[ 41.171714] audit: type=1800 audit(1556241871.510:30): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.727664] kauditd_printk_skb: 4 callbacks suppressed [ 45.727680] audit: type=1400 audit(1556241876.090:35): avc: denied { map } for pid=7846 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.242' (ECDSA) to the list of known hosts. 2019/04/26 01:24:42 fuzzer started [ 52.476255] audit: type=1400 audit(1556241882.840:36): avc: denied { map } for pid=7855 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/04/26 01:24:45 dialing manager at 10.128.0.105:38961 2019/04/26 01:24:46 syscalls: 2450 2019/04/26 01:24:46 code coverage: enabled 2019/04/26 01:24:46 comparison tracing: enabled 2019/04/26 01:24:46 extra coverage: extra coverage is not supported by the kernel 2019/04/26 01:24:46 setuid sandbox: enabled 2019/04/26 01:24:46 namespace sandbox: enabled 2019/04/26 01:24:46 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/26 01:24:46 fault injection: enabled 2019/04/26 01:24:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/26 01:24:46 net packet injection: enabled 2019/04/26 01:24:46 net device setup: enabled 01:27:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)) ioctl$TCXONC(r0, 0x540a, 0x2) [ 193.648214] audit: type=1400 audit(1556242024.010:37): avc: denied { map } for pid=7871 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=28 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 193.750259] IPVS: ftp: loaded support on port[0] = 21 01:27:04 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 193.885734] chnl_net:caif_netlink_parms(): no params data found [ 193.949231] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.958213] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.966499] device bridge_slave_0 entered promiscuous mode [ 193.976161] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.983229] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.990821] device bridge_slave_1 entered promiscuous mode [ 194.020277] IPVS: ftp: loaded support on port[0] = 21 [ 194.034813] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.050105] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.093074] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.101072] team0: Port device team_slave_0 added [ 194.123390] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.131642] team0: Port device team_slave_1 added 01:27:04 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x9) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) [ 194.142979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 194.150583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 194.274469] device hsr_slave_0 entered promiscuous mode [ 194.311641] device hsr_slave_1 entered promiscuous mode 01:27:04 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/snmp\x00') preadv(r3, &(0x7f00000017c0), 0xd0, 0x0) [ 194.372077] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 194.379208] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 194.388934] IPVS: ftp: loaded support on port[0] = 21 [ 194.408583] chnl_net:caif_netlink_parms(): no params data found [ 194.456966] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.463596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.470615] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.477222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.570049] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.576732] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.584860] device bridge_slave_0 entered promiscuous mode [ 194.640614] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.647189] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.657599] device bridge_slave_1 entered promiscuous mode [ 194.681771] IPVS: ftp: loaded support on port[0] = 21 01:27:05 executing program 4: r0 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000220007031dfffd946f610500020000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 194.729777] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.754466] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.807231] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 194.815262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.829232] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.838804] team0: Port device team_slave_0 added [ 194.845227] chnl_net:caif_netlink_parms(): no params data found [ 194.866819] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 194.874334] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.883067] team0: Port device team_slave_1 added [ 194.904912] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 194.911045] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.918750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.929214] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.951244] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.963447] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 194.986562] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.001973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 195.009772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.030029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.042375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.050317] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.056765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.071523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 195.075248] IPVS: ftp: loaded support on port[0] = 21 [ 195.080987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 01:27:05 executing program 5: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) close(r0) [ 195.120876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.130554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.141957] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.148453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.158854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.173229] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 195.220808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.237444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.257375] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.265532] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.274528] device bridge_slave_0 entered promiscuous mode [ 195.281901] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.288285] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.295839] device bridge_slave_1 entered promiscuous mode [ 195.343170] device hsr_slave_0 entered promiscuous mode [ 195.381608] device hsr_slave_1 entered promiscuous mode [ 195.421664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.430022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.439259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.455557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 195.479075] IPVS: ftp: loaded support on port[0] = 21 [ 195.489147] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 195.500642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.509052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.520602] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 195.542382] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 195.556236] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 195.565582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.573575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.610620] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 195.626308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 195.663694] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.672726] team0: Port device team_slave_0 added [ 195.678721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.686612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.697055] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 195.703504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.726398] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.733789] team0: Port device team_slave_1 added [ 195.744648] chnl_net:caif_netlink_parms(): no params data found [ 195.774838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 195.795349] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 195.804903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 195.855376] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 195.914526] device hsr_slave_0 entered promiscuous mode [ 195.971827] device hsr_slave_1 entered promiscuous mode [ 196.012762] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 196.022273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.034350] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.040771] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.049557] device bridge_slave_0 entered promiscuous mode [ 196.060470] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 196.076892] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.084241] audit: type=1400 audit(1556242026.450:38): avc: denied { associate } for pid=7872 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 196.112151] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.120305] device bridge_slave_1 entered promiscuous mode [ 196.194375] chnl_net:caif_netlink_parms(): no params data found [ 196.210316] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.231105] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 01:27:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, &(0x7f00000001c0)=""/4096, &(0x7f0000000000), &(0x7f0000000040)=""/123, 0x4000}) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012000d00010069703665727370616e00000004000200"], 0x38}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/audio\x00', 0x4000, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0x7, {0x100000001, 0x80, 0x7fffffff, 0xffffffffffffffff}, {0x4, 0x67b880000, 0x9, 0x20000000000}, {0x800, 0x4a}}) [ 196.277776] bond0: Enslaving bond_slave_1 as an active interface with an up link 01:27:06 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[0::]:4547:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x34, 0x20000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x9, 0x30}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r1, 0x7}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'ip6gre0\x00', 0x800}) [ 196.331950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=254 sclass=netlink_route_socket pig=7899 comm=syz-executor.0 [ 196.356124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=254 sclass=netlink_route_socket pig=7900 comm=syz-executor.0 01:27:06 executing program 0: r0 = socket$inet6(0xa, 0x80803, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x100000000, {{0xa, 0x4e24, 0x6, @rand_addr="67f27ed2479d9970ba4992ef411afa66", 0x7}}}, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in6=@loopback, 0x4e22, 0x2, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@remote}}, 0xe8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x100000001}, 0x1c) connect$inet6(r0, &(0x7f00000000c0), 0x1c) [ 196.445260] libceph: mon0 [::1]:4547 socket error on write [ 196.463644] chnl_net:caif_netlink_parms(): no params data found [ 196.529774] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 196.542288] team0: Port device team_slave_0 added [ 196.549709] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 196.558313] team0: Port device team_slave_1 added [ 196.564608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 196.575155] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.582244] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.590065] device bridge_slave_0 entered promiscuous mode [ 196.614782] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 01:27:07 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x3]}) syz_genetlink_get_family_id$nbd(0x0) [ 196.633446] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.639855] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.662622] device bridge_slave_1 entered promiscuous mode [ 196.685321] audit: type=1400 audit(1556242027.050:39): avc: denied { create } for pid=7913 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 196.711436] audit: type=1400 audit(1556242027.080:40): avc: denied { write } for pid=7913 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 01:27:07 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x40000000000000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x200805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x24) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000002c0)=0x1c0, 0x4) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r2, &(0x7f0000000240)=0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000300)='net/wireless\x00') preadv(r4, &(0x7f0000000480), 0x1000000000000237, 0x0) [ 196.764370] audit: type=1400 audit(1556242027.120:41): avc: denied { read } for pid=7913 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 196.814860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.872976] hrtimer: interrupt took 59985 ns [ 196.878602] device hsr_slave_0 entered promiscuous mode [ 196.931626] device hsr_slave_1 entered promiscuous mode [ 196.992176] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 196.999260] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 197.022623] bond0: Enslaving bond_slave_0 as an active interface with an up link 01:27:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1559c1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000140)={0x1000, &(0x7f0000000940)="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"}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket$inet(0x10, 0x3, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000180)=0x4000) sendmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000110007041dfffd946fa2830020200a0008000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 197.038833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.077569] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.086737] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.098509] device bridge_slave_0 entered promiscuous mode [ 197.107044] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.115986] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.124358] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.137636] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.144352] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.153273] device bridge_slave_1 entered promiscuous mode 01:27:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x8, 0x10, 0x4) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a200005c", 0x4) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x9, 0x200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000140)) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='+system\x00'}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r3, &(0x7f0000000040)={0xf}, 0xf) [ 197.170765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.183762] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 197.212827] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.222873] team0: Port device team_slave_0 added [ 197.229498] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.239104] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.251576] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 197.259546] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.280183] team0: Port device team_slave_1 added [ 197.287271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.294367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.301559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.308414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.317708] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 197.325780] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.336932] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 197.349067] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.359333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.368472] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 197.376599] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.386070] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.407955] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.416423] team0: Port device team_slave_0 added [ 197.429414] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.441104] team0: Port device team_slave_1 added [ 197.462286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.470247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.478956] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.486281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.495474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.554005] device hsr_slave_0 entered promiscuous mode [ 197.591787] device hsr_slave_1 entered promiscuous mode [ 197.632754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 197.640095] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 197.648085] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 197.658033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.667882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.676330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.684205] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.690737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.700344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.708650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.716405] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.722819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.730066] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 197.744438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 197.752874] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 197.767049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 197.774782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.782205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.789984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.799154] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.805627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.813112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.846144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 197.855989] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 197.869592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.923138] device hsr_slave_0 entered promiscuous mode [ 197.961816] device hsr_slave_1 entered promiscuous mode [ 198.001829] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 198.008885] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 198.016902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.025241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.035275] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 198.044594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 198.053628] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.063081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 198.074940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.083669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.091757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.099391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.107939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.116116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.135894] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.144237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 198.153466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.160874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.169234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.176370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.184455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.205705] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.214482] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.224043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 198.236488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 198.255173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.266418] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 198.275493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.284039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.292739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.300385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.308158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.319521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.330369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.342234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.352977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 198.359848] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.367235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.375173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.382923] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.389263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.396446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.404477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.412219] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.418618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.425696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.433838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.441817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.451942] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 198.459480] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.473962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 198.485222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 198.496747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.504640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.512499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.522810] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 198.532673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.543747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 198.554015] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 198.562585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 198.569362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.577585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.587407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.594589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.603277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.627837] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.634501] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.641980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 198.651781] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 198.657840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.678256] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 198.685231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.703588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.715157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 198.739091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.748729] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.756458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.767379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.775821] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.782273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.797786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 198.810797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 198.828392] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 198.846292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.856905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=7932 comm=syz-executor.2 [ 198.857408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.877216] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=7932 comm=syz-executor.2 [ 198.883998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.900344] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=7932 comm=syz-executor.2 [ 198.903601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.919028] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=7932 comm=syz-executor.2 [ 198.927375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.936296] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=7932 comm=syz-executor.2 [ 198.948298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.959558] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=7932 comm=syz-executor.2 [ 198.960796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.974118] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=7932 comm=syz-executor.2 [ 198.986067] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.996614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=7932 comm=syz-executor.2 [ 198.998181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.035500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 199.049742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.067737] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 199.076076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.091684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.099480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.119120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.131115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 01:27:09 executing program 1: r0 = socket$inet6(0xa, 0x400000040002, 0x7) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x81, 0x2000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000200)=""/158) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001500)='/proc/capi/capi20\x00', 0x40042, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001580)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="00082abd7000fcdbdf250500000064000100080006006e7100000c0006006c626c6372000000080001000a000000140003000000000000000000000000000000000114000300fe88000000000000000000000000000108000800270c00000c0007000900000002000000080001000a0000001c0003000800010003000000080001000300000008000800040000000800060002000000ca1cd48b3f735c4ea6f0beed58cd508b85d8dc85647a84242ffa13"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = dup(r0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2, 0x0, 0x0) [ 199.147739] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 199.157060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.170555] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.185698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.204285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.211960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.233323] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.255114] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.279024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.307369] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 