R11: ffff888083290080 R12: 0000000000005580 [ 148.884658] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88808aa8ec80 [ 148.891933] FS: 00007f896f685700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 148.900155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.906035] CR2: 00007ff8cf6e1ea0 CR3: 00000000a9116000 CR4: 00000000001406e0 [ 148.913309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 22:47:13 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200), 0x0) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fff91a49d5b663caf90cd130bb6b87a6"], 0x10) splice(r0, 0x0, r3, 0x0, 0xbc, 0x0) [ 148.920576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 148.927840] Call Trace: [ 148.930454] ? lock_sock_nested+0x9e/0x110 [ 148.934703] ? sk_stream_alloc_skb+0x780/0x780 [ 148.939314] ? tcp_rate_check_app_limited+0x2ba/0x320 [ 148.944511] tcp_sendpage_locked+0x88/0x140 [ 148.948834] tcp_sendpage+0x3f/0x60 [ 148.952507] inet_sendpage+0x157/0x580 [ 148.956396] ? tcp_sendpage_locked+0x140/0x140 [ 148.960978] kernel_sendpage+0x92/0xf0 [ 148.964863] ? inet_sendmsg+0x500/0x500 [ 148.968844] sock_sendpage+0x8b/0xc0 [ 148.972556] ? kernel_sendpage+0xf0/0xf0 [ 148.976630] pipe_to_sendpage+0x242/0x340 [ 148.980864] ? direct_splice_actor+0x190/0x190 [ 148.983558] kobject: 'loop2' (ffff8880a49cd2a0): kobject_uevent_env [ 148.985441] __splice_from_pipe+0x348/0x780 [ 148.985449] ? direct_splice_actor+0x190/0x190 [ 148.985458] ? direct_splice_actor+0x190/0x190 [ 148.999638] kobject: 'loop2' (ffff8880a49cd2a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 149.000724] splice_from_pipe+0xf0/0x150 [ 149.000731] ? splice_shrink_spd+0xb0/0xb0 [ 149.000742] generic_splice_sendpage+0x3c/0x50 [ 149.000747] ? splice_from_pipe+0x150/0x150 [ 149.000756] direct_splice_actor+0x123/0x190 [ 149.000764] splice_direct_to_actor+0x29e/0x7b0 [ 149.000771] ? generic_pipe_buf_nosteal+0x10/0x10 [ 149.000779] ? do_splice_to+0x170/0x170 [ 149.000805] ? rw_verify_area+0xea/0x2b0 [ 149.000813] do_splice_direct+0x18d/0x230 [ 149.000820] ? splice_direct_to_actor+0x7b0/0x7b0 [ 149.000827] ? rw_verify_area+0xea/0x2b0 [ 149.000834] do_sendfile+0x4db/0xbd0 [ 149.000845] ? do_compat_pwritev64+0x140/0x140 [ 149.000854] ? put_timespec64+0xb4/0x100 [ 149.000861] ? nsecs_to_jiffies+0x30/0x30 [ 149.000871] SyS_sendfile64+0x102/0x110 [ 149.000879] ? SyS_sendfile+0x130/0x130 [ 149.000888] ? do_syscall_64+0x53/0x640 [ 149.000896] ? SyS_sendfile+0x130/0x130 [ 149.000904] do_syscall_64+0x1e8/0x640 [ 149.000910] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 149.000929] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 149.113304] RIP: 0033:0x4598e9 [ 149.116485] RSP: 002b:00007f896f684c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 149.124206] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004598e9 [ 149.131610] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 149.138883] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 149.146151] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f896f6856d4 [ 149.153417] R13: 00000000004c709e R14: 00000000004dc750 R15: 00000000ffffffff [ 149.160693] Code: ff ff 48 0f 44 d8 e8 c3 f2 38 fc 4d 85 e4 0f 84 9b 03 00 00 e8 b5 f2 38 fc 48 8d bb 80 00 00 00 44 8b 65 a8 48 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 74 08 3c 03 0f 8e 85 11 00 00 44 2b a3 80 [ 149.179918] RIP: do_tcp_sendpages+0x33d/0x18f0 RSP: ffff888062c976b0 [ 149.189716] kobject: 'loop1' (ffff8880a49909a0): kobject_uevent_env [ 149.198672] kobject: 'loop1' (ffff8880a49909a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 149.255772] kobject: 'loop3' (ffff8880a4a63320): kobject_uevent_env [ 149.291544] kobject: 'loop3' (ffff8880a4a63320): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 149.316331] ---[ end trace 346b7db08ab0ab4f ]--- [ 149.321231] Kernel panic - not syncing: Fatal exception [ 149.327995] Kernel Offset: disabled [ 149.331664] Rebooting in 86400 seconds..