199.326408] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.343132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.350313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.363557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.371841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.381149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.389482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.399594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.411174] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 199.420716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 199.436951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.446760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.455476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 01:27:09 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x9) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) [ 199.464496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.481763] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.489230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.512374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.523172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 199.531601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.539519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.562462] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.568856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.584791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 199.603152] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 199.617428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.625980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.634052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.659891] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 199.670060] audit: type=1400 audit(1556242030.040:42): avc: denied { map } for pid=7946 comm="syz-executor.3" path="/dev/nullb0" dev="devtmpfs" ino=15439 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 [ 199.701370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.714034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 199.721569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.746424] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 199.763343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 199.802371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.810633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.830698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.843620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 199.860426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.868859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.884982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.907907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 199.929367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.953440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.987794] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 200.006627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.017440] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 200.024773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.039561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.052209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.078204] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 200.123344] 8021q: adding VLAN 0 to HW filter on device batadv0 01:27:10 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/snmp\x00') preadv(r3, &(0x7f00000017c0), 0xd0, 0x0) 01:27:10 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x9) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) 01:27:10 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="10000000000000001001000300000000"], 0x10}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8080, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x102) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x5, 0xa, 0x0, r2}) 01:27:10 executing program 1: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x600, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)=0x2) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="fa0a3052aacb3963b0a3b2b8c5603b3acdf9a4c3b8755f3d40843497035108c208"], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x2f, "8d880219c27fc820ed35f4252d589ad190236a638f0826f9e5ec0a6c37d279d3ea5332819aa6ed24aed2d5a1c970bd"}, &(0x7f00000003c0)=0x53) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', r2}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4) 01:27:10 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffed3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0xffffffffffffffff, 0x8c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x81, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x100, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000180)=""/219) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x42000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0xfffffff, 0x40, 0x0, [], &(0x7f0000000040)={0x990bff, 0x200, [], @p_u32=&(0x7f0000000000)=0x5}}) flock(r1, 0xd) preadv(r1, &(0x7f0000000480), 0x1000000000000214, 0x0) 01:27:10 executing program 5: sched_setattr(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) close(r0) 01:27:11 executing program 5: r0 = socket(0x40000000000010, 0x802, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='^\x00', &(0x7f00000000c0)='{(ppp0@selinux\x00'], &(0x7f0000000300)=[&(0x7f0000000140)='posix_acl_access\'!vmnet1selinux!vmnet1usersecurity\x00', &(0x7f0000000180)='ppp0wlan1-userGPLppp0](\x00', &(0x7f00000002c0)='.ppp1)\x00'], 0x1000) write(r0, &(0x7f00000001c0)="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", 0xfc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x900040, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}], [{@subj_role={'subj_role', 0x3d, '.ppp1)\x00'}}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@subj_role={'subj_role', 0x3d, '/selinux/avc/cache_stats\x00'}}, {@subj_type={'subj_type', 0x3d, '^\x00'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@subj_type={'subj_type', 0x3d, 'em0trusted'}}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}]}}) 01:27:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x40000000, 0x10000840) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="4f9648e334eb55a7cb8e389869e55527758ddffdba153f1016f8018e31de6556c20c39825553b1bc4e402e0542a9d2ec4564b7dd3e68ffeda65511ff585d337b1f9fab045de7a18accf9e81bd4fe793541f6b2c9386b19ba2922bde4eb37e4ee0bccc0c24381aa68b16bbc095f48434c023521098055d5d943ab511fb11a2914e48a", 0x82}, {&(0x7f0000000180)="c1c7f5b9f78047146b0193739da4077f2bb723684062f2cf8324ec48bb7eddfd8b0fcc5b105432b89f28e7a9c7ba0ef219939004681cbb04bf2d8bd2082995f19153500629b711febe254d8aa6c5926273147aa9823b247d8b5db7bd55bf4ed30271187133641c6459b7e93b6a45aea39152eb1799127a8779c8813fbcf6a66c5a6f6823639ad6330397f70b9fb245a8652e07f3071602b43d71949bd1db86ee780398de678487670e64c9d14730687d69f119656932fa080788abe081bf4522b9e2b6d6d062", 0xc6}, {&(0x7f00000000c0)="edf91a4933cfeb764295f2114fea9bc6acc0a377fe0c070ed0fcc0e393e68134e6d7d6e8dce97cf59bfc70897f2e0acf0114d4c805ff5795b62e93f0ac5f5004c4f44e473aa78f7f862731f4c57aebd72377f3b1de283b172e082c2a49233a35924449ba84d6de57afa42f5445a9c3501ee63d510cbf93b8c370927aa425c255", 0x80}, {&(0x7f0000000280)="c9ca677e73fd2a0facddc3036594dcea5567ac694023d6e860d975f1e01f95310320862d5e8cbbfa664953c0f5025ee6ed3b48a108bbb7a836ebb82c2548961267ec842f6f7431e7ec83870b2829c44fa571426913c8bd101a01fceebfaaa86714a5c5d920f99d3ecb8b32593caf2e3a8f488f43e575456a012e53e5bdfbdfc973491222879caa47", 0x88}, {&(0x7f0000000340)="4446033c90622d68bb401e0d242aa9b8cff1ed214d8275b821471fe6f4c271c5c4e78aa9e40f6b313d2eb1ea3d9e8ec1d8dcbb46798ca6446757835c84a5f005bd8380e494fa4c988f31095321190f9978640c646ea57a179454d2582be90e345b1f239d10097dc75788c06110eb5ea5f2079d201c5e5b8c146891071be49a553feb6af0c78ca691284569b6228ff3f12e05f808798f5ce7d721648b164a53a9f816cd6850afe01e123c2ae8cc4f9802f3e8ddab25a1fb2e623598c020c4f2f0785ab11b9e3cfddd1583c07a5b9ffd8146", 0xd1}], 0x5, 0xa) ioctl$EXT4_IOC_MIGRATE(r0, 0x80dc5521) r1 = getpgid(0xffffffffffffffff) wait4(r1, &(0x7f0000001580), 0x2, &(0x7f00000015c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x800, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000500)=""/4096) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000001500)={0xfd, 0x0, [0xfffffff800000000, 0x9, 0xfffffffffffffff7]}) 01:27:11 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vcs\x00', 0x200, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) bind$bt_hci(r0, &(0x7f0000000740)={0x1f, r1, 0x3}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000000), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) ioctl$NBD_DISCONNECT(r3, 0xab08) sendmsg(r2, &(0x7f0000000600)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x80000000}, 0x0, 0x3, 0x3, 0x1}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)="1567f177607459d438e8e9ac2c40afb7013c7e92088bbf4dcb1416be77adee9a685ae16ddda46904a277ff244ff0240257e9aa77e214750a494f27c4e7daedf8cd4e233eaca023e97695e5fe9e2a6c1190c2aa7f885ea4c780469b6eed5f3d47de", 0x61}, {&(0x7f0000000180)="8b6be15c44a61ec055", 0x9}, {&(0x7f00000001c0)="ae58ae6d960e34", 0x7}, {&(0x7f0000000200)="e3c299df92d5c365bb5ab7d76b196ebf3d1cc94140715bf6b4699de1238eca946dfab86b9e47bdb3689fc026a8251ac95d36bddf49ce5fff0375b2b36807029306253196f8d95388d6ff80940b", 0x4d}, {&(0x7f00000002c0)="6f432a2b2f35d25bbda18483dbd8d48a538122767956c8ff3819c286a5461855a0dda2d79dcbf18581934b1e7e90144ed3d8b9b630364ae29f859b5ffb", 0x3d}, {&(0x7f0000000300)="e4393118a7742bbafdddaa3e1237188649df226b84b07ae3377a16dd0675449355c2d707c7b9e491701f88deee54d7b8c866761d5fbfe19df063d62f16c37310001e38e042d845860181cd2ac84ffd751df3f0e997b7d0dd2e1d435f670c5d8a793681cecdef5be73f7d3f37a8e23d89a97328e7c531596e6c9acf4a10db49c417c2763e9856cb43ceef2f4ca0c80d17b3bda7134a0d10d5e750f4fcf82148531ed143e116718d9434b8aef73d8d1ef642d2f7b63869953e08e0fba358", 0xbd}], 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_buf(r2, 0x29, 0x9b, &(0x7f0000000040)="c05b24cb46b91270e110b498334bfd7da4285050", 0x14) ptrace$setopts(0x4206, r4, 0x0, 0x0) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000640)) fcntl$setstatus(r3, 0x4, 0x42803) 01:27:11 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [], {0x4, 0x6}, [{}], {0x10, 0x2}}, 0x2c, 0x0) setresuid(0x0, 0xee01, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r0}) accept(r1, &(0x7f0000000440)=@hci={0x1f, 0x0}, &(0x7f00000004c0)=0x80) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@local, 0x21, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x3, 0x1, &(0x7f0000000080)=""/93, &(0x7f0000000180)=""/132, &(0x7f0000000240)=""/213}) 01:27:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0xdb7, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r2, 0x6}, &(0x7f0000000240)=0x8) 01:27:11 executing program 4: syz_emit_ethernet(0xfffffffffffffefb, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000f8137ffff00000115ffffffffaafdac0d59611923da66f948267a11ea00000008ffffffffffff00003fd7f3982201000000000e12d4a2b0830a9586a542849e24033b5fb55363e579617277c2cd2f6a7ce8b92c346b514db089879b176217b05d191a18f8e7438a62ad1f5da60febc9001fc3a912c3195a6c53656f3f862ea3e75733eed42dcc7a44047a41db146e88d0b1559218cd6093bb1bab15463eb305871bde9254c120355cd9e4d5c03188a21a6c508e7360d8187e26a08dd0668fdd8433c07e4fed0546a70f940b7e60405f4390e98d9d10a12806bb0e82eee702dac0e3bd6535ff8628f6b4cc761603a2e9ad0fc83748e3b95e1ad1ec975d87f28c2afc6baf32d767000008000000000046be40364ddb2c9e796804a0c76efc086fd1b31e077d63948d5e7c20ca04ed76ef784fe9521e2711876b5047f3e3e59d100da6a8cd580d0ed6965453b981ac73edb1b5f61028300647585b39655d121892f0725a6a7e9ffe7acb6d1dca010100001c7a35f9fbe87591c39815c6664e7c608251ae5f254161f046f84c6acd7754e6f7a194f8e0b3305d40e18e5d4f1ba09cc12fe3f082cda7654e10ca9f049c063355bc5122bd0a53607ab4"], 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200100, 0x0) accept$ax25(r0, &(0x7f0000000280)={{0x3, @default}, [@rose, @null, @default, @netrom, @default, @remote, @default, @rose]}, &(0x7f0000000300)=0x48) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0x21) 01:27:11 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/snmp\x00') preadv(r3, &(0x7f00000017c0), 0xd0, 0x0) 01:27:11 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x401000000801, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x80000000000c) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x3) 01:27:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000001180)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) 01:27:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndtimer(&(0x7f0000000440)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 01:27:11 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x81, "4d59218223fd942d1ae621485dd8b98de370bd5115ba2b33aae95a9df4e04d2dd7717c09942593ee532f3e4f53683cdb01021f446a4ea6aa4f567f7bda6a453c05b5811d1c23096db357344f138cc8769cf4e715762dadff66d1a4d4167c42b4ba3bb55f08f04bc9304789910193b564053eec2c5e236cd227e996bf91a13119d7"}, &(0x7f00000001c0)=0x89) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000240)=0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) setsockopt$inet6_int(r2, 0x29, 0xcb, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x87a, 0x80000) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r2, 0x400454ce, r5) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x2000, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000040)={@local, r3}, 0x14) 01:27:11 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x9) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) 01:27:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) ioctl$VT_RELDISP(r1, 0x5605) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ff7000/0x1000)=nil) shmat(r2, &(0x7f0000ff6000/0x2000)=nil, 0x0) 01:27:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2}}], 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="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", 0x94) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 01:27:12 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x0, 0x80000) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000580)=""/34) r3 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) mount$9p_xen(&(0x7f0000000180)='(-\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x20, &(0x7f0000000480)={'trans=xen,', {[{@nodevmap='nodevmap'}, {@privport='privport'}, {@debug={'debug', 0x3d, 0x100000000}}, {@debug={'debug', 0x3d, 0x1}}, {@cache_none='cache=none'}], [{@smackfshat={'smackfshat'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@seclabel='seclabel'}]}}) getuid() recvmmsg(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)=@ll, 0x80, &(0x7f0000000680)}}, {{&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/113, 0xffffffffffffff24}], 0x1, &(0x7f0000000300)=""/73, 0xfffffe91}}], 0x40000000000006c, 0x800000000000, 0x0) 01:27:12 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x80802) ioctl$KVM_CREATE_VCPU(r0, 0x8008551c, 0x2081001b) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) [ 202.178358] audit: type=1800 audit(1556242032.540:43): pid=8041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16541 res=0 01:27:12 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x103) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f0000001340)=[{{&(0x7f00000000c0)=@l2, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/83, 0x53}, {&(0x7f00000001c0)=""/233, 0xe9}, {&(0x7f00000002c0)=""/20, 0x14}], 0x3, &(0x7f0000000340)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001700)=""/121, 0x79}, {&(0x7f0000001780)=""/144, 0xff86}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/4096, 0x1000}], 0x2e3}}, {{0x0, 0x0, &(0x7f0000005780)=[{&(0x7f0000004780)=""/4096, 0x1000}], 0x151}}], 0x4, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(r2, &(0x7f0000000100), 0x34000) [ 202.287870] selinux_nlmsg_perm: 1656 callbacks suppressed [ 202.287889] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8040 comm=syz-executor.2 [ 202.358549] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8040 comm=syz-executor.2 [ 202.379914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8040 comm=syz-executor.2 [ 202.403193] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8040 comm=syz-executor.2 [ 202.446383] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8040 comm=syz-executor.2 [ 202.461407] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8040 comm=syz-executor.2 [ 202.482862] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8040 comm=syz-executor.2 [ 202.499382] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8040 comm=syz-executor.2 [ 202.517722] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8040 comm=syz-executor.2 [ 202.537938] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8040 comm=syz-executor.2 01:27:12 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/snmp\x00') preadv(r3, &(0x7f00000017c0), 0xd0, 0x0) 01:27:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xb) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="750000001200192300bb4b80040d8c56286932324ba7e680129643c218fe59a2e04a03ca81cacde5d264243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010087008a96ff0000ec6b0f537e3a033562ee1614d7070000002ec3aab42097d5f1bbe895508d", 0x75}], 0x1) 01:27:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0xa, 0x1ff) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x80000001, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200000, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0xe8000, 0x0) r2 = getpid() waitid(0x2, r2, &(0x7f0000000100), 0x8000000d, &(0x7f0000000180)) 01:27:12 executing program 0: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) sendmsg(r2, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) dup3(r0, r2, 0x0) [ 202.652453] audit: type=1400 audit(1556242033.010:44): avc: denied { create } for pid=8068 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1 01:27:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="b7f2288a911993f0265df5cf1cdd8b55", 0xfffffffffffffc1f) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) read$alg(r2, &(0x7f0000000040)=""/38, 0x700) 01:27:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000012}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000016) 01:27:13 executing program 1: syz_open_dev$sndseq(&(0x7f00000021c0)='/dev/snd/seq\x00', 0x0, 0x80) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000080)={0x0, 0x0, 0x2080, {0xf000, 0x104000}, [], "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", "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"}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x1}) [ 202.749242] audit: type=1400 audit(1556242033.050:45): avc: denied { write } for pid=8068 comm="syz-executor.4" path="socket:[28320]" dev="sockfs" ino=28320 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1 01:27:13 executing program 0: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8286e3abd85385d2"], 0x8) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2, 0x100) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x100) tee(r2, r0, 0x3, 0x1) ioctl$RTC_PIE_OFF(r1, 0x7006) 01:27:13 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:13 executing program 5: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)={0x0, 0xfb, 0x1015, 0x0, 0x100000000, "422b94d77b01f0558c55619b685c0636", "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"}, 0x1015, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xffffff09) fallocate(r0, 0x4000000003, 0x0, 0xfffe) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) lsetxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x0) 01:27:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x2, 0x3f0, 0x401, 0x1]}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) [ 202.949859] audit: type=1400 audit(1556242033.310:46): avc: denied { map } for pid=8088 comm="syz-executor.0" path=2F6D656D66643A2D42D54E49C56ABA707070F00884A26D202864656C6574656429 dev="tmpfs" ino=28364 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 01:27:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x82200, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000380)) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000280)=""/217) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local, 'hsr0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 203.050750] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 01:27:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001ec0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1b4, 0x2400) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x8}) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x8}, 0x0) 01:27:13 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/snmp\x00') 01:27:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x27}}, 0x1e) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4\t\x00\x00\x00\x00\x00\x00\x00re_tunneled\x00', 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xfffffffffffffc01) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) 01:27:14 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r0, r0, 0xf, 0x2}, 0x10) socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000780)='./file0\x00', 0x4) mount(&(0x7f00000004c0)=ANY=[], &(0x7f0000000640)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f00000006c0)='.request_key_auth\x00') openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000c80)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) clone(0x900, 0x0, 0xfffffffffffffffe, &(0x7f0000000c40), 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fanotify_mark(r0, 0x20, 0x1, r0, &(0x7f0000000040)='./file0\x00') 01:27:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000780)="080725ea2f8b70c5995e9f7bf5bb9b878924ee1e7d432b692f3d78424cbbd654f9fcfa40e04a05a25c0e88fe0c2cb9f4fb942e47d2eacbe761be9cb8ecdb64e7aefc5109e152d9c743c9f2e1fbd154307474e543e229ebe919d6acd17d75aa6587") ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x800) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0xa5, "82bdafee3dd783f7260751a182794fd4bcce839b6810dd38f44307a76da6d389476a9053680a8fc7bb953a5d8aa8d4d0fb52a3cad1311dcdeb18ae2dc8ea57a0c1a959b823bb3eb54df2c903d3c8dd19c5226b28d15487adbd83f530ddf4a52e97971afb06ef89bda3a0bec4cb38101b49bdfa1ce53692b7939bb345dd3f5558dc324aa4ba14992dce733a29311d7220be0e891704576e2383ed94eee68a60a0af8f2eeddc"}, &(0x7f00000000c0)=0xc9) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) accept4$x25(r3, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000800)=0x12, 0x80000) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000280)={"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"}) 01:27:14 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="d302b910efc4382475e19008c2e5dae1110ec3785721ebaa7b2f914f56f15949a2bca60596f585b7390b4634465006ab49f0efec898b6a7f801308d748a8ebcc46dae0499b70ce7849df87bf88718676194738b925526355d46853b39c7e255c29b1c5e3e0b0c8fde8a522700af3c9c9d8e29ace739e23e4e6d0706192128fd80ae2223084b7422f2ac4499513ca1a18ed38a6ba2504e51fac7c6db29baf89342c631441b638f43affd5ed02113ab86838f0ee1bce774b03d7a9f76a8e35eeb652257b1c5fb2dc92ff5ebd2ba144f2c53439a7b79190276e0053c36b87cc5e3003c141ce809fe0"], 0x6) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='1'], 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x10001) inotify_init1(0x80000) 01:27:14 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:14 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:14 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000380)=""/228) socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f00000001c0)=0xfffffffffffffef3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffd47, 0x0, 0x0, 0x0) 01:27:14 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x7f) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 01:27:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000780)="080725ea2f8b70c5995e9f7bf5bb9b878924ee1e7d432b692f3d78424cbbd654f9fcfa40e04a05a25c0e88fe0c2cb9f4fb942e47d2eacbe761be9cb8ecdb64e7aefc5109e152d9c743c9f2e1fbd154307474e543e229ebe919d6acd17d75aa6587") ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x800) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0xa5, "82bdafee3dd783f7260751a182794fd4bcce839b6810dd38f44307a76da6d389476a9053680a8fc7bb953a5d8aa8d4d0fb52a3cad1311dcdeb18ae2dc8ea57a0c1a959b823bb3eb54df2c903d3c8dd19c5226b28d15487adbd83f530ddf4a52e97971afb06ef89bda3a0bec4cb38101b49bdfa1ce53692b7939bb345dd3f5558dc324aa4ba14992dce733a29311d7220be0e891704576e2383ed94eee68a60a0af8f2eeddc"}, &(0x7f00000000c0)=0xc9) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) accept4$x25(r3, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000800)=0x12, 0x80000) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000280)={"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"}) 01:27:14 executing program 4: syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='noquota,pquota,noattr2,sysvgroups,swalloc']) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0xa, &(0x7f0000000840)=[{&(0x7f00000000c0)="e02b131eaea3c96c566cfe51d3d86db1eacbc20398ca5ff4a63c64c8f60d10eed3e1a06a2e3306e672c0152af5c8f9e0ea05536fbc7f8d4e2f201d2d119806ba406dec24911c4bbf7b78b14f25a2bbb76d778387012ea4339b41262aacf5c6cfd057f89aab7b6fff5746e3fe8b32dbf2a5015e94fbe8066f4a09147046f1b0b8a24aaf52e862f34b61877dbd7a577fd2e6e25bed11e0aa8a7a9e62d6d9a6089ddb774418c7f30cbf890cafaa654228e4d5cb4f74e89efb18ca92779400d6d5cc697ada0b6722bff19b960a14aa45d20dbe695ff318f1454550e64ef6b383969c", 0xe0, 0x2}, {&(0x7f0000000280)="a25053ab93ad9eb811b7a05acea988aac3ffe6aece9de0ad373d99f4ca85b0d744550e78b804728e0da697320ef2b15dda5c1ba423c6b4697674d0a6a414a68dd74bc8280f43259f5f45c53bea0cebda0c7d6746cd63010f2e273a0cffb8ac6f7ad8bb8a9dae25a1dd02e859b96b6bfd9a3af42c299805297a40dffdfaa0496614cd211584e4d1472a24a4bf4b4d47f9945b80f7a9e16ce3a3f08ea7810506dbcf3822ebae3eba8fd39d891b1fb47b7582236c6aa0eeff0f", 0xb8, 0x9}, {&(0x7f00000001c0)="aac4a267d60890feabedbc87f3b1ca63a396f4b570c3eb1b7b1d1ed5a13d77f9d8b48003", 0x24, 0x3ff}, {&(0x7f0000000340)="d276f55772cd2d9569d1d6e61600839e989ad083d66dbfe6a2b91e0a63fb1f5b112e28", 0x23, 0x9}, {&(0x7f0000000380)="9c343bc84c8e1021ce04c7236e87d0537125508960bf3afa1ddd6a86d9a8026868c89bec7fdc038161a8fe01c30d8a47a3689d534c33c33ae0f106afacda5e83ee9cbb409d4a4b97b4e56d3f71803857c4f6ec21ff2d44c4d99a08714e10fd532b0581091607075d34d753063946ff0206b7144603e296c4003d0c5132e90b92f4c01b0cc50fee7e542e6c5571aaed71db4dcea943fd640093550bf05650fd464474cf4189aeac3cff3af1fbd5bb9042a9b77c3985", 0xb5, 0x7}, {&(0x7f0000000480)="c99283fd57cd", 0x6, 0xffffffff}, {&(0x7f00000004c0)="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", 0xfa, 0x7}, {&(0x7f00000005c0)="1b4e76544582f120030070e726cebe7bd4819568da6affafc6fe6ea3024da245a942b182e634247a879f4787aaec652564ebd90fcf13a9dea001f3d5230afd654bd826bdf4b0786dcef10186a8d1ddead5f682d4cffb9fdfa855387088d167d2dbffb357f44a0e", 0x67, 0x19bc}, {&(0x7f0000000640)="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", 0xfa, 0xfff}, {&(0x7f0000000740)="e5b68d63f96b4c5e6d252792a7bb10d1fb4ad37b555d531f7510e54e893c369afe1c7bad74bba39ecfaf38c463c1d2a43b7de060615caaaaa66235576365bdcece20e9006dad7edd4b0735b81334a9f3c084719fe9346c025b9c60b13d4382f073ff74b2a5a0d45a70b1e27536d4021b2148300e1f668948a3198d5e72ec9acd18f4413de8efa2ae9c906883ece82963d48268b2b85c5a5d24fb4b0b39db6bd7786657a2350b9710ba1b059b7c5812be1941d7674bcbd826c166be6e33b0747a29b1c886633c700f26d4b8ec94c971196e6d10f1424c14e037810f38358a9a", 0xdf, 0x1f}], 0x0, &(0x7f0000000940)={[{@noacl='noacl'}], [{@fsmagic={'fsmagic', 0x3d, 0x1f19}}]}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) 01:27:14 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 01:27:14 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000200)=@dstopts, 0x8) sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0xc}], 0xc}, 0x0) 01:27:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000780)="080725ea2f8b70c5995e9f7bf5bb9b878924ee1e7d432b692f3d78424cbbd654f9fcfa40e04a05a25c0e88fe0c2cb9f4fb942e47d2eacbe761be9cb8ecdb64e7aefc5109e152d9c743c9f2e1fbd154307474e543e229ebe919d6acd17d75aa6587") ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x800) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0xa5, "82bdafee3dd783f7260751a182794fd4bcce839b6810dd38f44307a76da6d389476a9053680a8fc7bb953a5d8aa8d4d0fb52a3cad1311dcdeb18ae2dc8ea57a0c1a959b823bb3eb54df2c903d3c8dd19c5226b28d15487adbd83f530ddf4a52e97971afb06ef89bda3a0bec4cb38101b49bdfa1ce53692b7939bb345dd3f5558dc324aa4ba14992dce733a29311d7220be0e891704576e2383ed94eee68a60a0af8f2eeddc"}, &(0x7f00000000c0)=0xc9) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) accept4$x25(r3, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000800)=0x12, 0x80000) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000280)={"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"}) 01:27:15 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) mount$9p_rdma(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdme,port=0x0000000000000000,\x00']) mount(&(0x7f0000000000)=@filename='./file1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='logfs\x00', 0x80, 0x0) 01:27:15 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 204.734424] XFS (loop4): Invalid superblock magic number 01:27:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1117) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @multicast1}, 0x88, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='bond_slave_1\x00', 0x55, 0x3, 0x8}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4ba}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 01:27:15 executing program 4: socket$inet6(0xa, 0x400000000001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000480)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x10000000000, @local}, 0xfffffffffffffc27) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x37, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000400)) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0xffffffffffffff90) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffffffffffffffe, @dev}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x1000, 0x800000000, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000003740), 0x400031b, 0xfffffffffffffffd) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$KDDELIO(r1, 0x4b35, 0x8) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000048c0)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in6=@remote}}}, &(0x7f00000049c0)=0xe8) unshare(0x60000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x0, 0x0, &(0x7f0000001080)) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x80, 0xfff, 0x0, 0xf, 0x2, 0x8, "251c88068803793a89c696b9749c73cb995353c3d8df03048e91658ab9906d6556920a3ff64f85cc4275b0a21dcc054cee7d8b61bf6764ff7da833d80fd136f0", "2475f3efa518d2bdc54a3d745ef09dbcebbdb0ff487c27d106851b485d6f8b49d650810fc7be598d6c32ef556c2df29752ba0ac37d82b36b9c926af00ae7e931", "b6f6c0116256f480baa70981af55ee587ffadfec56106feed668d83405f97d50", [0xf6a, 0x8]}) sched_setaffinity(0x0, 0x1fb, &(0x7f0000000500)=0x100006) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000540), 0xc) creat(&(0x7f0000000200)='./file0\x00', 0x45) write$cgroup_type(r2, &(0x7f0000000300)='threaded\x00', 0x9) 01:27:15 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 204.870584] 9pnet: Could not find request transport: rdme [ 204.900033] 9pnet: Could not find request transport: rdme 01:27:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2080, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000140)={0x2, 0x0, 0x0, @dev}, 0x4) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000080)=0x1) 01:27:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000780)="080725ea2f8b70c5995e9f7bf5bb9b878924ee1e7d432b692f3d78424cbbd654f9fcfa40e04a05a25c0e88fe0c2cb9f4fb942e47d2eacbe761be9cb8ecdb64e7aefc5109e152d9c743c9f2e1fbd154307474e543e229ebe919d6acd17d75aa6587") ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x800) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0xa5, "82bdafee3dd783f7260751a182794fd4bcce839b6810dd38f44307a76da6d389476a9053680a8fc7bb953a5d8aa8d4d0fb52a3cad1311dcdeb18ae2dc8ea57a0c1a959b823bb3eb54df2c903d3c8dd19c5226b28d15487adbd83f530ddf4a52e97971afb06ef89bda3a0bec4cb38101b49bdfa1ce53692b7939bb345dd3f5558dc324aa4ba14992dce733a29311d7220be0e891704576e2383ed94eee68a60a0af8f2eeddc"}, &(0x7f00000000c0)=0xc9) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) accept4$x25(r3, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000800)=0x12, 0x80000) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000280)={"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"}) 01:27:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0), 0x8) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 205.268231] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 205.337712] IPVS: ftp: loaded support on port[0] = 21 01:27:15 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 01:27:15 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x21000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80605414, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xce, &(0x7f0000000280)="5d125e52f214fbaa4c405c3df8d6b9b5033a251ed39d", 0x16) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xf9, "97ea0eae4931146c113bc96cc9aadc92fc731d0e7a96844819ef71deeed737320ec585f7fc51c806c5622963b5ddc6bc2e0b265ab2464faec7b7c4a225882a7ea5d8da65791d18743404dd9c640eacee11b751ce5bd723e593be401c9b99fbfc059907c65c48751ad0291d594049ca45f81f50b14678651acdf636a48e8855e90f24cf6ff5afff2740f98ac364a8a9b147c3e80f63a41b4ae4f60d9a252c8fabd5f46623b8d70a19ecf1223ca6c6e821030f0bc9c2cd9b93f314e7f1563ed03e6ed42fda8cf4f174847543739bbad5ceb7386802e226c4d87aaced268e1dfc2172473257b4044e46f1a4cd3d8c9185b0d54d41fc3b91d1fee1"}, &(0x7f0000000240)=0x101) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000380)={r3, 0x8c, "075ffe8e7c5d070000005fe84ba41ee711a049d404e8ea372e6c0d352eaeeadeb04795efc45692c382e888b125b7d39f7a817ff014dcb58a1022fe8fcda7b9b7d713417019148dd258a12bca747de04802a2eac4ce0d5c00f567dd0881d6db50a94365af4237d7568feef0b34d96544703efb519411794869aa2acb371ff1ce3808a2efb032b3c5dc1b4a0f7"}, &(0x7f0000000340)=0x2d5) 01:27:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000780)="080725ea2f8b70c5995e9f7bf5bb9b878924ee1e7d432b692f3d78424cbbd654f9fcfa40e04a05a25c0e88fe0c2cb9f4fb942e47d2eacbe761be9cb8ecdb64e7aefc5109e152d9c743c9f2e1fbd154307474e543e229ebe919d6acd17d75aa6587") ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x800) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0xa5, "82bdafee3dd783f7260751a182794fd4bcce839b6810dd38f44307a76da6d389476a9053680a8fc7bb953a5d8aa8d4d0fb52a3cad1311dcdeb18ae2dc8ea57a0c1a959b823bb3eb54df2c903d3c8dd19c5226b28d15487adbd83f530ddf4a52e97971afb06ef89bda3a0bec4cb38101b49bdfa1ce53692b7939bb345dd3f5558dc324aa4ba14992dce733a29311d7220be0e891704576e2383ed94eee68a60a0af8f2eeddc"}, &(0x7f00000000c0)=0xc9) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) accept4$x25(r3, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000800)=0x12, 0x80000) 01:27:15 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 01:27:16 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000002ee99e407f0afc8728b143e83f32180845c67f7ef3998b50ec50200d968bb91d3d840ecc5e942ff6058a059eca83906db2731eaf5cd7073883cd25c05bc862f6bf58"], 0x39) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:27:16 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80800, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009080800410400000000fcff", 0x58}], 0x1) 01:27:16 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 205.924277] IPVS: ftp: loaded support on port[0] = 21 01:27:16 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) fallocate(r0, 0x10, 0x6, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r1, &(0x7f0000000140), 0xfffffefa) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x20, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000180)) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f00000000c0)=0x8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) epoll_create1(0x80000) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 01:27:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000780)="080725ea2f8b70c5995e9f7bf5bb9b878924ee1e7d432b692f3d78424cbbd654f9fcfa40e04a05a25c0e88fe0c2cb9f4fb942e47d2eacbe761be9cb8ecdb64e7aefc5109e152d9c743c9f2e1fbd154307474e543e229ebe919d6acd17d75aa6587") ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x800) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0xa5, "82bdafee3dd783f7260751a182794fd4bcce839b6810dd38f44307a76da6d389476a9053680a8fc7bb953a5d8aa8d4d0fb52a3cad1311dcdeb18ae2dc8ea57a0c1a959b823bb3eb54df2c903d3c8dd19c5226b28d15487adbd83f530ddf4a52e97971afb06ef89bda3a0bec4cb38101b49bdfa1ce53692b7939bb345dd3f5558dc324aa4ba14992dce733a29311d7220be0e891704576e2383ed94eee68a60a0af8f2eeddc"}, &(0x7f00000000c0)=0xc9) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) 01:27:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="4acf"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0xaaaad4a, 0x0, 0x0, 0x185) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000fed000/0x2000)=nil}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x62, 0x2000) write$selinux_load(r3, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "9adf525cc91cf437ad6b17f61a9656e582679869ae1ed8ab7321cd7e4c7a646de362d361173210522d73ff005c49da4ef759a0251b94348d6b7f75c5d25c1690d1a8af36bdd7733be43a74296e84078ee902d8f73da0a5aca64eabce572a57cdca444a538a7cb5ae442865226b55ba8186aac00be542eb14c4c27fd9971d8bfeb443baa6ef66e7d8230914d0275d96f2dfed87c4cf42d29de9de51b45c425767dbbdd56bb3e707e5315a917416287d05097309"}, 0xc3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0x7f, 0xffff0000000000}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="f1000000", @ANYRES16=r4, @ANYBLOB="010127bd7000ffdbdf250b0000000c00090008000200020000000c000500080001006574680098000100380004001400010002004e21ac1414bb0000000000000000200002000a004e210000003fff01000065000000000000000000000100100000380004001400010002004e23ac1414bb0000000000000000200002000a004e240000a8d62d97fa72d509230000000000000000bb040000001c0002000800040020000000080003000100008008000200038000000800030000000080180001001400020008000400070000000800020001000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) 01:27:16 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 01:27:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000100)={'sit0\x00', {0x2, 0x4e20, @local}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 01:27:16 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 01:27:16 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000780)="080725ea2f8b70c5995e9f7bf5bb9b878924ee1e7d432b692f3d78424cbbd654f9fcfa40e04a05a25c0e88fe0c2cb9f4fb942e47d2eacbe761be9cb8ecdb64e7aefc5109e152d9c743c9f2e1fbd154307474e543e229ebe919d6acd17d75aa6587") ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x800) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0xa5, "82bdafee3dd783f7260751a182794fd4bcce839b6810dd38f44307a76da6d389476a9053680a8fc7bb953a5d8aa8d4d0fb52a3cad1311dcdeb18ae2dc8ea57a0c1a959b823bb3eb54df2c903d3c8dd19c5226b28d15487adbd83f530ddf4a52e97971afb06ef89bda3a0bec4cb38101b49bdfa1ce53692b7939bb345dd3f5558dc324aa4ba14992dce733a29311d7220be0e891704576e2383ed94eee68a60a0af8f2eeddc"}, &(0x7f00000000c0)=0xc9) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 01:27:16 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = getpgrp(0x0) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000001080)={&(0x7f0000000080)=""/4096, 0x1000}) 01:27:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) r1 = semget(0xffffffffffffffff, 0x1, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000080)={0x1, 0xa08, 0x7d24, 0x0, 0x1d}) 01:27:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000780)="080725ea2f8b70c5995e9f7bf5bb9b878924ee1e7d432b692f3d78424cbbd654f9fcfa40e04a05a25c0e88fe0c2cb9f4fb942e47d2eacbe761be9cb8ecdb64e7aefc5109e152d9c743c9f2e1fbd154307474e543e229ebe919d6acd17d75aa6587") ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x800) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0xa5, "82bdafee3dd783f7260751a182794fd4bcce839b6810dd38f44307a76da6d389476a9053680a8fc7bb953a5d8aa8d4d0fb52a3cad1311dcdeb18ae2dc8ea57a0c1a959b823bb3eb54df2c903d3c8dd19c5226b28d15487adbd83f530ddf4a52e97971afb06ef89bda3a0bec4cb38101b49bdfa1ce53692b7939bb345dd3f5558dc324aa4ba14992dce733a29311d7220be0e891704576e2383ed94eee68a60a0af8f2eeddc"}, &(0x7f00000000c0)=0xc9) 01:27:17 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) flock(r0, 0xfffffffffffffffe) r2 = epoll_create1(0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x100, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) flock(r2, 0xfffffffffffffffd) flock(r1, 0x5) 01:27:17 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0205649, &(0x7f0000000080)={0x0, @reserved}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(r1, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 01:27:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_tcp_buf(r0, 0x6, 0x5, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91) 01:27:17 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={r1, 0x80000, r0}) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) 01:27:17 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000db4fb6)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @broadcast}, @icmp=@timestamp}}}}, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x205, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x2, 0x4) 01:27:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000780)="080725ea2f8b70c5995e9f7bf5bb9b878924ee1e7d432b692f3d78424cbbd654f9fcfa40e04a05a25c0e88fe0c2cb9f4fb942e47d2eacbe761be9cb8ecdb64e7aefc5109e152d9c743c9f2e1fbd154307474e543e229ebe919d6acd17d75aa6587") ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x800) 01:27:17 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) 01:27:17 executing program 0: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/62, 0x3e}}], 0x6de, 0x62, 0x0) 01:27:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0088000000000800450000280000000000009078ac14ffaab600000000000000be2d654b06cd1e3d0b101e8a9b0a7b0db58bdd058486dcc718f9ec91aadbd9383bb4f687c3c50af5fdaea7326bc92016410a92afe2b27b4b21292613d65245cd58ae8c41b5b922c64425f6da49cc65d37a3408d5b452cf719404803de4a9ba3fe1f481e009aac5fe5ff3cc7f2353a66a5f", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="5000000090780000"], 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x100) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x1, 0x5, 0x10000, 0x0, 0x12, 0x0, 0x3, 0x4, 0x2, 0xffffffff}) 01:27:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4, &(0x7f0000000780)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32=r0], 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x2) 01:27:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$sock_proto_private(r1, 0x89e7, &(0x7f0000000780)="080725ea2f8b70c5995e9f7bf5bb9b878924ee1e7d432b692f3d78424cbbd654f9fcfa40e04a05a25c0e88fe0c2cb9f4fb942e47d2eacbe761be9cb8ecdb64e7aefc5109e152d9c743c9f2e1fbd154307474e543e229ebe919d6acd17d75aa6587") ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:17 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 207.402951] protocol 88fb is buggy, dev hsr_slave_0 [ 207.408958] protocol 88fb is buggy, dev hsr_slave_1 01:27:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2b) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$sg(0x0, 0x0, 0x81) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000000)) tkill(r1, 0x1004000000016) close(r0) 01:27:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:18 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = epoll_create(0x2) msgsnd(r0, &(0x7f0000000140)={0x1}, 0x8, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x5) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x3ff) 01:27:18 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102000000002d000000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 01:27:18 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 01:27:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:18 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:18 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCSETS(r0, 0x8910, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x80000001}) 01:27:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2b) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x3, 0xb1) getsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000534000), &(0x7f0000000000)=0xffffffffffffff30) 01:27:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:21 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:21 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) 01:27:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 01:27:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:21 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) 01:27:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x3, 0xb1) getsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000534000), &(0x7f0000000000)=0xffffffffffffff30) 01:27:21 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:21 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2b) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:24 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:24 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x9) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe) 01:27:24 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101006, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000022, &(0x7f0000000180)={[{@jqfmt_vfsold='jqfmt=vfsold'}]}) 01:27:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) 01:27:24 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) 01:27:24 executing program 0: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x4000000001, 0x0) close(r1) dup2(r0, r1) 01:27:24 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:24 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x9) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe) [ 213.980489] EXT4-fs (sda1): re-mounted. Opts: jqfmt=vfsold, [ 214.077064] EXT4-fs (sda1): re-mounted. Opts: jqfmt=vfsold, 01:27:24 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_emit_ethernet(0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6050a09c00081100fe800000000000000000000000000004fe8000000000000000000000000000aa00004e7364200008"], 0x0) 01:27:24 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1056068, &(0x7f0000000100)=ANY=[@ANYBLOB='n']) [ 214.356290] EXT4-fs (sda1): Unrecognized mount option "n" or missing value [ 214.471584] EXT4-fs (sda1): Unrecognized mount option "n" or missing value 01:27:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2b) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:27 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x9) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffe) 01:27:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 01:27:27 executing program 4: 01:27:27 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1056068, &(0x7f0000000100)=ANY=[@ANYBLOB='n']) 01:27:27 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) 01:27:27 executing program 4: 01:27:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 01:27:27 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 217.067295] EXT4-fs (sda1): Unrecognized mount option "n" or missing value 01:27:27 executing program 4: 01:27:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) [ 217.238193] selinux_nlmsg_perm: 1222 callbacks suppressed [ 217.238212] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8570 comm=syz-executor.2 01:27:27 executing program 0: [ 217.279776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8570 comm=syz-executor.2 [ 217.299748] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8570 comm=syz-executor.2 [ 217.332917] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8570 comm=syz-executor.2 [ 217.391632] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8570 comm=syz-executor.2 [ 217.419843] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8570 comm=syz-executor.2 [ 217.439567] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8570 comm=syz-executor.2 [ 217.451971] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8570 comm=syz-executor.2 [ 217.489582] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8570 comm=syz-executor.2 [ 217.508302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8570 comm=syz-executor.2 01:27:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:30 executing program 4: 01:27:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x0, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:30 executing program 0: 01:27:30 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:30 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 01:27:30 executing program 4: 01:27:30 executing program 0: 01:27:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x0, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:30 executing program 4: 01:27:30 executing program 0: 01:27:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x0, @pix={0x1f, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:30 executing program 0: 01:27:30 executing program 4: 01:27:30 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x25013c84, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:31 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 01:27:31 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x3, 0x3, &(0x7f000045c000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4c}}, &(0x7f0000281ffc)='G\xffL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffffff7f00000000, 0xe, 0x0, &(0x7f00000000c0)="3b1163cd78b89e1ba101df682bb0", 0x0}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5e303289b8d6a05e, 0x2}, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 01:27:31 executing program 4: r0 = dup(0xffffffffffffffff) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000880)={{&(0x7f0000000940)=""/250, 0xfa}, &(0x7f0000000800), 0x10}, 0x20) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9, 0x60}}], 0x48, 0x7}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1b8) sendmmsg(0xffffffffffffffff, &(0x7f000000d180), 0x4000000000000eb, 0x0) 01:27:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x327d7e5f, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:31 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) [ 220.930855] audit: type=1400 audit(1556242051.290:47): avc: denied { prog_load } for pid=8633 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 01:27:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x1, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:31 executing program 4: r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc4200000000000000000000ff00000000de56b500000800000008000500a2db141b081b0e000000050f01"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x80) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0xaaaaaaaaaaaace6, 0x0, 0x0, 0xeb) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000180)={'U-', 0x7973}, 0x28, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 221.066825] audit: type=1400 audit(1556242051.430:48): avc: denied { prog_run } for pid=8633 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 01:27:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 01:27:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:31 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:32 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000005fc0), 0x80000000000006a, 0x0) 01:27:32 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:32 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85]m\xa5\x04\xa3\xc8\xdf\xf6\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xab\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100024, 0x500001c) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) [ 221.948904] audit: type=1804 audit(1556242052.310:49): pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir236312423/syzkaller.CekPor/33/memory.events" dev="sda1" ino=16647 res=1 [ 222.391462] audit: type=1804 audit(1556242052.750:50): pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir236312423/syzkaller.CekPor/33/memory.events" dev="sda1" ino=16647 res=1 [ 222.426044] audit: type=1800 audit(1556242052.760:51): pid=8694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=16647 res=0 01:27:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x2, 0x3}}) 01:27:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:34 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:34 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 01:27:34 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x2, 0x3}}) [ 224.130656] selinux_nlmsg_perm: 3062 callbacks suppressed [ 224.130674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8705 comm=syz-executor.2 [ 224.168914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8705 comm=syz-executor.2 [ 224.184812] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8705 comm=syz-executor.2 [ 224.199098] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8705 comm=syz-executor.2 [ 224.213093] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8705 comm=syz-executor.2 01:27:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x2, 0x3}}) [ 224.230990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8705 comm=syz-executor.2 01:27:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x2, 0x3}}) [ 224.271740] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8705 comm=syz-executor.2 [ 224.344729] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8705 comm=syz-executor.2 [ 224.374651] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8705 comm=syz-executor.2 01:27:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x3}}) [ 224.406160] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=8705 comm=syz-executor.2 01:27:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:35 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x140, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000200), 0x178) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:35 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:35 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:35 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:35 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 01:27:35 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 225.235968] FAULT_INJECTION: forcing a failure. [ 225.235968] name failslab, interval 1, probability 0, space 0, times 1 [ 225.296758] CPU: 1 PID: 8765 Comm: syz-executor.0 Not tainted 4.19.36 #4 [ 225.303676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.313058] Call Trace: [ 225.315670] dump_stack+0x172/0x1f0 [ 225.319330] should_fail.cold+0xa/0x1b [ 225.323245] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 225.328378] ? lock_downgrade+0x810/0x810 [ 225.332556] ? ___might_sleep+0x163/0x280 [ 225.336740] __should_failslab+0x121/0x190 [ 225.340997] should_failslab+0x9/0x14 [ 225.344822] kmem_cache_alloc_node_trace+0x277/0x720 [ 225.349959] ? kasan_check_read+0x11/0x20 [ 225.354139] __kmalloc_node+0x3d/0x80 [ 225.357966] kvmalloc_node+0x68/0x100 [ 225.361789] video_usercopy+0x454/0x10d0 [ 225.365872] ? v4l_s_fmt+0x960/0x960 [ 225.369608] ? v4l_enumstd+0x70/0x70 [ 225.373352] ? mark_held_locks+0x100/0x100 [ 225.378859] ? proc_fail_nth_write+0x9d/0x1e0 [ 225.383373] ? proc_cwd_link+0x1d0/0x1d0 [ 225.387539] ? __fget+0x340/0x540 [ 225.391338] ? video_usercopy+0x10d0/0x10d0 [ 225.395849] video_ioctl2+0x2d/0x35 [ 225.399496] v4l2_ioctl+0x156/0x1b0 [ 225.403147] ? video_devdata+0xa0/0xa0 [ 225.407062] do_vfs_ioctl+0xd6e/0x1390 [ 225.410965] ? selinux_file_ioctl+0x46f/0x5e0 [ 225.415475] ? selinux_file_ioctl+0x125/0x5e0 [ 225.420007] ? ioctl_preallocate+0x210/0x210 [ 225.424464] ? selinux_file_mprotect+0x620/0x620 [ 225.429557] ? iterate_fd+0x360/0x360 [ 225.433408] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 225.438968] ? fput+0x128/0x1a0 [ 225.442283] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 225.447880] ? security_file_ioctl+0x93/0xc0 [ 225.452333] ksys_ioctl+0xab/0xd0 [ 225.455819] __x64_sys_ioctl+0x73/0xb0 [ 225.459740] do_syscall_64+0x103/0x610 [ 225.463748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.468959] RIP: 0033:0x458da9 [ 225.472169] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 225.492622] RSP: 002b:00007fc3311c1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.500364] RAX: ffffffffffffffda RBX: 00007fc3311c1c90 RCX: 0000000000458da9 [ 225.507672] RDX: 0000000020000180 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 225.514980] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 225.522264] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc3311c26d4 [ 225.529548] R13: 00000000004c3feb R14: 00000000004d7628 R15: 0000000000000004 01:27:35 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:36 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:36 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x610880, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x3], 0x2) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x1001081d) setresgid(0x0, 0xee00, 0x0) setresuid(0x0, 0xfffe, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0x87, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 'wlc\x00', 0x20, 0x10000, 0x73}, {@rand_addr=0x655, 0x4e22, 0x0, 0x2, 0x3f, 0x2}}, 0x44) bind$tipc(r0, 0x0, 0x0) keyctl$revoke(0xb, r1) 01:27:36 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:36 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:36 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 01:27:36 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x2, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:36 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x280000, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x165478fd, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x6, [@bcast, @bcast, @bcast, @bcast, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/149) 01:27:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:36 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x4b47, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:36 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x4b49, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:36 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x541b, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x1) mount(&(0x7f0000000080)=@nullb='/dev/nullb0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bfs\x00', 0x1000000, &(0x7f0000000180)='configfs\x00') mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x10000004000, 0x0) [ 226.493289] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=50c48400) [ 226.560289] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=50c48400) 01:27:37 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x5421, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:37 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:37 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) 01:27:37 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x800, 0x1}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x2) 01:27:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:37 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x5450, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:37 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) write$P9_RRENAMEAT(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000380)="ec7a63f0f68c774da66983f7f8c70202fab6cf87f54095e581") syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x100) open(&(0x7f0000000180)='./file0\x00', 0x40, 0xffffffffffffffff) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f00000005c0)={'L+', 0x10001}, 0x28, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 01:27:37 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x5451, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c1241319bd070") r1 = creat(&(0x7f0000001440)='./file0\x00', 0x0) fallocate(r1, 0x40, 0x0, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x50, r1, 0x80000000) 01:27:37 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x5452, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:37 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) pipe2$9p(&(0x7f0000000280), 0x4000) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x80, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)={0x0, 0xd, 0x4, 0x0, {r2, r3/1000+30000}, {0x5, 0xd, 0x6, 0x1, 0x7, 0x0, "18212091"}, 0xd69, 0x5, @fd=r4, 0x4}) bind$vsock_dgram(r4, &(0x7f0000000380)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f00000003c0)={0xdb2, 0x8000, 0x10000, 0x100, 0x7, 0xcd}) write$9p(r5, &(0x7f00000001c0)="90e633d3d05a7890d268a032aa4abd4dad29c0c1d4cfd96cd1f163f9fc0c03f60760fcd3a9e41b240381f78dbae00e93694b05f6e22f712a1db1530095082facaf1262c20f6b5751d2c62f9fe271ef05c2d0b2df81b686bc294a157f64dcd0faa1ea8eefb19ffa77778bb037dc2e6a5891c094ad511c470bc473f034fd0e4a237c60149283d87224fdd0c5", 0x8b) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000400)="2bdd8a0c9e55b9662a03f2d028d812517ed22b6dc6b17b7cd509d5c18f443dcbe99408ee7a76db5350735f829fe68a81b0825cf255abb431f027c9fa46966c8d4d20a5170ba96be8f1ca79dc1ad6fe7dd5fffef6cef495cb80215c028731447384a9f56133b140a4ae0caf30c5315a19ce92367dcfffb70c9800858e06984ea95174cf085f44aaa1131344e76c2a2006b4e49d7407fbcb40bb2de1b4fba0ec2c35ac2155ec722000e3c23b7427ea28d72c90483af00d898db911520ff7019e9fe71ed2ca42adb8a87119843d43d6bd834b046eff719b5fb020130724eb97152c0ff145f150661f0405c333a1b2368a8bd4363404fbd1f4aa3a", 0xf9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000040)='/dev/snd/timer\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x1000}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r6, 0x4}, 0x8) 01:27:38 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:38 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000080)={0xc0000000, 0x103, "4687c9db80bd5e69a7c365d86bd6711e01aff124c58704ac48b69e6a3871ce23", 0x8, 0x2, 0x101, 0x1, 0x1ff, 0x6, 0x5, 0x3ff, [0xc0b, 0x9, 0xff, 0x9]}) 01:27:38 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x5460, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000240)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000170000,user_id=', @ANYRESDEC=r1, @ANYBLOB="2cc8d18b06fabe21f83d", @ANYRESDEC=r2, @ANYBLOB="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", @ANYRESDEC=r3, @ANYBLOB=',euid>', @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = memfd_create(&(0x7f0000000280)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000, r0}) clock_gettime(0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0xfffffdba) syz_open_pts(r4, 0x0) write(r4, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x8010, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) 01:27:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:39 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 01:27:39 executing program 3: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:39 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x40087602, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:39 executing program 1: syz_open_dev$midi(0x0, 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r2, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x14) sendfile(r2, r2, &(0x7f0000000140), 0x7fff) 01:27:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:39 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x4020940d, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:39 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x80086601, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:39 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0x80087601, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:39 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 01:27:39 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0045878, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:40 executing program 1: umount2(&(0x7f0000000000)='./file0\x00', 0x4) timer_create(0x7, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x4, 0x20400) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@pptp={0x18, 0x2, {0xa890, @broadcast}}, {&(0x7f0000000180)=""/148, 0x94}, &(0x7f0000000240)}, 0xa0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10000, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@remote, @multicast1, @local}, &(0x7f0000000100)=0xc) 01:27:40 executing program 3: exit(0xff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) 01:27:40 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0045878, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:40 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0189436, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:40 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000000480)='eth0\x00'}, 0x30) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) semop(0x0, &(0x7f00000001c0)=[{0x3, 0x8}], 0x1) syz_open_dev$sndpcmp(0x0, 0x5, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000140)=0xffffff8b) unlink(0x0) munlockall() setns(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0) 01:27:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:40 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180), 0x4) 01:27:40 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0205647, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 01:27:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:40 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0205649, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:40 executing program 3: exit(0xff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) 01:27:40 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000200)=0xf58) write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x3f}, 0xb) r1 = socket$kcm(0x10, 0x1, 0x10) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000180)={0x0, 0x6}) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f0000000140)=0x8) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e0000001c00810ee00f80ecdb4cb90402c804a00800000008000afb5ff972fa767f1b5040d819a9060015000000", 0x2e}], 0x1}, 0x0) 01:27:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 01:27:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc020660b, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:41 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x4a6, 0x2a0, 0x5000000, 0x0, 0x4000]}, 0x2a}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x1d, 0x4, @thr={&(0x7f00000014c0)="1b5f67c00b23abca97d42a50270ba26ac023e33e62b3797b6c785290a8fa073957e80e2392c96f752e18bbf46bdf8ba451d45aa999798a73a83b04fb43141bd0d75831dae0c66f3e10989c56c60201c1a9249f5fd41d4acc8594d26543c86c1318c13bb5ac0979018af971bfa9dbb5a79aca230792e476b8840365fc506c09993d7edb7ae564a7f571a37f99ca7c512a2aeca34cd974e907441ca2cbc37f0983264d8fc92dc3d4744309408904a8ef4704ef5317660df0dad372fab23413cad9ad3e", &(0x7f0000000100)="7c097bbbd1b2b04f721a0645e3f6ffdd707bab2cd17a54493b560fa1e375e5b361110306efef5b7b9df03106c3725d922d4ccb08100295bd2f31f728b1d1837306a59fd24f133d8ea3fc"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000440)={{}, {r3, r4+10000000}}, &(0x7f00000015c0)) r5 = dup3(r0, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000001680)=""/234) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001600)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x4000, 0x0) perf_event_open$cgroup(0x0, r6, 0xfffffffffffffffd, r0, 0xffffffffffffffff) 01:27:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 01:27:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 230.865437] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:27:41 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) 01:27:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 01:27:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285629, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="213a202e2f66696c653020213a2020213a2020213a2020706f7369785f61636c5f61636365737340776c32220ee35b1fdc087a06ef4f616e305d5d2025657468304db9e7f96ae6715cc8df20a1a7dba14ab79dbf48ba07277f899bbf7697da8a60c4b9e25a63b1c0c24749b0f851fc0148b2d39a139ecc5bf0d233980432359ed02a84214d8e854808c5b1c692b2104e4f2549722128ea06a886c9993f5af5a8ee38c02c56a3e02cb66e1a57aa974c7b708739b5106357d2e175fe521f0ec605df1657cfeb842a80aa4caf0fce23"], 0x41) 01:27:41 executing program 3: exit(0xff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) 01:27:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 01:27:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0585609, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000000)) 01:27:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 01:27:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc058560f, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:42 executing program 1: mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4001, &(0x7f00000001c0)=0x7, 0x8000, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x7, 0x100, 0x5}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3d) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000001140)="0adc03263c343f319bd070") get_mempolicy(0x0, &(0x7f0000000180), 0x88, &(0x7f0000004000/0x1000)=nil, 0x2) 01:27:42 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 01:27:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x0) 01:27:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0585611, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0xd, 0x6, 0xfff) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$vhci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="02d103f129a9e43dfae119378857499babc09b0100b640a35bd29e1e7d355a00"/41], 0xfffffffffffffdc2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000100), &(0x7f00000001c0)=0xc) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r2, &(0x7f0000000300), 0xfe32) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="0002ffff000014007c493edd0000808100"/32]) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x80}, 0x40840) 01:27:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:42 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc058565d, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x0) 01:27:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x8, 0x80000, 0x6) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x80000000, 0x7fffffff}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x2}, 0x8) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x3c) 01:27:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:42 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05667, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:43 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x0) 01:27:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xe, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0xffffffb5}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x5dd3fc59e63cf525) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x300001, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 01:27:43 executing program 3: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x3, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89e1, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) 01:27:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x4, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:43 executing program 3: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:43 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 233.392029] FAULT_INJECTION: forcing a failure. [ 233.392029] name failslab, interval 1, probability 0, space 0, times 0 [ 233.428275] CPU: 1 PID: 9196 Comm: syz-executor.2 Not tainted 4.19.36 #4 [ 233.435166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.444653] Call Trace: [ 233.447284] dump_stack+0x172/0x1f0 [ 233.450945] should_fail.cold+0xa/0x1b [ 233.454868] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 233.460006] ? lock_downgrade+0x810/0x810 [ 233.464190] ? ___might_sleep+0x163/0x280 [ 233.468372] __should_failslab+0x121/0x190 [ 233.472694] should_failslab+0x9/0x14 [ 233.476539] kmem_cache_alloc_trace+0x2cf/0x760 [ 233.481264] alloc_pipe_info+0xb9/0x430 [ 233.486753] ? __might_sleep+0x95/0x190 [ 233.490938] splice_direct_to_actor+0x6c4/0x890 [ 233.495644] ? generic_pipe_buf_nosteal+0x10/0x10 [ 233.495662] ? selinux_file_permission+0x92/0x550 [ 233.495682] ? do_splice_to+0x190/0x190 [ 233.495704] ? security_file_permission+0x8f/0x230 [ 233.495721] ? rw_verify_area+0x118/0x360 [ 233.495736] do_splice_direct+0x1da/0x2a0 [ 233.495751] ? splice_direct_to_actor+0x890/0x890 [ 233.495768] ? security_file_permission+0x8f/0x230 [ 233.495782] ? rw_verify_area+0x118/0x360 [ 233.505677] do_sendfile+0x597/0xce0 [ 233.505701] ? do_compat_pwritev64+0x1c0/0x1c0 [ 233.505721] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 233.505733] ? fput+0x128/0x1a0 [ 233.505754] __x64_sys_sendfile64+0x1dd/0x220 [ 233.514678] ? __ia32_sys_sendfile+0x230/0x230 [ 233.514695] ? do_syscall_64+0x26/0x610 [ 233.514714] ? lockdep_hardirqs_on+0x415/0x5d0 [ 233.514732] ? trace_hardirqs_on+0x67/0x230 [ 233.514749] do_syscall_64+0x103/0x610 [ 233.514770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 233.514788] RIP: 0033:0x458da9 [ 233.523270] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 233.523279] RSP: 002b:00007f86b553cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 233.523293] RAX: ffffffffffffffda RBX: 00007f86b553cc90 RCX: 0000000000458da9 [ 233.523302] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 233.523311] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 233.523320] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f86b553d6d4 [ 233.523329] R13: 00000000004c5fa3 R14: 00000000004da748 R15: 0000000000000005 01:27:44 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:44 executing program 3: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x5, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:44 executing program 2 (fault-call:5 fault-nth:1): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89e1, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) 01:27:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) [ 234.029174] FAULT_INJECTION: forcing a failure. [ 234.029174] name failslab, interval 1, probability 0, space 0, times 0 01:27:44 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x6, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89e1, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) [ 234.129536] CPU: 0 PID: 9214 Comm: syz-executor.2 Not tainted 4.19.36 #4 [ 234.136446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.145816] Call Trace: [ 234.148452] dump_stack+0x172/0x1f0 [ 234.152125] should_fail.cold+0xa/0x1b [ 234.156049] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 234.161183] ? lock_downgrade+0x810/0x810 [ 234.165364] ? ___might_sleep+0x163/0x280 [ 234.169560] __should_failslab+0x121/0x190 [ 234.173833] should_failslab+0x9/0x14 [ 234.177662] __kmalloc+0x2e5/0x750 [ 234.181224] ? kmem_cache_alloc_trace+0x34b/0x760 [ 234.186099] ? alloc_pipe_info+0x199/0x430 [ 234.190365] alloc_pipe_info+0x199/0x430 [ 234.194492] splice_direct_to_actor+0x6c4/0x890 [ 234.199219] ? generic_pipe_buf_nosteal+0x10/0x10 [ 234.204085] ? selinux_file_permission+0x92/0x550 [ 234.208956] ? do_splice_to+0x190/0x190 [ 234.212959] ? security_file_permission+0x8f/0x230 [ 234.217922] ? rw_verify_area+0x118/0x360 [ 234.222109] do_splice_direct+0x1da/0x2a0 [ 234.226292] ? splice_direct_to_actor+0x890/0x890 [ 234.231184] ? security_file_permission+0x8f/0x230 [ 234.236170] ? rw_verify_area+0x118/0x360 [ 234.240466] do_sendfile+0x597/0xce0 [ 234.244222] ? do_compat_pwritev64+0x1c0/0x1c0 [ 234.248836] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 234.254398] ? fput+0x128/0x1a0 [ 234.257710] __x64_sys_sendfile64+0x1dd/0x220 [ 234.262243] ? __ia32_sys_sendfile+0x230/0x230 [ 234.266850] ? do_syscall_64+0x26/0x610 [ 234.271635] ? lockdep_hardirqs_on+0x415/0x5d0 [ 234.278127] ? trace_hardirqs_on+0x67/0x230 [ 234.282481] do_syscall_64+0x103/0x610 [ 234.286667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 234.292398] RIP: 0033:0x458da9 [ 234.295608] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.314543] RSP: 002b:00007f86b553cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 234.322286] RAX: ffffffffffffffda RBX: 00007f86b553cc90 RCX: 0000000000458da9 01:27:44 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 234.329583] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 234.336878] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 234.344168] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f86b553d6d4 [ 234.351454] R13: 00000000004c5fa3 R14: 00000000004da748 R15: 0000000000000005 01:27:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:44 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:45 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x7, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:45 executing program 2 (fault-call:5 fault-nth:2): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:45 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89e1, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) 01:27:45 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) [ 234.952990] FAULT_INJECTION: forcing a failure. [ 234.952990] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 234.997119] CPU: 1 PID: 9256 Comm: syz-executor.2 Not tainted 4.19.36 #4 [ 235.004283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.013674] Call Trace: [ 235.013702] dump_stack+0x172/0x1f0 [ 235.013727] should_fail.cold+0xa/0x1b [ 235.013748] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 235.013765] ? ___might_sleep+0x163/0x280 [ 235.013788] ? __might_sleep+0x95/0x190 [ 235.037852] __alloc_pages_nodemask+0x1ee/0x760 [ 235.042564] ? __alloc_pages_slowpath+0x2870/0x2870 [ 235.047626] ? find_held_lock+0x35/0x130 [ 235.051813] ? __do_page_cache_readahead+0x3f1/0x720 [ 235.056955] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 235.056978] alloc_pages_current+0x107/0x210 [ 235.056998] __page_cache_alloc+0x2bd/0x460 [ 235.057018] ? kasan_check_read+0x11/0x20 [ 235.075562] __do_page_cache_readahead+0x1ce/0x720 [ 235.080543] ? read_pages+0x540/0x540 [ 235.084374] ? page_cache_sync_readahead+0x1d3/0x520 [ 235.089500] ondemand_readahead+0x543/0xcd0 [ 235.089538] page_cache_sync_readahead+0x281/0x520 [ 235.089563] generic_file_read_iter+0x1694/0x2ad0 [ 235.089584] ? save_stack+0xa9/0xd0 [ 235.107327] ? kasan_kmalloc+0xce/0xf0 [ 235.111260] ? __kmalloc+0x15d/0x750 [ 235.114995] ? do_sendfile+0x597/0xce0 [ 235.118912] ? filemap_range_has_page+0x290/0x290 [ 235.123784] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 235.128654] ? rcu_read_unlock+0x16/0x60 [ 235.132736] ? percpu_ref_put_many+0x94/0x190 [ 235.137269] ext4_file_read_iter+0x180/0x3c0 [ 235.141703] generic_file_splice_read+0x431/0x750 [ 235.146574] ? add_to_pipe+0x350/0x350 [ 235.150489] ? __inode_security_revalidate+0xda/0x120 [ 235.155769] ? security_file_permission+0x8f/0x230 [ 235.160905] ? rw_verify_area+0x118/0x360 [ 235.165096] ? add_to_pipe+0x350/0x350 [ 235.169016] do_splice_to+0x12a/0x190 [ 235.172856] splice_direct_to_actor+0x256/0x890 [ 235.177572] ? generic_pipe_buf_nosteal+0x10/0x10 [ 235.182549] ? do_splice_to+0x190/0x190 [ 235.186568] ? security_file_permission+0x8f/0x230 [ 235.191550] ? rw_verify_area+0x118/0x360 [ 235.195741] do_splice_direct+0x1da/0x2a0 [ 235.199921] ? splice_direct_to_actor+0x890/0x890 [ 235.204806] ? security_file_permission+0x8f/0x230 [ 235.209769] ? rw_verify_area+0x118/0x360 [ 235.214007] do_sendfile+0x597/0xce0 [ 235.217761] ? do_compat_pwritev64+0x1c0/0x1c0 [ 235.222378] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 235.227940] ? fput+0x128/0x1a0 [ 235.231251] __x64_sys_sendfile64+0x1dd/0x220 [ 235.235778] ? __ia32_sys_sendfile+0x230/0x230 [ 235.240386] ? do_syscall_64+0x26/0x610 01:27:45 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x8, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:45 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x9, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:45 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 235.244387] ? lockdep_hardirqs_on+0x415/0x5d0 [ 235.249097] ? trace_hardirqs_on+0x67/0x230 [ 235.253972] do_syscall_64+0x103/0x610 [ 235.258605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 235.263820] RIP: 0033:0x458da9 [ 235.267023] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 235.286394] RSP: 002b:00007f86b553cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 235.294165] RAX: ffffffffffffffda RBX: 00007f86b553cc90 RCX: 0000000000458da9 [ 235.294174] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 235.294182] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 235.294190] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f86b553d6d4 [ 235.294198] R13: 00000000004c5fa3 R14: 00000000004da748 R15: 0000000000000005 [ 235.367935] selinux_nlmsg_perm: 2038 callbacks suppressed [ 235.367951] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9256 comm=syz-executor.2 [ 235.450723] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9256 comm=syz-executor.2 [ 235.466503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9256 comm=syz-executor.2 [ 235.479924] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9256 comm=syz-executor.2 [ 235.505300] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9256 comm=syz-executor.2 [ 235.520652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9256 comm=syz-executor.2 [ 235.533255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9256 comm=syz-executor.2 [ 235.545494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9256 comm=syz-executor.2 [ 235.557757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9256 comm=syz-executor.2 [ 235.570197] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9256 comm=syz-executor.2 01:27:46 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xa, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:46 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:46 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x6, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:46 executing program 2 (fault-call:5 fault-nth:3): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:46 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:46 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:46 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 235.914621] FAULT_INJECTION: forcing a failure. [ 235.914621] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.971580] CPU: 0 PID: 9303 Comm: syz-executor.2 Not tainted 4.19.36 #4 [ 235.978481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.987878] Call Trace: [ 235.990490] dump_stack+0x172/0x1f0 [ 235.994176] should_fail.cold+0xa/0x1b [ 235.998096] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 236.003322] ? ___might_sleep+0x163/0x280 [ 236.007548] ? __might_sleep+0x95/0x190 [ 236.011573] __alloc_pages_nodemask+0x1ee/0x760 [ 236.016274] ? __alloc_pages_slowpath+0x2870/0x2870 01:27:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xb, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 236.021322] ? find_held_lock+0x35/0x130 [ 236.025406] ? __do_page_cache_readahead+0x3f1/0x720 [ 236.030551] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 236.036147] alloc_pages_current+0x107/0x210 [ 236.040596] __page_cache_alloc+0x2bd/0x460 [ 236.044940] ? kasan_check_read+0x11/0x20 [ 236.049116] __do_page_cache_readahead+0x1ce/0x720 [ 236.054083] ? read_pages+0x540/0x540 [ 236.057928] ? page_cache_sync_readahead+0x1d3/0x520 [ 236.063060] ondemand_readahead+0x543/0xcd0 [ 236.063085] page_cache_sync_readahead+0x281/0x520 [ 236.063106] generic_file_read_iter+0x1694/0x2ad0 [ 236.063126] ? save_stack+0xa9/0xd0 [ 236.063142] ? kasan_kmalloc+0xce/0xf0 [ 236.063154] ? __kmalloc+0x15d/0x750 [ 236.063169] ? do_sendfile+0x597/0xce0 [ 236.063189] ? filemap_range_has_page+0x290/0x290 [ 236.063211] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 236.102386] ? rcu_read_unlock+0x16/0x60 [ 236.106469] ? percpu_ref_put_many+0x94/0x190 [ 236.111016] ext4_file_read_iter+0x180/0x3c0 [ 236.115460] generic_file_splice_read+0x431/0x750 01:27:46 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xc, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 236.120333] ? add_to_pipe+0x350/0x350 [ 236.124336] ? __inode_security_revalidate+0xda/0x120 [ 236.129589] ? security_file_permission+0x8f/0x230 [ 236.134559] ? rw_verify_area+0x118/0x360 [ 236.138833] ? add_to_pipe+0x350/0x350 [ 236.142751] do_splice_to+0x12a/0x190 [ 236.146578] splice_direct_to_actor+0x256/0x890 [ 236.151278] ? generic_pipe_buf_nosteal+0x10/0x10 [ 236.156151] ? do_splice_to+0x190/0x190 [ 236.160148] ? security_file_permission+0x8f/0x230 [ 236.165109] ? rw_verify_area+0x118/0x360 01:27:46 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040), 0x4) [ 236.169287] do_splice_direct+0x1da/0x2a0 [ 236.173465] ? splice_direct_to_actor+0x890/0x890 [ 236.178336] ? security_file_permission+0x8f/0x230 [ 236.183292] ? rw_verify_area+0x118/0x360 [ 236.187474] do_sendfile+0x597/0xce0 [ 236.191229] ? do_compat_pwritev64+0x1c0/0x1c0 [ 236.195842] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 236.201406] ? fput+0x128/0x1a0 [ 236.204714] __x64_sys_sendfile64+0x1dd/0x220 [ 236.209239] ? __ia32_sys_sendfile+0x230/0x230 [ 236.213831] ? do_syscall_64+0x26/0x610 [ 236.213850] ? lockdep_hardirqs_on+0x415/0x5d0 [ 236.213868] ? trace_hardirqs_on+0x67/0x230 [ 236.213888] do_syscall_64+0x103/0x610 [ 236.213909] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 236.213922] RIP: 0033:0x458da9 [ 236.213938] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 236.213947] RSP: 002b:00007f86b553cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 236.265745] RAX: ffffffffffffffda RBX: 00007f86b553cc90 RCX: 0000000000458da9 [ 236.274766] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 236.286343] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 236.294111] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f86b553d6d4 [ 236.301407] R13: 00000000004c5fa3 R14: 00000000004da748 R15: 0000000000000005 01:27:47 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xd, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:47 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:47 executing program 2 (fault-call:5 fault-nth:4): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x800000000000937e, &(0x7f00000001c0)="01000000000000007f") syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x20000) 01:27:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 236.834908] FAULT_INJECTION: forcing a failure. [ 236.834908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.907096] CPU: 1 PID: 9341 Comm: syz-executor.2 Not tainted 4.19.36 #4 [ 236.914031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.923409] Call Trace: [ 236.926019] dump_stack+0x172/0x1f0 [ 236.929683] should_fail.cold+0xa/0x1b [ 236.933594] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 236.938737] ? ___might_sleep+0x163/0x280 [ 236.942910] ? __might_sleep+0x95/0x190 [ 236.944561] autofs4:pid:9353:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 236.946907] __alloc_pages_nodemask+0x1ee/0x760 [ 236.946929] ? __alloc_pages_slowpath+0x2870/0x2870 [ 236.946958] ? find_held_lock+0x35/0x130 [ 236.958287] autofs4:pid:9353:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 236.960056] ? __do_page_cache_readahead+0x3f1/0x720 [ 236.960078] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 236.960100] alloc_pages_current+0x107/0x210 [ 236.992895] __page_cache_alloc+0x2bd/0x460 [ 236.997497] ? kasan_check_read+0x11/0x20 [ 237.001716] __do_page_cache_readahead+0x1ce/0x720 [ 237.006670] ? read_pages+0x540/0x540 [ 237.010531] ? page_cache_sync_readahead+0x1d3/0x520 [ 237.015669] ondemand_readahead+0x543/0xcd0 [ 237.020031] page_cache_sync_readahead+0x281/0x520 [ 237.025003] generic_file_read_iter+0x1694/0x2ad0 [ 237.030032] ? save_stack+0xa9/0xd0 [ 237.033700] ? kasan_kmalloc+0xce/0xf0 [ 237.037613] ? __kmalloc+0x15d/0x750 [ 237.041350] ? do_sendfile+0x597/0xce0 [ 237.045581] ? filemap_range_has_page+0x290/0x290 [ 237.050449] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 237.055314] ? rcu_read_unlock+0x16/0x60 [ 237.059397] ? percpu_ref_put_many+0x94/0x190 [ 237.063962] ext4_file_read_iter+0x180/0x3c0 [ 237.068491] generic_file_splice_read+0x431/0x750 [ 237.073376] ? add_to_pipe+0x350/0x350 [ 237.077285] ? __inode_security_revalidate+0xda/0x120 [ 237.082543] ? security_file_permission+0x8f/0x230 [ 237.087495] ? rw_verify_area+0x118/0x360 [ 237.091670] ? add_to_pipe+0x350/0x350 [ 237.095575] do_splice_to+0x12a/0x190 [ 237.099400] splice_direct_to_actor+0x256/0x890 [ 237.104089] ? generic_pipe_buf_nosteal+0x10/0x10 [ 237.108948] ? do_splice_to+0x190/0x190 [ 237.112944] ? security_file_permission+0x8f/0x230 [ 237.117906] ? rw_verify_area+0x118/0x360 [ 237.122079] do_splice_direct+0x1da/0x2a0 [ 237.126240] ? splice_direct_to_actor+0x890/0x890 [ 237.131102] ? security_file_permission+0x8f/0x230 [ 237.136052] ? rw_verify_area+0x118/0x360 [ 237.140225] do_sendfile+0x597/0xce0 [ 237.144075] ? do_compat_pwritev64+0x1c0/0x1c0 [ 237.148693] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 237.154470] ? fput+0x128/0x1a0 [ 237.157781] __x64_sys_sendfile64+0x1dd/0x220 [ 237.162296] ? __ia32_sys_sendfile+0x230/0x230 [ 237.166898] ? do_syscall_64+0x26/0x610 [ 237.170925] ? lockdep_hardirqs_on+0x415/0x5d0 [ 237.175536] ? trace_hardirqs_on+0x67/0x230 [ 237.179974] do_syscall_64+0x103/0x610 [ 237.183880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 237.189078] RIP: 0033:0x458da9 01:27:47 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='/\x00') r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x402000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1ff}, &(0x7f0000000140)=0xff7b) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000035e000/0x4000)=nil, 0xe03520}, 0x1}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r3, 0x401}, 0x8) 01:27:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:47 executing program 1: r0 = dup(0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @empty}, &(0x7f0000000100)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000140)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}, r1}, 0x14) r2 = socket$rxrpc(0x21, 0x2, 0x2) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, 0x0, 0x22) [ 237.192282] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 237.211198] RSP: 002b:00007f86b553cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 237.218940] RAX: ffffffffffffffda RBX: 00007f86b553cc90 RCX: 0000000000458da9 [ 237.226356] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 237.233638] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 237.240916] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f86b553d6d4 [ 237.248193] R13: 00000000004c5fa3 R14: 00000000004da748 R15: 0000000000000005 01:27:48 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:48 executing program 1: r0 = socket(0xa, 0x802, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) r2 = semget$private(0x0, 0x2, 0x400) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000100)=""/105) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x101000, 0x0) write$P9_RFSYNC(r3, &(0x7f0000000240)={0xfffffffffffffc6d, 0x33, 0x1}, 0xffffffffffffff54) 01:27:48 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:48 executing program 2 (fault-call:5 fault-nth:5): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 237.738706] FAULT_INJECTION: forcing a failure. [ 237.738706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 237.801567] CPU: 1 PID: 9380 Comm: syz-executor.2 Not tainted 4.19.36 #4 [ 237.808471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.817850] Call Trace: [ 237.820465] dump_stack+0x172/0x1f0 [ 237.824131] should_fail.cold+0xa/0x1b [ 237.828055] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 237.833214] ? ___might_sleep+0x163/0x280 [ 237.837505] ? __might_sleep+0x95/0x190 [ 237.842245] __alloc_pages_nodemask+0x1ee/0x760 [ 237.847158] ? __alloc_pages_slowpath+0x2870/0x2870 [ 237.847183] ? find_held_lock+0x35/0x130 [ 237.847201] ? __do_page_cache_readahead+0x3f1/0x720 [ 237.847220] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 237.847246] alloc_pages_current+0x107/0x210 [ 237.861762] __page_cache_alloc+0x2bd/0x460 [ 237.861779] ? kasan_check_read+0x11/0x20 [ 237.861801] __do_page_cache_readahead+0x1ce/0x720 [ 237.861826] ? read_pages+0x540/0x540 [ 237.861842] ? page_cache_sync_readahead+0x1d3/0x520 [ 237.861866] ondemand_readahead+0x543/0xcd0 [ 237.861890] page_cache_sync_readahead+0x281/0x520 [ 237.861910] generic_file_read_iter+0x1694/0x2ad0 [ 237.861940] ? __schedule+0x81b/0x1d00 [ 237.912282] ? filemap_range_has_page+0x290/0x290 [ 237.917146] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 237.921928] ? retint_kernel+0x2d/0x2d [ 237.925848] ext4_file_read_iter+0x180/0x3c0 [ 237.930274] ? generic_file_splice_read+0x388/0x750 [ 237.935309] generic_file_splice_read+0x431/0x750 [ 237.940193] ? add_to_pipe+0x350/0x350 [ 237.944094] ? __inode_security_revalidate+0xda/0x120 [ 237.949314] ? security_file_permission+0x8f/0x230 [ 237.954258] ? rw_verify_area+0x118/0x360 [ 237.958420] ? add_to_pipe+0x350/0x350 [ 237.962322] do_splice_to+0x12a/0x190 [ 237.966145] splice_direct_to_actor+0x256/0x890 [ 237.970835] ? generic_pipe_buf_nosteal+0x10/0x10 [ 237.975811] ? do_splice_to+0x190/0x190 [ 237.979848] ? security_file_permission+0x8f/0x230 [ 237.984794] ? rw_verify_area+0x118/0x360 [ 237.988958] do_splice_direct+0x1da/0x2a0 [ 237.993318] ? splice_direct_to_actor+0x890/0x890 [ 237.998307] ? security_file_permission+0x8f/0x230 [ 238.003256] ? rw_verify_area+0x118/0x360 [ 238.007420] do_sendfile+0x597/0xce0 [ 238.011275] ? do_compat_pwritev64+0x1c0/0x1c0 [ 238.016062] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 238.021624] ? fput+0x128/0x1a0 [ 238.024920] __x64_sys_sendfile64+0x1dd/0x220 [ 238.029421] ? __ia32_sys_sendfile+0x230/0x230 [ 238.034028] ? do_syscall_64+0x26/0x610 [ 238.038028] ? lockdep_hardirqs_on+0x415/0x5d0 [ 238.042628] ? trace_hardirqs_on+0x67/0x230 [ 238.046964] do_syscall_64+0x103/0x610 [ 238.050868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.056069] RIP: 0033:0x458da9 [ 238.059284] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 238.079601] RSP: 002b:00007f86b553cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 238.087360] RAX: ffffffffffffffda RBX: 00007f86b553cc90 RCX: 0000000000458da9 [ 238.094752] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 01:27:48 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x10, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:48 executing program 1: socket(0x1e, 0x805, 0x0) r0 = socket(0x0, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1d1) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) 01:27:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:48 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x10, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 238.102048] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 238.109337] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f86b553d6d4 [ 238.116620] R13: 00000000004c5fa3 R14: 00000000004da748 R15: 0000000000000005 01:27:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:48 executing program 4: exit(0xff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)}, 0x48814) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x33, "31d14dca1a9c60bf72d3d98385559ce0001ab5f79c1b7aaceacaf1cccda94a71d61a4f8ae30f531049a15c409c72ccda1100ee"}, &(0x7f00000000c0)=0x57) accept4$inet6(r2, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r3, 0x541d, 0x0) dup2(r3, r0) 01:27:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:48 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x10, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:48 executing program 2 (fault-call:5 fault-nth:6): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 238.634015] FAULT_INJECTION: forcing a failure. [ 238.634015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.678893] CPU: 0 PID: 9425 Comm: syz-executor.2 Not tainted 4.19.36 #4 [ 238.685878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.695250] Call Trace: [ 238.695277] dump_stack+0x172/0x1f0 [ 238.695303] should_fail.cold+0xa/0x1b [ 238.695327] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 238.701554] ? ___might_sleep+0x163/0x280 [ 238.701573] ? __might_sleep+0x95/0x190 [ 238.701592] __alloc_pages_nodemask+0x1ee/0x760 [ 238.701610] ? __alloc_pages_slowpath+0x2870/0x2870 [ 238.701631] ? find_held_lock+0x35/0x130 [ 238.701647] ? __do_page_cache_readahead+0x3f1/0x720 [ 238.701666] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 238.701687] alloc_pages_current+0x107/0x210 [ 238.718917] __page_cache_alloc+0x2bd/0x460 [ 238.718934] ? kasan_check_read+0x11/0x20 [ 238.718955] __do_page_cache_readahead+0x1ce/0x720 [ 238.718977] ? read_pages+0x540/0x540 [ 238.728687] ? page_cache_sync_readahead+0x1d3/0x520 [ 238.765175] ondemand_readahead+0x543/0xcd0 [ 238.765200] page_cache_sync_readahead+0x281/0x520 [ 238.765223] generic_file_read_iter+0x1694/0x2ad0 [ 238.774671] ? save_stack+0xa9/0xd0 [ 238.774687] ? kasan_kmalloc+0xce/0xf0 [ 238.774699] ? __kmalloc+0x15d/0x750 [ 238.774714] ? do_sendfile+0x597/0xce0 [ 238.774735] ? filemap_range_has_page+0x290/0x290 [ 238.774757] ? mark_held_locks+0x100/0x100 [ 238.808723] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 238.813594] ? rcu_read_unlock+0x16/0x60 [ 238.817672] ? percpu_ref_put_many+0x94/0x190 [ 238.822188] ext4_file_read_iter+0x180/0x3c0 [ 238.827148] generic_file_splice_read+0x431/0x750 [ 238.832017] ? add_to_pipe+0x350/0x350 [ 238.835924] ? __inode_security_revalidate+0xda/0x120 [ 238.841145] ? security_file_permission+0x8f/0x230 [ 238.846092] ? rw_verify_area+0x118/0x360 [ 238.850271] ? add_to_pipe+0x350/0x350 [ 238.854185] do_splice_to+0x12a/0x190 [ 238.858008] splice_direct_to_actor+0x256/0x890 [ 238.862700] ? generic_pipe_buf_nosteal+0x10/0x10 [ 238.867582] ? do_splice_to+0x190/0x190 [ 238.871583] ? security_file_permission+0x8f/0x230 [ 238.876557] ? rw_verify_area+0x118/0x360 [ 238.880742] do_splice_direct+0x1da/0x2a0 [ 238.884914] ? splice_direct_to_actor+0x890/0x890 [ 238.889786] ? security_file_permission+0x8f/0x230 [ 238.894764] ? rw_verify_area+0x118/0x360 [ 238.898938] do_sendfile+0x597/0xce0 [ 238.902677] ? do_compat_pwritev64+0x1c0/0x1c0 [ 238.907290] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 238.912859] ? fput+0x128/0x1a0 [ 238.916174] __x64_sys_sendfile64+0x1dd/0x220 [ 238.920702] ? __ia32_sys_sendfile+0x230/0x230 [ 238.925305] ? do_syscall_64+0x26/0x610 [ 238.929311] ? lockdep_hardirqs_on+0x415/0x5d0 [ 238.933907] ? trace_hardirqs_on+0x67/0x230 [ 238.938263] do_syscall_64+0x103/0x610 [ 238.942165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 238.947363] RIP: 0033:0x458da9 [ 238.950575] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 238.969497] RSP: 002b:00007f86b553cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 01:27:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='cramfs\x00', 0x4, 0x0) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) link(&(0x7f0000000100)='./file0/file0/../file0\x00', &(0x7f00000019c0)='./file1\x00') 01:27:49 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) [ 238.977241] RAX: ffffffffffffffda RBX: 00007f86b553cc90 RCX: 0000000000458da9 [ 238.984529] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 238.991820] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 238.999282] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f86b553d6d4 [ 239.006582] R13: 00000000004c5fa3 R14: 00000000004da748 R15: 0000000000000005 01:27:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:49 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:49 executing program 4: exit(0xff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) 01:27:49 executing program 1: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffd, 0x87, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000000)=0x8, 0x8, 0x2) 01:27:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:49 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:49 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:49 executing program 2 (fault-call:5 fault-nth:7): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) [ 239.491720] FAULT_INJECTION: forcing a failure. [ 239.491720] name fail_page_alloc, interval 1, probability 0, space 0, times 0 01:27:49 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) [ 239.580020] CPU: 0 PID: 9475 Comm: syz-executor.2 Not tainted 4.19.36 #4 [ 239.586926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.596304] Call Trace: [ 239.598922] dump_stack+0x172/0x1f0 [ 239.602592] should_fail.cold+0xa/0x1b [ 239.606531] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 239.611676] ? ___might_sleep+0x163/0x280 [ 239.615878] ? __might_sleep+0x95/0x190 [ 239.619894] __alloc_pages_nodemask+0x1ee/0x760 [ 239.624596] ? __alloc_pages_slowpath+0x2870/0x2870 [ 239.629641] ? find_held_lock+0x35/0x130 [ 239.633726] ? __do_page_cache_readahead+0x3f1/0x720 [ 239.639532] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 239.645468] alloc_pages_current+0x107/0x210 [ 239.650434] __page_cache_alloc+0x2bd/0x460 [ 239.654777] ? kasan_check_read+0x11/0x20 [ 239.658953] __do_page_cache_readahead+0x1ce/0x720 [ 239.663917] ? read_pages+0x540/0x540 [ 239.667750] ? page_cache_sync_readahead+0x1d3/0x520 [ 239.672880] ondemand_readahead+0x543/0xcd0 [ 239.677237] page_cache_sync_readahead+0x281/0x520 [ 239.682188] generic_file_read_iter+0x1694/0x2ad0 [ 239.687050] ? save_stack+0xa9/0xd0 [ 239.690712] ? kasan_kmalloc+0xce/0xf0 [ 239.694618] ? __kmalloc+0x15d/0x750 [ 239.698341] ? do_sendfile+0x597/0xce0 [ 239.702252] ? filemap_range_has_page+0x290/0x290 [ 239.707119] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 239.711983] ? rcu_read_unlock+0x16/0x60 [ 239.716059] ? percpu_ref_put_many+0x94/0x190 [ 239.720579] ext4_file_read_iter+0x180/0x3c0 [ 239.725015] generic_file_splice_read+0x431/0x750 [ 239.729882] ? add_to_pipe+0x350/0x350 [ 239.733788] ? __inode_security_revalidate+0xda/0x120 [ 239.739011] ? security_file_permission+0x8f/0x230 [ 239.743957] ? rw_verify_area+0x118/0x360 [ 239.748220] ? add_to_pipe+0x350/0x350 [ 239.752145] do_splice_to+0x12a/0x190 [ 239.755964] splice_direct_to_actor+0x256/0x890 [ 239.760658] ? generic_pipe_buf_nosteal+0x10/0x10 [ 239.765528] ? do_splice_to+0x190/0x190 [ 239.769550] ? security_file_permission+0x8f/0x230 [ 239.774523] ? rw_verify_area+0x118/0x360 [ 239.778698] do_splice_direct+0x1da/0x2a0 [ 239.782860] ? splice_direct_to_actor+0x890/0x890 [ 239.787722] ? security_file_permission+0x8f/0x230 [ 239.792669] ? rw_verify_area+0x118/0x360 [ 239.796835] do_sendfile+0x597/0xce0 [ 239.800581] ? do_compat_pwritev64+0x1c0/0x1c0 [ 239.805223] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 239.810784] ? fput+0x128/0x1a0 [ 239.814084] __x64_sys_sendfile64+0x1dd/0x220 [ 239.818613] ? __ia32_sys_sendfile+0x230/0x230 [ 239.823293] ? do_syscall_64+0x26/0x610 [ 239.827285] ? lockdep_hardirqs_on+0x415/0x5d0 [ 239.831885] ? trace_hardirqs_on+0x67/0x230 [ 239.836228] do_syscall_64+0x103/0x610 [ 239.840255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 239.845456] RIP: 0033:0x458da9 [ 239.848655] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 239.867580] RSP: 002b:00007f86b553cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 01:27:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:50 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="9c870000f3102ab01678ff3030f0fc6d4d31807d5995c0ebbce4a75ffe4ef60d94104b41dab8817822a5caf96c5c", @ANYRES16=r1, @ANYBLOB="200f27bd7000fddbdf250a0000003800030014000600fe88000000000000000000000000000108000100010000000800040008000000080007004e23000008000300040000001c00020008000400613e00000800040000100000080007001600000034000200080002004e2200000800080003000000080002004e220000080008000000000008000b000a0000000800050005000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000010) r2 = memfd_create(&(0x7f0000000000)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r2, 0x10000000000001, 0x0, 0x9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84204020}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x338, r4, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xf0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @rand_addr="b9a215dd9e7334d765630ae742b21c9d", 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @local, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x400, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80c4}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x148, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8a1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f9c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffeffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x80}, 0x4040) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0xfffffff, 0x100000000, 0x3, [], &(0x7f0000000080)={0x9a0909, 0x7d, [], @ptr=0xcf}}) [ 239.875308] RAX: ffffffffffffffda RBX: 00007f86b553cc90 RCX: 0000000000458da9 [ 239.882590] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 239.889872] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 239.897156] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f86b553d6d4 [ 239.904437] R13: 00000000004c5fa3 R14: 00000000004da748 R15: 0000000000000005 01:27:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:50 executing program 4: exit(0xff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) 01:27:50 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) 01:27:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:50 executing program 1: r0 = socket$rds(0xa, 0x2, 0x88) sendmsg$rds(r0, &(0x7f0000001040)={&(0x7f0000015ff3)={0x2, 0x4e21}, 0x10, &(0x7f000000d000), 0x0, &(0x7f000000ef03)=ANY=[@ANYBLOB="5800000000000000140100000800"/24, @ANYPTR=&(0x7f0000005ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f000001aff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005800000000000000140100000600"/72, @ANYPTR=&(0x7f0000001080)=ANY=[@ANYBLOB="0000000000000000c8571c5f7f56396432b417176251af8062badcf56bf4632e580ef47f4357b3d7700f37f746beb7dd1593da192d91c0fb1e71381f907e734717706c84b78d348e4ccff25d4addb96744657b7556bf300d3213c8d15e40830c236b4a50efd0ae712a6156a1d9fe53ba2c267d860db14164c5e65dcdead31f370b4c929ebbb65ada524fb5e8e6a785c8c8efb8b844357b1c274802f8f5f598f1b8f6c7aae7d61e026f813b4e06a716c8db15a07b1929843228ae2e3bc1e1acdaa2dd87ea3c52c124704836c8a493e39bb56f"], @ANYPTR=&(0x7f0000009ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000001100000000000000000000000100000030000000000000001401000003000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="0010000000000000", @ANYPTR=&(0x7f0000001000)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="02000000000000005800000000000000140100000900"/32, @ANYPTR=&(0x7f0000007000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f000001cff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00'/48], 0x138}, 0x2400c000) 01:27:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) 01:27:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:50 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 240.460650] selinux_nlmsg_perm: 3062 callbacks suppressed [ 240.460673] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9524 comm=syz-executor.2 01:27:50 executing program 1: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0x7, 0x3}]}}, @icmp=@timestamp_reply={0x7, 0x2}}}}}, 0x0) r0 = msgget(0x0, 0x40) msgctl$IPC_RMID(r0, 0x0) 01:27:50 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) 01:27:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) [ 240.552419] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9524 comm=syz-executor.2 [ 240.609488] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9524 comm=syz-executor.2 01:27:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) [ 240.653016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9524 comm=syz-executor.2 [ 240.693068] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9524 comm=syz-executor.2 [ 240.779591] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9524 comm=syz-executor.2 [ 240.798103] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9524 comm=syz-executor.2 [ 240.818273] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9524 comm=syz-executor.2 [ 240.843852] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9524 comm=syz-executor.2 [ 240.860669] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9524 comm=syz-executor.2 01:27:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:51 executing program 4: exit(0xff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) 01:27:51 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f00009b3000)={0x0, 0x0, 0x0, 0x4}) mlock2(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x8) 01:27:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000002) 01:27:51 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) 01:27:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) [ 241.317722] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 01:27:51 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) 01:27:51 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:51 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @rose, @rose, @remote, @null]}, 0x48) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 01:27:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:52 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) 01:27:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000003) [ 241.619450] audit: type=1800 audit(1556242071.980:52): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16804 res=0 [ 241.897397] audit: type=1800 audit(1556242072.260:53): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16801 res=0 01:27:52 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(0xffffffffffffffff, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:52 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, 0x0) 01:27:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000240)={0x7}, 0x7) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141046, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000101}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40086602, &(0x7f0000000100)) sendmsg$rds(r1, &(0x7f0000002940)={&(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002600)=[{&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/241, 0xf1}, {&(0x7f0000000280)=""/132, 0x84}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002480)=""/224, 0xe0}, {&(0x7f0000002580)=""/101, 0x65}], 0x8, &(0x7f0000002800)=ANY=[@ANYBLOB="000000140100000913000044040000796f00000000000000", @ANYPTR=&(0x7f0000002680)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000026c0)=ANY=[@ANYBLOB="ff0f000000000000"], @ANYBLOB="090000000000000000000000000000000000010000000000020000000000000008000000000000000200000000000000580000000000000014010000080000000300000000000000", @ANYPTR=&(0x7f0000002700)=ANY=[@ANYBLOB="ff07000000000000"], @ANYPTR=&(0x7f0000002740)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="090000000000000002000000000000000600000000000000020000000000000003000000000000000000000000000000580000000000000014010000080000000100000025070000", @ANYPTR=&(0x7f0000002780)=ANY=[@ANYBLOB="0002000000000000"], @ANYPTR=&(0x7f00000027c0)=ANY=[@ANYBLOB="0200000000000000"], @ANYBLOB="040000000000000003000000000000000700000000000000050000000000000014000000000000000300000000000000"], 0x108, 0x10}, 0x10) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)) 01:27:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000004) 01:27:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(0xffffffffffffffff, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:52 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, 0x0) 01:27:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:52 executing program 4: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xfffffffffffffffc) 01:27:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(0xffffffffffffffff, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:52 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, 0x0) 01:27:53 executing program 4: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="24000000160007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) bind$isdn_base(r0, &(0x7f0000000000)={0x22, 0x100, 0xffffffffffff0001, 0x396, 0x3}, 0x2a9) [ 242.684635] audit: type=1800 audit(1556242073.050:54): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16806 res=0 01:27:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000005) 01:27:53 executing program 4: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:53 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 242.949069] FAULT_INJECTION: forcing a failure. [ 242.949069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 01:27:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 243.030033] CPU: 0 PID: 9681 Comm: syz-executor.3 Not tainted 4.19.36 #4 [ 243.036956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.046337] Call Trace: [ 243.046417] dump_stack+0x172/0x1f0 [ 243.046443] should_fail.cold+0xa/0x1b [ 243.046470] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 243.052711] ? ___might_sleep+0x163/0x280 [ 243.052731] ? __might_sleep+0x95/0x190 [ 243.052751] __alloc_pages_nodemask+0x1ee/0x760 [ 243.074571] ? __alloc_pages_slowpath+0x2870/0x2870 [ 243.079618] ? __lock_acquire+0x6eb/0x48f0 [ 243.083887] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 243.089467] alloc_pages_current+0x107/0x210 [ 243.093907] pte_alloc_one+0x1b/0x1a0 [ 243.097722] __handle_mm_fault+0x3533/0x3f80 [ 243.102164] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 243.107017] ? find_held_lock+0x35/0x130 [ 243.111091] ? handle_mm_fault+0x322/0xb30 [ 243.115357] ? kasan_check_read+0x11/0x20 [ 243.119522] handle_mm_fault+0x43f/0xb30 [ 243.123627] __do_page_fault+0x62a/0xe90 [ 243.127712] ? vmalloc_fault+0x770/0x770 [ 243.131784] ? trace_hardirqs_off_caller+0x65/0x220 [ 243.136821] do_page_fault+0x71/0x581 [ 243.140636] page_fault+0x1e/0x30 [ 243.144096] RIP: 0010:__get_user_4+0x21/0x30 [ 243.148522] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 243.167440] RSP: 0018:ffff888054eafbd0 EFLAGS: 00010206 [ 243.172820] RAX: 0000000020000003 RBX: ffff88809268f240 RCX: ffffc9000c4b2000 [ 243.180212] RDX: ffffffffffffffff RSI: ffffffff81941133 RDI: 0000000000000286 [ 243.187499] RBP: ffff888054eafce8 R08: ffff888085aa62c0 R09: 0000000000000000 [ 243.194972] R10: ffff888085aa6b40 R11: 8d288087ee24acb3 R12: ffff88809822cc40 [ 243.202257] R13: ffff88808ef5a2c0 R14: 0000000000000000 R15: 0000000040044103 [ 243.209584] ? __might_fault+0x1a3/0x1e0 [ 243.213670] ? snd_pcm_common_ioctl+0x4e2/0x1fd0 [ 243.218454] ? mark_held_locks+0x100/0x100 [ 243.222703] ? proc_fail_nth_write+0x9d/0x1e0 [ 243.227227] ? snd_pcm_status_user+0x190/0x190 [ 243.231840] ? __fget+0x340/0x540 [ 243.235316] ? ___might_sleep+0x163/0x280 [ 243.239493] snd_pcm_ioctl+0x85/0xc0 [ 243.243254] ? snd_pcm_common_ioctl+0x1fd0/0x1fd0 [ 243.248130] do_vfs_ioctl+0xd6e/0x1390 [ 243.252052] ? selinux_file_ioctl+0x46f/0x5e0 [ 243.256578] ? selinux_file_ioctl+0x125/0x5e0 [ 243.261140] ? ioctl_preallocate+0x210/0x210 [ 243.265584] ? selinux_file_mprotect+0x620/0x620 [ 243.270382] ? iterate_fd+0x360/0x360 [ 243.274204] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 243.279761] ? fput+0x128/0x1a0 [ 243.283066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.288637] ? security_file_ioctl+0x93/0xc0 [ 243.293073] ksys_ioctl+0xab/0xd0 [ 243.296559] __x64_sys_ioctl+0x73/0xb0 [ 243.300469] do_syscall_64+0x103/0x610 [ 243.304385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.309591] RIP: 0033:0x458da9 01:27:53 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 243.312793] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 243.331708] RSP: 002b:00007fa77f0e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.339442] RAX: ffffffffffffffda RBX: 00007fa77f0e2c90 RCX: 0000000000458da9 [ 243.346759] RDX: 0000000020000000 RSI: 0000000040044103 RDI: 0000000000000003 [ 243.354044] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 243.361829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa77f0e36d4 [ 243.369110] R13: 00000000004bffed R14: 00000000004d2330 R15: 0000000000000005 01:27:53 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x52) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000000)) ioctl$EXT4_IOC_SETFLAGS(r0, 0xc0c0583b, &(0x7f0000000080)=0x9a) open(&(0x7f0000000180)='./bus\x00', 0x80000, 0x20) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x87de) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0xc47, 0x100000000, 0x9, 0x2, 0x3f, 0x9, 0x4, 0x6}}) 01:27:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:53 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 243.505937] audit: type=1804 audit(1556242073.870:55): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir875217024/syzkaller.6vmdYv/97/bus" dev="sda1" ino=16721 res=1 01:27:53 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:53 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x1, 0x474c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) symlink(&(0x7f0000000380)='.//ile0/../file0\x00', &(0x7f0000000480)='./file0/f.le.\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[]) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0x200}, 0x28, 0x3) renameat(r2, &(0x7f0000000240)='.//ile0\x00', r2, &(0x7f0000000140)='.//ile0/../file0\x00') r3 = dup2(r0, r2) bind$rds(r3, 0x0, 0x0) mount$overlay(0x400000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000000)}, 0x9c, &(0x7f0000000180)={&(0x7f0000000100)}}, 0x18) [ 243.784411] overlayfs: missing 'lowerdir' [ 243.806326] overlayfs: unrecognized mount option "U+" or missing value 01:27:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000006) 01:27:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:54 executing program 3 (fault-call:3 fault-nth:1): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000140)=ANY=[]}, 0x78) [ 243.944439] FAULT_INJECTION: forcing a failure. [ 243.944439] name failslab, interval 1, probability 0, space 0, times 0 [ 243.980506] CPU: 1 PID: 9729 Comm: syz-executor.3 Not tainted 4.19.36 #4 [ 243.987411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.996789] Call Trace: [ 243.996821] dump_stack+0x172/0x1f0 [ 243.996846] should_fail.cold+0xa/0x1b [ 243.996867] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 243.996893] ? lock_downgrade+0x810/0x810 [ 243.996921] ? ___might_sleep+0x163/0x280 [ 244.020565] __should_failslab+0x121/0x190 [ 244.020585] should_failslab+0x9/0x14 [ 244.020604] kmem_cache_alloc+0x2b1/0x700 [ 244.032956] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 244.038541] ptlock_alloc+0x20/0x70 [ 244.042202] pte_alloc_one+0x6d/0x1a0 [ 244.046054] __handle_mm_fault+0x3533/0x3f80 [ 244.050521] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 244.055492] ? find_held_lock+0x35/0x130 [ 244.059594] ? handle_mm_fault+0x322/0xb30 [ 244.064207] ? kasan_check_read+0x11/0x20 [ 244.068388] handle_mm_fault+0x43f/0xb30 [ 244.072494] __do_page_fault+0x62a/0xe90 [ 244.076600] ? vmalloc_fault+0x770/0x770 [ 244.080712] ? trace_hardirqs_off_caller+0x65/0x220 [ 244.085781] do_page_fault+0x71/0x581 [ 244.089610] page_fault+0x1e/0x30 [ 244.093087] RIP: 0010:__get_user_4+0x21/0x30 [ 244.097526] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 244.116580] RSP: 0018:ffff888056e37bd0 EFLAGS: 00010206 [ 244.121973] RAX: 0000000020000003 RBX: ffff88808c6a08c0 RCX: ffffc9000c4b2000 [ 244.129402] RDX: ffffffffffffffff RSI: ffffffff81941133 RDI: 0000000000000286 [ 244.136692] RBP: ffff888056e37ce8 R08: ffff888094308380 R09: 0000000000000000 [ 244.143984] R10: ffff888094308c00 R11: 8d288087ee24acb3 R12: ffff888091fd2e40 [ 244.151277] R13: ffff888080d5f580 R14: 0000000000000000 R15: 0000000040044103 [ 244.158596] ? __might_fault+0x1a3/0x1e0 [ 244.162693] ? snd_pcm_common_ioctl+0x4e2/0x1fd0 [ 244.167491] ? mark_held_locks+0x100/0x100 [ 244.171756] ? proc_fail_nth_write+0x9d/0x1e0 [ 244.176276] ? snd_pcm_status_user+0x190/0x190 [ 244.180994] ? __fget+0x340/0x540 [ 244.184498] ? ___might_sleep+0x163/0x280 [ 244.188689] snd_pcm_ioctl+0x85/0xc0 [ 244.192422] ? snd_pcm_common_ioctl+0x1fd0/0x1fd0 [ 244.197284] do_vfs_ioctl+0xd6e/0x1390 [ 244.201184] ? selinux_file_ioctl+0x46f/0x5e0 [ 244.205693] ? selinux_file_ioctl+0x125/0x5e0 [ 244.210212] ? ioctl_preallocate+0x210/0x210 [ 244.214649] ? selinux_file_mprotect+0x620/0x620 [ 244.219459] ? iterate_fd+0x360/0x360 [ 244.223428] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 244.228988] ? fput+0x128/0x1a0 [ 244.232299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.237865] ? security_file_ioctl+0x93/0xc0 [ 244.242307] ksys_ioctl+0xab/0xd0 [ 244.245800] __x64_sys_ioctl+0x73/0xb0 [ 244.249719] do_syscall_64+0x103/0x610 [ 244.253805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.259022] RIP: 0033:0x458da9 [ 244.262238] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.281241] RSP: 002b:00007fa77f0e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.288955] RAX: ffffffffffffffda RBX: 00007fa77f0e2c90 RCX: 0000000000458da9 01:27:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) [ 244.296240] RDX: 0000000020000000 RSI: 0000000040044103 RDI: 0000000000000003 [ 244.303680] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 244.310988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa77f0e36d4 [ 244.318285] R13: 00000000004bffed R14: 00000000004d2330 R15: 0000000000000005 01:27:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000007) 01:27:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 244.481083] audit: type=1800 audit(1556242074.840:56): pid=9763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16800 res=0 01:27:54 executing program 3 (fault-call:3 fault-nth:2): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:54 executing program 1: syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x200000, 0x0) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[], @ANYBLOB="a25876a57e365885f138ac33a57a", @ANYPTR64, @ANYBLOB="22a8af86cee2096637ae89bf67c7f3c34e6f413ec8d00f1d51aeaae595c26f456a4accc4a9f0e9271dc6ddb9d0d94d5e4f3d1359f742c95a182a22381b1eee07a3a31aebb4"], 0x4) 01:27:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:55 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x15555555555555b5, 0x0, 0x0, 0x8a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="6a617400000000000000000000000000000000000000000000000000000000001b000000050000005405000000000000d4040000d4040000d404000068020000b4060000b4060000b4060000b4060000b4060000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000108000000ac14140a000000000000000000000000fe8000000000000000000000000000bbc1ff0064ff01000000000000000000000000000136fe88b82881d7997c63b7cfbb1228beff0000ffff000000ff000000ffffff0000000000000000ff00000000ffffff0065727370616e3000000000000000000073797a5f74756e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000005c00000410000000000000000000000000000000ec0034010000000000000000000000000000000000000000000000002400686c00000000000000000000000000000000000000000000000000000000030100004800534e415400000000000000000000000000000000000000000000000000010100000000000000000000000000ffff00000000ffffffff0000000000000000000000004e20020052b5c73b335fe593d65202cec010310dfe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000626f6e643000000000000000000000006261746164763000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0034010000000000000000000000000000000000000000000000002400697076366865616465"], 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0x14, 0x11, 0x1, {0xd6, 0x1, 0x1}}, 0x14) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x4]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000200)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:27:55 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:55 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000008) 01:27:55 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x2, &(0x7f0000000000)) 01:27:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:55 executing program 1: getuid() clone(0x10040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x3ffffe) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000140)=0xffffffbf) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = getpgrp(0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)=0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000240)={r0, r0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x6, 'queue0\x00', 0x20}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f00000002c0)=0x3, 0x4) 01:27:55 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 245.177052] audit: type=1800 audit(1556242075.540:57): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16810 res=0 01:27:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:55 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:55 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4112, &(0x7f0000000000)) 01:27:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x8012) [ 245.461789] selinux_nlmsg_perm: 3263 callbacks suppressed [ 245.461806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9829 comm=syz-executor.2 01:27:55 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 245.506090] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9829 comm=syz-executor.2 01:27:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 245.555148] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9829 comm=syz-executor.2 [ 245.654808] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9829 comm=syz-executor.2 [ 245.726163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9829 comm=syz-executor.2 [ 245.752174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9829 comm=syz-executor.2 [ 245.784706] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9829 comm=syz-executor.2 [ 245.797401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9829 comm=syz-executor.2 [ 245.819318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9829 comm=syz-executor.2 [ 245.832140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=9829 comm=syz-executor.2 01:27:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000009) 01:27:56 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4122, &(0x7f0000000000)) 01:27:56 executing program 1: r0 = socket(0x14, 0x5, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) write$binfmt_script(r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='io\x00') r4 = socket$inet6(0xa, 0x80000, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) write$binfmt_elf32(r3, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1ff, 0x1000, 0x800, 0xdd70, 0x9, 0x3, 0x3f, 0x1, 0x380, 0x38, 0x15f, 0xad9b, 0x0, 0x20, 0x1, 0xffffffff00, 0x5, 0x5}, [{0x60000007, 0x8, 0x5, 0x8001, 0xffff, 0x1, 0x3, 0x9}], "b4f1bdb72ce635e39be236f7f5c7ee1aa7d6870996996af0466a67dbf2f7cdae3aa19c0e", [[], [], [], [], [], [], []]}, 0x77c) sendfile(r0, r1, &(0x7f0000000040)=0xe0, 0x80000003) 01:27:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x10, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 245.917824] audit: type=1800 audit(1556242076.280:58): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16798 res=0 01:27:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl(r0, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000100)='selinuxbdevselinuxeth0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x1012, r1, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1) 01:27:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:56 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4140, &(0x7f0000000000)) 01:27:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x10, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x10, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000000a) 01:27:56 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4141, &(0x7f0000000000)) 01:27:56 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) shmget(0x3, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000140)) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000380)=0x5, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) tgkill(r1, r3, 0x1f) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 01:27:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000380)=0x1, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000000100)={0x2, 0x100004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 01:27:57 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4142, &(0x7f0000000000)) 01:27:57 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:27:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:57 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4143, &(0x7f0000000000)) 01:27:57 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 247.154960] audit: type=1800 audit(1556242077.520:59): pid=9955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16813 res=0 01:27:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000000b) 01:27:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:57 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) 01:27:57 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4144, &(0x7f0000000000)) 01:27:57 executing program 1: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8001, 0x501000) write$rfkill(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x1}, 0x8) dup3(r0, r1, 0x0) [ 247.319683] block nbd0: shutting down sockets 01:27:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:57 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4147, &(0x7f0000000000)) 01:27:57 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) 01:27:57 executing program 1: r0 = socket(0x200040000000015, 0x805, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x5) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) [ 247.558713] audit: type=1800 audit(1556242077.920:60): pid=9971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16833 res=0 01:27:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000000c) 01:27:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x46, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006340"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x6) 01:27:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xfdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:58 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) 01:27:58 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4148, &(0x7f0000000000)) 01:27:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xffe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 247.812143] binder: 10002:10003 transaction failed 29189/-22, size 0-0 line 2855 [ 247.852109] binder: 10002:10003 ioctl 40086602 20000000 returned -22 01:27:58 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) [ 247.888546] binder: undelivered TRANSACTION_ERROR: 29189 [ 247.899654] binder: 10002:10012 ioctl 40086602 20000000 returned -22 [ 247.899683] binder: 10002:10003 transaction failed 29189/-22, size 0-0 line 2855 [ 248.001925] binder: undelivered TRANSACTION_ERROR: 29189 01:27:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:58 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4161, &(0x7f0000000000)) 01:27:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:58 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000000)) accept(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) 01:27:58 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) 01:27:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000000d) 01:27:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:58 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4b47, &(0x7f0000000000)) 01:27:58 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) 01:27:58 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4161, &(0x7f0000000000)) 01:27:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:58 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xfffffffffffffffc, 0x0) unshare(0x8000400) pselect6(0x40, &(0x7f0000000100)={0xb}, 0x0, 0x0, 0x0, 0x0) [ 248.752314] audit: type=1800 audit(1556242079.120:61): pid=10068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16813 res=0 01:27:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:27:59 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, 0x0) 01:27:59 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4b49, &(0x7f0000000000)) 01:27:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x52424752, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="d1159394ae8ce79c9e64359ca23572c5482fb08fe53bd5609d567721fcc1d99b75c2ea97c8ae58ce", 0x28) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002700)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x7, 0x0, 0x6, 0x9, @tick=0xea6b, {0x4, 0x6}, {0x7}, @connect={{0xffffffff}, {0xffffffffffffffff, 0xccc}}}], 0x30) write$sndseq(r1, &(0x7f0000000200)=[{0xffffff94, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x30) 01:27:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000000e) 01:27:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x52474252, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:59 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, 0x0) 01:27:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000000d) 01:27:59 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x541b, &(0x7f0000000000)) 01:27:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x56595559, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:27:59 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, 0x0) [ 249.369024] audit: type=1800 audit(1556242079.730:62): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16842 res=0 01:28:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:28:00 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x5421, &(0x7f0000000000)) 01:28:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x59555956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000000f) 01:28:00 executing program 4 (fault-call:3 fault-nth:0): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:00 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40fa8c8aa024d00000000ffffffff25fe48261e21ccf67e1d7b5510029663000000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0xffb3) [ 249.676111] FAULT_INJECTION: forcing a failure. [ 249.676111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 01:28:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xe7ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 249.743382] CPU: 1 PID: 10123 Comm: syz-executor.4 Not tainted 4.19.36 #4 [ 249.750380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.759745] Call Trace: [ 249.762363] dump_stack+0x172/0x1f0 [ 249.766021] should_fail.cold+0xa/0x1b [ 249.769949] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 249.775075] ? ___might_sleep+0x163/0x280 [ 249.779244] ? __might_sleep+0x95/0x190 [ 249.783244] __alloc_pages_nodemask+0x1ee/0x760 [ 249.787935] ? __alloc_pages_slowpath+0x2870/0x2870 01:28:00 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x5450, &(0x7f0000000000)) 01:28:00 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x10000, 0xa0000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000015000)={&(0x7f0000000000)=ANY=[@ANYBLOB="14830000004000"/21], 0x14}}, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000080)) [ 249.792977] ? __lock_acquire+0x6eb/0x48f0 [ 249.797228] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 249.802793] alloc_pages_current+0x107/0x210 [ 249.807226] pte_alloc_one+0x1b/0x1a0 [ 249.811049] __handle_mm_fault+0x3533/0x3f80 [ 249.815485] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 249.820417] ? find_held_lock+0x35/0x130 [ 249.824502] ? handle_mm_fault+0x322/0xb30 [ 249.828782] ? kasan_check_read+0x11/0x20 [ 249.832953] handle_mm_fault+0x43f/0xb30 [ 249.837043] __do_page_fault+0x62a/0xe90 01:28:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 249.841128] ? vmalloc_fault+0x770/0x770 [ 249.845207] ? trace_hardirqs_off_caller+0x65/0x220 [ 249.850249] do_page_fault+0x71/0x581 [ 249.854094] page_fault+0x1e/0x30 [ 249.857563] RIP: 0010:__get_user_4+0x21/0x30 [ 249.861992] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 249.880915] RSP: 0018:ffff88805c047bd0 EFLAGS: 00010206 [ 249.886301] RAX: 0000000020000003 RBX: ffff8880879cd440 RCX: ffffc9000e6c3000 01:28:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_thread_area(&(0x7f0000000580)={0x0, 0x20001800, 0x4000, 0x0, 0xffff, 0x1, 0x0, 0x2, 0x843, 0x3}) r0 = socket(0xa, 0x7, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000600)=0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0xfffffffffffffffe}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000680)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000780)=ANY=[@ANYBLOB="539b9105a910c93f6cb6cdfeab00000068183c640000000000000000000000000000001efa4c85ce0e01d222830cbc8db3cbb2a488f7a4f78abf6eb76da87ec2387e3fdf85f695d754b18c0ad24e1427d04d8f"], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000840)=ANY=[@ANYBLOB="fa11820e5e33801d6c802bbf1c187c8c5743f142da831ac3e0b97a0265562002de00799cc5f2793b22d04137a021367a4739bb9952d49b16d939288247b467be0cf69762b98097fc394249f69429449db4d8a7a27e06b9e75945f55c0c61cbe7889ef8019b749a1fa37f506b88861c042aeab17476fba98a3e20cdee0831177d6d6929a9b84dc5f2b4a310b620dfe9539c32c55065f9638de09fa596525ada2b6ff516941c9fa406badf13b204c8f8d61a6cb074178fe114fd2254aca77c0550"], 0x0, &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="969957b52d30fea3a6945a209691fd3e214cb9dcc33db7762efad2628dcef5d3b6364e601019df973b53d859e769464fe2a2410d59da45"], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000340), &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) ioctl$TCSBRKP(r3, 0x5425, 0x4) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$TCSETX(r3, 0x5433, &(0x7f00000002c0)={0x4, 0xfffffffffffffff8, [0x5, 0x9, 0xf2, 0x3e8, 0x9b], 0xff}) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1, 0x0) ioctl$int_out(r3, 0x2, &(0x7f0000000700)) link(&(0x7f0000000740)='./file0\x00', &(0x7f00000006c0)='./file0\x00') utimes(&(0x7f0000000440)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) [ 249.893582] RDX: ffffffffffffffff RSI: ffffffff81941133 RDI: 0000000000000286 [ 249.900888] RBP: ffff88805c047ce8 R08: ffff88805e34a600 R09: 0000000000000000 [ 249.908171] R10: ffff88805e34ae80 R11: 8d288087ee24acb3 R12: ffff8880964db4c0 [ 249.915454] R13: ffff88808a86bc80 R14: 0000000000000000 R15: 0000000040044103 [ 249.922757] ? __might_fault+0x1a3/0x1e0 [ 249.926842] ? snd_pcm_common_ioctl+0x4e2/0x1fd0 [ 249.931617] ? mark_held_locks+0x100/0x100 [ 249.935861] ? proc_fail_nth_write+0x9d/0x1e0 01:28:00 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x5451, &(0x7f0000000000)) [ 249.940379] ? snd_pcm_status_user+0x190/0x190 [ 249.944983] ? __fget+0x340/0x540 [ 249.948457] ? ___might_sleep+0x163/0x280 [ 249.952631] snd_pcm_ioctl+0x85/0xc0 [ 249.956355] ? snd_pcm_common_ioctl+0x1fd0/0x1fd0 [ 249.961220] do_vfs_ioctl+0xd6e/0x1390 [ 249.965129] ? selinux_file_ioctl+0x46f/0x5e0 [ 249.969639] ? selinux_file_ioctl+0x125/0x5e0 [ 249.974158] ? ioctl_preallocate+0x210/0x210 [ 249.978587] ? selinux_file_mprotect+0x620/0x620 [ 249.983379] ? iterate_fd+0x360/0x360 [ 249.987198] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 249.992751] ? fput+0x128/0x1a0 [ 249.992776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.001708] ? security_file_ioctl+0x93/0xc0 [ 250.001730] ksys_ioctl+0xab/0xd0 [ 250.001751] __x64_sys_ioctl+0x73/0xb0 [ 250.001769] do_syscall_64+0x103/0x610 [ 250.001792] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.009652] RIP: 0033:0x458da9 [ 250.026192] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.045146] RSP: 002b:00007f512729dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.052876] RAX: ffffffffffffffda RBX: 00007f512729dc90 RCX: 0000000000458da9 [ 250.060157] RDX: 0000000020000000 RSI: 0000000040044103 RDI: 0000000000000003 [ 250.067547] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 250.067562] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f512729e6d4 [ 250.082231] R13: 00000000004bffed R14: 00000000004d2330 R15: 0000000000000005 [ 250.337960] audit: type=1800 audit(1556242080.700:63): pid=10125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16841 res=0 01:28:00 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x5452, &(0x7f0000000000)) 01:28:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xfecaedfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:00 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x4040, 0x0) r0 = creat(&(0x7f0000002500)='./file0/bus\x00', 0xcebb6064bb566d03) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1}) pwrite64(r0, &(0x7f0000000180)="e4", 0x1, 0x0) truncate(&(0x7f00000001c0)='./file0/bus\x00', 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x10001, 0x20, 0x3ff, 0x75, 0x0, "2ddcc816a6dea63ed6c1729aa99298de3ca072", 0x4}) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) 01:28:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000010) 01:28:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:28:00 executing program 4 (fault-call:3 fault-nth:1): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 250.463287] FAULT_INJECTION: forcing a failure. [ 250.463287] name failslab, interval 1, probability 0, space 0, times 0 [ 250.499246] selinux_nlmsg_perm: 4543 callbacks suppressed 01:28:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xfeedcafe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 250.499262] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10174 comm=syz-executor.2 [ 250.546681] CPU: 0 PID: 10171 Comm: syz-executor.4 Not tainted 4.19.36 #4 [ 250.553674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.563061] Call Trace: [ 250.565674] dump_stack+0x172/0x1f0 [ 250.569328] should_fail.cold+0xa/0x1b [ 250.573240] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 250.578363] ? lock_downgrade+0x810/0x810 [ 250.582544] ? ___might_sleep+0x163/0x280 [ 250.586719] __should_failslab+0x121/0x190 [ 250.590972] should_failslab+0x9/0x14 [ 250.594784] kmem_cache_alloc+0x2b1/0x700 [ 250.594804] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 250.594827] ptlock_alloc+0x20/0x70 [ 250.594848] pte_alloc_one+0x6d/0x1a0 [ 250.604594] __handle_mm_fault+0x3533/0x3f80 [ 250.604614] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 250.604631] ? find_held_lock+0x35/0x130 [ 250.604646] ? handle_mm_fault+0x322/0xb30 [ 250.604674] ? kasan_check_read+0x11/0x20 [ 250.604692] handle_mm_fault+0x43f/0xb30 [ 250.604713] __do_page_fault+0x62a/0xe90 [ 250.604737] ? vmalloc_fault+0x770/0x770 [ 250.604756] ? trace_hardirqs_off_caller+0x65/0x220 [ 250.604778] do_page_fault+0x71/0x581 [ 250.604802] page_fault+0x1e/0x30 [ 250.631487] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10174 comm=syz-executor.2 [ 250.634577] RIP: 0010:__get_user_4+0x21/0x30 [ 250.634594] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 250.634604] RSP: 0018:ffff88805d1f7bd0 EFLAGS: 00010206 [ 250.634618] RAX: 0000000020000003 RBX: ffff8880a7ee7dc0 RCX: ffffc9000e6c3000 [ 250.634627] RDX: ffffffffffffffff RSI: ffffffff81941133 RDI: 0000000000000286 [ 250.634636] RBP: ffff88805d1f7ce8 R08: ffff88805c470380 R09: 0000000000000000 [ 250.634651] R10: ffff88805c470c00 R11: 8d288087ee24acb3 R12: ffff888093948b80 [ 250.641457] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10174 comm=syz-executor.2 01:28:00 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x5460, &(0x7f0000000000)) 01:28:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x2c) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x100, 0x0) write$UHID_INPUT(r0, &(0x7f0000000100)={0x8, "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", 0x1000}, 0x1006) clock_nanosleep(0x6, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) [ 250.642786] R13: ffff8880820405c0 R14: 0000000000000000 R15: 0000000040044103 [ 250.642815] ? __might_fault+0x1a3/0x1e0 [ 250.642844] ? snd_pcm_common_ioctl+0x4e2/0x1fd0 [ 250.661564] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10174 comm=syz-executor.2 [ 250.671230] ? mark_held_locks+0x100/0x100 [ 250.671247] ? proc_fail_nth_write+0x9d/0x1e0 [ 250.671269] ? snd_pcm_status_user+0x190/0x190 [ 250.671291] ? __fget+0x340/0x540 [ 250.671311] ? ___might_sleep+0x163/0x280 01:28:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 250.724414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10174 comm=syz-executor.2 [ 250.729103] snd_pcm_ioctl+0x85/0xc0 [ 250.729121] ? snd_pcm_common_ioctl+0x1fd0/0x1fd0 [ 250.729144] do_vfs_ioctl+0xd6e/0x1390 [ 250.773637] ? selinux_file_ioctl+0x46f/0x5e0 [ 250.773653] ? selinux_file_ioctl+0x125/0x5e0 [ 250.773675] ? ioctl_preallocate+0x210/0x210 [ 250.773688] ? selinux_file_mprotect+0x620/0x620 [ 250.773712] ? iterate_fd+0x360/0x360 [ 250.773731] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 250.773743] ? fput+0x128/0x1a0 01:28:01 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044102, &(0x7f0000000000)) [ 250.773763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.773780] ? security_file_ioctl+0x93/0xc0 [ 250.773800] ksys_ioctl+0xab/0xd0 [ 250.782883] __x64_sys_ioctl+0x73/0xb0 [ 250.782903] do_syscall_64+0x103/0x610 [ 250.782925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.782937] RIP: 0033:0x458da9 [ 250.782951] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.782959] RSP: 002b:00007f512729dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.782975] RAX: ffffffffffffffda RBX: 00007f512729dc90 RCX: 0000000000458da9 [ 250.782984] RDX: 0000000020000000 RSI: 0000000040044103 RDI: 0000000000000003 [ 250.782993] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 250.783002] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f512729e6d4 [ 250.783011] R13: 00000000004bffed R14: 00000000004d2330 R15: 0000000000000005 01:28:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xffffffe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 250.797879] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10174 comm=syz-executor.2 01:28:01 executing program 4 (fault-call:3 fault-nth:2): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:01 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000000)) [ 251.017502] audit: type=1400 audit(1556242081.380:64): avc: denied { map_create } for pid=10198 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 251.041883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10174 comm=syz-executor.2 01:28:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) [ 251.119854] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10174 comm=syz-executor.2 [ 251.278652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10174 comm=syz-executor.2 [ 251.301817] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10174 comm=syz-executor.2 01:28:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000011) 01:28:01 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x800000000000, 0x0, 0x0, 0x10000, 0x0) r1 = getpid() truncate(&(0x7f0000000040)='./file0\x00', 0x80000000) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x1) r2 = dup(r0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000080)=0xffffffffffff0001) 01:28:01 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4004410f, &(0x7f0000000000)) 01:28:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x1f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:01 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044145, &(0x7f0000000000)) 01:28:02 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4000000004003, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:02 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044160, &(0x7f0000000000)) 01:28:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x5247425200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 251.747023] hfs: can't find a HFS filesystem on dev loop1 01:28:02 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 251.942171] audit: type=1800 audit(1556242082.310:65): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16866 res=0 01:28:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:28:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x5955595600000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:02 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x800000000000, 0x0, 0x0, 0x10000, 0x0) r1 = getpid() truncate(&(0x7f0000000040)='./file0\x00', 0x80000000) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x1) r2 = dup(r0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000080)=0xffffffffffff0001) 01:28:02 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40049409, &(0x7f0000000000)) 01:28:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000012) 01:28:02 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$nbd(r0, &(0x7f0000000100)={0x67446698, 0x0, 0x2, 0x1, 0x3, "18d84e982feb801fcfcf4124b14dd4918ca67a5aa67678906b296a5f7a403c9ebb9de5a77ff9a724494f3d6a5e25a9d9726ff49d842eaf7378812eab42557623ba724db1690499e311b96523b5cc5f55e28af05c63b51c497bec07c34f9bf9e82bb894fe6361f739a8732d53297bc4a86b204db9c3041ca83363df75ba82e708b553b825712a40d684b19b"}, 0x9b) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r2, 0x0) ioctl(r1, 0x40044103, &(0x7f0000000000)) 01:28:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xe7ffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:02 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:02 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x200000000001, &(0x7f0000000340)="4560039f15e04fe57fad2e55520869ec6f0d72d5ec7e567994f57c75ff373347d3ad5f02c86065ecc60597d2460e90c9a00b45167a03f18f6540436c0c8d44cba80bc9d5e8aa5703d27f9a0669dbbe7d0c2630bc5afb0025658468a5d1fd8a25ada262bcdb9d2115eaf7c037d5b45af429bfdb49e269f01ea50ee5c57afdc8baa7e97399089b2b0000000000000000000000857084a2f7ea5c9a815708bcc75be7ae22aa65a00b87d8ad9a0ecbd853f26f0a048c49b6d0fd88fac2d4f26f190452a0b959c40294ac30ecb3d4461229f28026413036ff5439babbd7384c8a2103d2b5e25253bb81d85cff561ef87bf6950c0e0b56c7696a4a2e1163c7bd3704ff994b4a0f2c2fe05b83ec36f19d669fdbc29bcf8b1b3affa8807fd40edbe4c969f258e24fcd9551393d2b322319947d791c9a367fc7a8d4bc79f9f68bb690334a67d634ac") [ 252.435262] hfs: can't find a HFS filesystem on dev loop1 01:28:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:02 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000000000)) 01:28:02 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) dup3(r0, r0, 0x80000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 252.783683] audit: type=1800 audit(1556242083.140:66): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16862 res=0 01:28:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:28:03 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xfdfdffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:03 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x1) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:03 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40086602, &(0x7f0000000000)) 01:28:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000013) 01:28:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xfecaedfe00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:03 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:03 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:03 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40087602, &(0x7f0000000000)) 01:28:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xfffffffffffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:03 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1000000000002, 0x0) ustat(0xffff, &(0x7f0000000040)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x100000004, &(0x7f0000000000)) [ 253.382460] audit: type=1800 audit(1556242083.750:67): pid=10335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16871 res=0 01:28:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:28:03 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40184150, &(0x7f0000000000)) 01:28:03 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000014) 01:28:03 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) fcntl$setsig(r1, 0xa, 0x16) 01:28:04 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000800014002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:04 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40184152, &(0x7f0000000000)) 01:28:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:04 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:04 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 254.016043] audit: type=1800 audit(1556242084.380:68): pid=10381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16876 res=0 01:28:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:28:04 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x4020940d, &(0x7f0000000000)) 01:28:04 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000015) 01:28:04 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:04 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:04 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x80044100, &(0x7f0000000000)) 01:28:04 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x600002) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0x5}, &(0x7f0000001280)=0x8) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000001200)={{0x3f, @loopback, 0x4e23, 0x4, 'none\x00', 0x3e, 0x8, 0x57}, {@rand_addr=0x7, 0x4e21, 0x2, 0x1ad, 0xe6, 0x1}}, 0x44) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001180)={r3, 0x6}, &(0x7f00000011c0)=0x8) 01:28:04 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000040)=0x3) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 01:28:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xfdfd, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:28:05 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:05 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x80084121, &(0x7f0000000000)) 01:28:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xffe7, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:05 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000a29000/0x4000)=nil, 0x4000, 0x200000c, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000016) 01:28:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:05 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:05 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x80086601, &(0x7f0000000000)) 01:28:05 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000100)="ebd36930136ce5227052116b6417a2d73a72afe066f6bdc6ce25037302469092f85acb5a188b35430e2e01a964e828be5170c493bdddf1df1b1f169f1e1801994c140d19db5e8ee00d238dbf0a60619136400efb078cccf155bc691e1b251303a6a2e8711dd7f1dc3ac29b82e440f5ae7fa8e56b69d34b9dcfae18e3bce1d03f2ed7b8") 01:28:05 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40084146, &(0x7f0000000000)) 01:28:05 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x72040) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 255.387606] audit: type=1800 audit(1556242085.750:69): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16873 res=0 01:28:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:28:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:05 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x80087601, &(0x7f0000000000)) 01:28:05 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40084146, &(0x7f0000000000)) 01:28:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000017) 01:28:05 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) fchmod(r1, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000180)={{0x8000, 0xc3c}, 'port0\x00', 0x0, 0x40, 0x8001, 0x3ff, 0x9, 0xfffffffffffffffb, 0x1, 0x0, 0x3, 0x6}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000340)=0x69e, &(0x7f0000000380)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x7}, &(0x7f0000000400)=0x8) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000440)={0x98, ""/152}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5332, 0xffffffff80000000, 0x4, 0x2, 0x8, 0x7, 0x20, 0x1, r4}, &(0x7f0000000240)=0x57) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000280)={r5, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x29, 0xb, 0x4, 0x1000000, {r2, r3/1000+30000}, {0x3, 0x0, 0x3, 0xa07, 0x8, 0xe78, "eb95e682"}, 0x2c, 0x3, @userptr=0x9e28, 0x4}) [ 255.547104] selinux_nlmsg_perm: 3110 callbacks suppressed [ 255.547120] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10525 comm=syz-executor.2 01:28:05 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40084146, &(0x7f0000000000)) 01:28:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x80184132, &(0x7f0000000000)) [ 255.586700] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10525 comm=syz-executor.2 01:28:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:06 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x8, 0x13, r0, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) [ 255.688505] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10525 comm=syz-executor.2 01:28:06 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x52424752, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 255.794250] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10525 comm=syz-executor.2 [ 255.814649] audit: type=1400 audit(1556242086.180:70): avc: denied { map } for pid=10548 comm="syz-executor.4" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=16004 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 [ 255.881474] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10525 comm=syz-executor.2 [ 255.950733] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10525 comm=syz-executor.2 [ 256.041774] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10525 comm=syz-executor.2 [ 256.063551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10525 comm=syz-executor.2 [ 256.076332] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10525 comm=syz-executor.2 [ 256.093583] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10525 comm=syz-executor.2 01:28:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000040), 0x4) 01:28:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x80184151, &(0x7f0000000000)) 01:28:06 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v2={0x2000000, [{0x3, 0x5}, {0x5, 0x67f}]}, 0x14, 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="1a3ad91c295c9a9b15e3a4f62cb20cfd099ef93ac49e1fd5c62afca5d334613b225b323bd3a7906bcea8d75aedb70b9a59663104d6d05b0ac6dc903008977bdfad4cade54b80dd919b814f4871ab32be75015fb12ea6a0251f0f520b93d183a9e4848cbadc5437cb1b37af132c59ad66bd3126ce68122f", 0x77}, {&(0x7f0000000100)="4486d8412c480606d620d7db98bc8e892319afbf7e34a066cf6bd2d20da01ead83dced25bc", 0x25}, {&(0x7f0000000140)="49db67bcb05b4e56d6ac38505c59b791b0d11eddfd9db8e54d545c57ecab05a990b096356512add267c8bc449cd1b24fd00acd45745b011b42202fa75b7f03d4ce09fa89a01d0937f12143ced8cd9fb5b33f5415b9d5ca57", 0x58}, {&(0x7f00000001c0)="88d91043286599e1f4d3556cac2f0d8b5092637859bf8406c1f2472b83a400dfa8f22fbe53092044429c74c719326b3348a23009d193da2f9f8eb78dba04f5dca4b0daeffb0ed3c16342639398838cc0751b", 0x52}], 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:06 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000018) 01:28:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x52474252, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:06 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000100)={0x2, 0xa, &(0x7f0000000040)="7e08a791a0278538d44907fd3ef5704e3dacfb4a45ebc7f84714318d835570657f4aefdc8398fa2babdd84cbf335897642cc1fe43c5063e996abec5a336c90eaa567", {0x1968, 0x9, 0x4c47504a, 0x3, 0xb51, 0x1000, 0x0, 0x800}}) ioctl$TIOCSIG(r0, 0x40045436, 0x22) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:06 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x80184153, &(0x7f0000000000)) 01:28:06 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:06 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x80984120, &(0x7f0000000000)) 01:28:06 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0xffffff8d]}, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040), 0x4) 01:28:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x56595559, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:07 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x81204101, &(0x7f0000000000)) 01:28:07 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) [ 256.881662] audit: type=1800 audit(1556242087.240:71): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16892 res=0 01:28:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000019) 01:28:07 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000100)="76125a2fec35df395117d2c920b8c323197181ee8117d4d8a1565dd2948a2fe8baaa59e8b74ccb2387c2abc7460c670a7dffb3c4486aa38e552ee71e86e322093f31017a500d32ab77d17dc26edc574cf06ad0194381c1a092fe87ee401f4c2916bd87c527ed2b1e5b04d9709f643fad5121cafba36a2c701454d928fd1856d20a2db291c851f5b2a36fd5c3676c0def0de448f5766d86b3a72236f737c99add0f59b5a6f662497738be077602a7d83e9530ff664a51de0e9fc677db29d2fb2e64ec87ef45a81c61d9d5afb5bed121e9cd7b2afb63") 01:28:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x59555956, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:07 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:07 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000000)) 01:28:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040), 0x4) 01:28:07 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') accept4$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80800) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x10a, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r2, 0x0) munlockall() ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:07 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc0045878, &(0x7f0000000000)) 01:28:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xe7ffffff, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:07 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:07 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x20) 01:28:07 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000001a) 01:28:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 257.447481] audit: type=1800 audit(1556242087.810:72): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16897 res=0 01:28:07 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc0189436, &(0x7f0000000000)) 01:28:07 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:07 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040), 0x4) 01:28:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xfecaedfe, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:08 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc020660b, &(0x7f0000000000)) 01:28:08 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3ff, 0x8000) ioctl(r0, 0x40044103, &(0x7f0000000000)) getpeername$tipc(r0, &(0x7f0000000080)=@id, &(0x7f0000000100)=0x10) 01:28:08 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) [ 257.907408] audit: type=1800 audit(1556242088.270:73): pid=10683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16895 res=0 01:28:08 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x43fd, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/151) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 01:28:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000001b) 01:28:08 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xfeedcafe, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:08 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc0884113, &(0x7f0000000000)) 01:28:08 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:08 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x43ffc, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x3, "3ebb75a2f2b8ef30"}) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x7, 0x10280) fgetxattr(r1, &(0x7f0000000180)=@random={'osx.', 'md5sum\x00'}, &(0x7f0000000280)=""/4096, 0x1000) r2 = accept$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl(r3, 0x40044103, &(0x7f0000000000)) [ 258.493473] audit: type=1800 audit(1556242088.860:74): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16901 res=0 01:28:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, 0x0, 0x0) 01:28:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:08 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000000)) 01:28:08 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x10, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:08 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80900, 0x0) ioctl$TIOCCBRK(r0, 0x5428) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000002c0)={0x1, 0xfffffffffffffff9}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200525bd7000fddbdf25010000000000000008410000004c0018000200000000000000000000000000000000000000000000000000fe3800"/98], 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) ioctl(r1, 0x40044103, &(0x7f0000000000)) socketpair(0xa, 0x80003, 0x8000, &(0x7f0000000040)) 01:28:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000001c) 01:28:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xffffffe7, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:09 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x10, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:09 executing program 4: prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/109) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2a3, @mcast1, 0x6c}}, 0xf8000, 0x7}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={r1, @in={{0x2, 0x4e21, @local}}}, 0x84) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000000, 0x13, r2, 0x4) ioctl(r0, 0x40044103, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000f0000000000"], 0x8) 01:28:09 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc0984124, &(0x7f0000000000)) 01:28:09 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x10, r1, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 259.133615] audit: type=1800 audit(1556242089.500:75): pid=10755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16910 res=0 01:28:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, 0x0, 0x0) 01:28:09 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x101000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x56b3aec2, 0x4, 0x9, {0x77359400}, 0x9, 0x3}) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:09 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000000)) 01:28:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:09 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000001d) 01:28:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x1f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:09 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:09 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc1004111, &(0x7f0000000000)) 01:28:09 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x7f, 0x10042) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/18) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x104012, r2, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000100)=""/192) ioctl(r1, 0x40044103, &(0x7f0000000000)) 01:28:09 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 01:28:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x5247425200000000, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, 0x0, 0x0) 01:28:10 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 01:28:10 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000100)={0x7, 0x6d, 0x1}, 0x7) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000040)="2f60ef0ab9ee17cd3e89d5c58c8353ee1440ef0399ecaaa387f50389701b2354bb0a996998cfba83c847747793907ae666fa982c0dacc95051a571cc837c13a5e262010014d69cf4a1e0c5fa78f049be01359400ec0b837e6e619ef52d863199def3a2bb379eafa4") ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x0, 0x0, 0x10002, 0x6}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000180)={r2, 0x401}) 01:28:10 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40084146, &(0x7f0000000000)) 01:28:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x5955595600000000, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000001e) 01:28:10 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x10400, 0x0) mmap(&(0x7f0000650000/0x10000)=nil, 0x10000, 0x3000080, 0x12, r1, 0x14) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000000)={0x7, &(0x7f0000002180)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) 01:28:10 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40084146, &(0x7f0000000000)) 01:28:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xe7ffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:10 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0xc2604111, &(0x7f0000000000)) 01:28:10 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f00001c3000/0x1000)=nil, 0x1000, 0x200000b, 0x17, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f000019e000/0x3000)=nil, 0x3000}) 01:28:10 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40084146, &(0x7f0000000000)) [ 260.319035] audit: type=1800 audit(1556242090.680:76): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16924 res=0 01:28:10 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) 01:28:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:10 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x4}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000100)="2fce4744f81be2ea117ce115564b68acc52fe725fadb4d333427ffcb5ebf24766d4ee1f7236c8a8b4799b462e1fa55b6422149b81aca6160d6b7309eb1ddf7d7968043c6aa8b11ff3be2cf6221d7f18803aa785723109e122a61628ac2362e9b9c5cc3ad314ebd767b6d29f9e74b80863c4346b6971ae9ead6e105963014d63b79a6820fb809258fea23aa1cdc5084e2f66406d12ae244fce18432883cc506fa8f18a5ca8eb72636c4", 0xa9}, {&(0x7f00000001c0)="03248c3cbff026e4f16727dec32be2a6a2ca1dedd1321c68eeca7881603593f5a11d1acf81f50ab78974ffd7b2667121bacbadb913911deaf3f24440b622367a41d80f171a99aac177f4dc5a3334b60530931c230dc5b2e3077eb759c92cb6e0ada887064ab5ac7e4ae846de5610d623", 0x70}, {&(0x7f0000000240)="b48f5fa107d07a36ca5679dc0c9bdbbdc5e111797a6c9acea9cfb5676a15e6254dc9b6edacac083703569f94e3ad6cb15ad9d6990225fa4a3079d96d29549be8b2bcce4b4f98e2513c2231e6e441253773a0315520f764c25f00ce4c4fe8b08a68ce16159b2051885a734b217f71f71361a2a19338b463674dd475b4b71eee5547e6ff24429b8e28001c3774707021e96edb6685b6b71b34c064540688d1fa4abd037483b55cd724aa662a944b04b7e089e80f8f67ac0f24671508470f307c6256e16724598d234b938badae3d1d", 0xce}, {&(0x7f0000000340)="ef0795745bd97e4184a195526e99ef4af2dd69ab0866632030a005fe98e82c1f3db36d6fefe8fb70c1c514c2e8ec93ea3fd029da2ceaeb296eaa02ea87d7e1972dc5f840e28433be44c1a8fe2c437de1a81924914b5eab3a5946216a3fbf334d44693526345279ed01aebbca58fb15e128211b921e07e55bad5beec375bd48aee1a4f3462be616856422fc45a4669ba5c28128788d81ef0af8b4302d4a3d67cd8918cf2f6681b25f11a3e9d35d68cfaa", 0xb0}, {&(0x7f0000000400)="3dc4c662a330a3d7d68f107658f25e57475239a153627ec137a79ebd86cb9f13b6047492b02d8e4deed4528186014a2b1ad045c1fa8c6cc1c55fdaf25a306a1e4870d29f0e8abf252360b45e59bbe7384e3cd1202d17be36ea0224527cc995d1242c820f42673f11", 0x68}, {&(0x7f0000000480)="d5ae3a19c25b133044264b1246a7c9b6d5fe515a1c5c3a686a5ca554bab5e002bc15e04988b24f2bc19d8fdfcbbcb53491f5294ab0eb3227c5e9e07b3bead73c5a977b52da9b8528b9df6e104b51fd5be24012f74d3ca4ebac4319b88e6872e0015f97d59f657a64e63b6b847e12ed4372d70e82acc4c062b06dff412e9821612b7db73bfb95125c2bbfbf601f4613708b308377c57b379e8408fea687973f0fc3a8817be88d380ff7dc7c9dcc2c7277c233273daeef2aa376c4844863035cdf125db720bf0b1ac7d3927e79de359f5eba509d16e64b6c589f3446aeeb32bd733c94fcc3a3d3acd71f73833f774412b6fc4558df2ad3dd64d23c", 0xfa}, {&(0x7f0000000080)="a70cec932ee34e4c8840614274976ec7e394c1b8d823bdce1e3238daaa50e05d4b5ea940bd0ee1c1c86b5ed07f65ed", 0x2f}, {&(0x7f0000000580)="43599e7c04a216d59abe4d4b3e1de815a2e580fcbebf0bc4b168498a76ceaa83c7864c75e4fee301e948e97f730fe43a2a7b", 0x32}], 0x8, 0x0, 0x0, 0x10}, 0x80) 01:28:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000021) 01:28:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80000000001d) 01:28:10 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0) ioctl(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r3 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x0, 0x2) write$ppp(r3, &(0x7f0000000440)="ae3d616a5e57b38d1a2292f7f3c808bad3ffcccaf909ec471b970d66bb08001192d2000bee93752265d6d8bd63a19b53efb2f311afa05f24332721abcf6456c30365e5066a6cfc51eaf7f3fa792dd2de7e2d0cb050da92eb37f010b4b2ff9348a8a75841e1c8cf7d650d5e692cd20370d3d230219b9e4391d816d2fd4db4559846b0e2fc93d3f58faadc5bb8367c0881c116a0e38f00362c6834661859eff995c0917660bb61cec33b550b86553aaef96e0d3ea3a25ca899d315a8cd0fbef1867293a6e696efb6fb3f2de3d8baa5767f76724f3b877a4cb43d738a5493be9a283f03e3aab88305", 0xe7) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000240)={r3, r0, 0x1100}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000580)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xa3, @bcast, @bpq0='bpq0\x00', 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000140)=0xfffffffffffffe92) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net\a\x00ev_kcast\x00') setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000380)={@x25={0x9, @remote={[], 0x3}}, {&(0x7f0000000100)=""/9, 0x9}, &(0x7f0000000340), 0x4}, 0xa0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth1_to_bond\x00', 0x2}, 0x18) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000002c0)={0x4, 0x1ff, 0x88dc39c, 0x4}, 0x10) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000600)=0x2) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000540)={{0x9, 0x1000, 0xa60a, 0x24, 0x4, 0x6}, 0x6}) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000280)={0xff, 0x9, 0x3, 0x200}) 01:28:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xfdfdffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}}) [ 260.585944] selinux_nlmsg_perm: 4056 callbacks suppressed [ 260.585960] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10890 comm=syz-executor.2 [ 260.623842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10895 comm=syz-executor.5 01:28:11 executing program 3: r0 = inotify_init1(0x80000) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x5) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x10082, 0x0) mmap(&(0x7f0000440000/0x2000)=nil, 0x2000, 0x2000004, 0x13, r2, 0x0) write$smack_current(r1, &(0x7f0000000080)='!\x00', 0x2) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x8000000) ioctl(r1, 0x40044103, &(0x7f0000000000)) 01:28:11 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) [ 260.681652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10890 comm=syz-executor.2 [ 260.731320] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10890 comm=syz-executor.2 [ 260.762319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10895 comm=syz-executor.5 01:28:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xfecaedfe00000000, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:11 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0x800, 0x40, 0x1}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400034}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0xa00, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x40800) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200000, 0x0) ioctl(r1, 0x40044103, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0x6f, 0xf7, &(0x7f0000000180)="5b2103f3f88b6b0e418230c2f8b9778f901f5b6005d114c05db708cb43e9963249acd92fe23c96a251f9609e4a040bdd13edefdde830e3a47945236263e68c79a215eb04d1db44a5941b0733930a8f6e6dcb989f5c70dd30368ae124ca7bc374e85ff0f19d40c599198d14ee381be6", &(0x7f0000000200)=""/247, 0x95}, 0x28) [ 260.794053] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10890 comm=syz-executor.2 01:28:11 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x6, 0x6, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 260.832673] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10895 comm=syz-executor.5 01:28:11 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)) [ 260.872479] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10890 comm=syz-executor.2 01:28:11 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, 0x0) [ 260.926948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10895 comm=syz-executor.5 [ 260.950219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=10890 comm=syz-executor.2 01:28:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000022) [ 261.236582] audit: type=1800 audit(1556242091.600:77): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16915 res=0 01:28:11 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0xfd, 0x0, [0xfffffffffffffffe, 0x234e, 0x3]}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000100)=""/81, 0x204000, 0x1800, 0x9e}, 0x18) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x1, 0x10000) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:11 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2000, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r2, 0x0) ioctl(r1, 0x40044103, &(0x7f0000000000)) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000080)) 01:28:11 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040801) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) getuid() openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0xfffffffffffffffe) r2 = accept(r1, 0x0, 0x0) write(r2, &(0x7f00000000c0)='\a', 0x1) recvmmsg(r0, &(0x7f0000001000), 0x3fffffffffffefe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x6, 0x4) 01:28:11 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, 0x0) 01:28:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, 0x3}}) 01:28:11 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40084146, 0x0) 01:28:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}}) 01:28:11 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:11 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x40003, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x200, 0x2) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000140)="8ab973fff811031d35b12a243a7bc304eb4df1f6b50edd01716a9216983536bd267276536fad9d04965232c9bae887d0c7e7f442e579f4a53f4622e4c094b489c26901876b7b59d629b67d4e865c92342684df443c86ad281b1519ae6995763c10db75aaa9b9ca912d66f5ba98fe37afbb2de87dea5227b65860c7c0585f369f9964f1397791ebf7ece387897e16bd362c52a0522084423c7d1d2820b65827297e8d031f18d0648fe8e119") ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:12 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) getsockname$tipc(r0, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044503, &(0x7f0000000040)="e8d46e68b2096e2a8e236704075d13f6882d01135d3141958a39b51d0259916986358dcb2c77786fd4cd3ebf9fc2f6aa97ad1a71bed3a6ca476f67f923e85e00"/73) 01:28:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x3}}) 01:28:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000023) 01:28:12 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) prctl$PR_GET_FP_MODE(0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @null, @bpq0='bpq0\x00', 0x200, 'syz1\x00', @default, 0x665, 0x6, [@null, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null]}) 01:28:12 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040801) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) getuid() openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0xfffffffffffffffe) r2 = accept(r1, 0x0, 0x0) write(r2, &(0x7f00000000c0)='\a', 0x1) recvmmsg(r0, &(0x7f0000001000), 0x3fffffffffffefe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x6, 0x4) 01:28:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000e0a43ba5d806055b6fdd80b40000000140001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 01:28:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x3}}) 01:28:12 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00009c3000/0x2000)=nil, 0x2000}, 0x1}) 01:28:12 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000040)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xa, 0x4) 01:28:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0xe7ff, 0x0, 0x0, 0x0, 0x3}}) 01:28:12 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) r2 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)='/dev/nullb0\x00', 0xfffffffffffffffe) r3 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="3fb8e3954bf5a5d1e3b014aad80a9752c126ba40733df8a9dcd6c7639a402074c46f914d958946cf39edb0e7a5af21c7388c73d87539a6a131c539a4d46904da38326b8f79517b05db2e87fb37e099a3aee0f7634da286b3ba68b60bc6dcb615429d77e77b76c94f8551afadd37ad94873ba0a29a0ee16e2b7818fdd729306614c87009e299b12fd2e4d04c268091dee07c55437c3d48a2cbc68c446f3618441513765c4aa9e202ffae3f99d8f", 0xad, 0xfffffffffffffff8) keyctl$search(0xa, r2, &(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, r3) 01:28:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x7}) 01:28:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0xfdfd, 0x0, 0x0, 0x0, 0x3}}) 01:28:12 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000100)="3fc61ffcc0c3aa59b6a71e5768783f1415dd1e82aca22556783cb7971d77a5366cf435087b512d2519e242e7fed2babd77ea8cd6e549723651edf8d03e4498bc671d61fd2f3aea1328385d7cdcd05b70f54dab690d17de2269693f3ed071f9c4fb0056ced1675927b62e76d9de6fc9405a164a4bff3b") fcntl$notify(r0, 0x402, 0x10) 01:28:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000024) 01:28:13 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 01:28:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) 01:28:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x7}) 01:28:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0xffe7, 0x0, 0x0, 0x0, 0x3}}) 01:28:13 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) mq_open(&(0x7f0000000080)='/dev/nullb0\x00', 0x40, 0x100, &(0x7f0000000100)={0x7f, 0xfff, 0x6, 0x3, 0x0, 0x1, 0x5, 0x3b18}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:13 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cgroup.stat\x00', 0x0, 0x0) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, {0x8, 0x8, 0x1ff, 0xd07, 0x6, 0x7fff}}, 0x8) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x2d, 'io'}]}, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000025) [ 263.000592] audit: type=1800 audit(1556242093.360:78): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16926 res=0 01:28:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x3}}) 01:28:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x7}) 01:28:13 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000080)=0x60) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x0, 0xfffffffffffffff8, 0x2a4}) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:13 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044104, &(0x7f0000000040)) 01:28:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) 01:28:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x3}}) 01:28:13 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @rand_addr=0x3}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xffffffff7fffffff, 0x8}) 01:28:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x7}) 01:28:13 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x3}}) 01:28:14 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, r0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000014c0)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f00000015c0)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000200)='reiserfs\x00', &(0x7f0000000240)='./file0\x00', 0x81, 0x4, &(0x7f0000001440)=[{&(0x7f0000000280)="3bfb884693e52573493d0f74697ccc28e37cbe94764269d4c43f3f49970916d66fbecfc53d3c1a5b8509a83459d40d98e235c74ef8c8bfcaec8e158fef694f666a587a3156fce654d211aa278d65d90acd5446702bb0cf31b84ac0b78c00773391e07d9392f96480b166d2484de5f14987eb1b576196a089f4b4d6ae50d24dfd5832c596c8e4e8aecff5ba3015c4c880b881851a04634c7366f03118febf6590d950b34987a76d2ba444fa7657fadef709e730d38d56240b525227ed1efb6acd01b5f237a032e65fe4fc268def", 0xcd, 0x4}, {&(0x7f0000000380)="90b1f9c153fdaf154746274d30a8454e3b75180a6e7480bd800dfafda5be8d6f586626648bb52f62fa61de82a162d5834b25ca6174cb3d87cfd59656d801d83f5cd5839c5ac4b4d8c4efce7cd6b6f797dde9fc74fd642e552c4e8ba6b4e151d5278ac3", 0x63, 0x80}, {&(0x7f0000000400)="5b4b3fe53cff8e1401af639fbbabd214ac", 0x11, 0x3}, {&(0x7f0000000440)="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", 0x1000, 0x1}], 0x10000, &(0x7f0000001600)={[{@user_xattr='user_xattr'}, {@tails_on='tails=on'}, {@noattrs='noattrs'}, {@balloc_notest4='block-allocator=notest4'}, {@barrier_flush='barrier=flush'}, {@data_journal='data=journal'}, {@data_ordered='data=ordered'}, {@commit={'commit', 0x3d, 0xffff}}], [{@uid_lt={'uid<', r2}}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x0, r0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000b59000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r3, 0x0) init_module(&(0x7f0000000100)='mime_type#!^\x00', 0xd, &(0x7f0000000140)='\x00') ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}) ioctl(r0, 0x40044103, &(0x7f0000000000)) [ 263.723288] audit: type=1800 audit(1556242094.090:79): pid=11073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16923 res=0 01:28:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000026) 01:28:14 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x362) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$FICLONE(r0, 0x40049409, r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 01:28:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x7}) 01:28:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x52424752, 0x0, 0x0, 0x0, 0x3}}) 01:28:14 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:14 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) getpeername$netrom(r0, &(0x7f0000000040)={{0x3, @netrom}, [@null, @null, @remote, @rose, @netrom, @default, @rose, @rose]}, &(0x7f0000000100)=0x48) ioctl(r0, 0x40044103, &(0x7f0000000000)) 01:28:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x52474252, 0x0, 0x0, 0x0, 0x3}}) 01:28:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x7}) 01:28:14 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x40) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000100)={0x6, 0xb, 0x4, 0xe000, {r4, r5/1000+10000}, {0x1, 0xd, 0x4, 0x3, 0x4, 0x81f, "cad30d69"}, 0x3, 0x1, @planes=&(0x7f0000000080)={0x4, 0x0, @mem_offset=0x20, 0x3ff}, 0x4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x2010, r3, 0x0) ioctl(r2, 0x40044103, &(0x7f0000000000)) 01:28:14 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000080)={0x0, {0x82, 0x81}}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r2, 0x0) ioctl(r1, 0x40044103, &(0x7f0000000000)) 01:28:14 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x56595559, 0x0, 0x0, 0x0, 0x3}}) [ 264.384979] audit: type=1800 audit(1556242094.750:80): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16943 res=0 01:28:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000027) 01:28:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x7}) 01:28:15 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) utime(&(0x7f0000000300)='./file0/file0\x00', 0x0) 01:28:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x59555956, 0x0, 0x0, 0x0, 0x3}}) 01:28:15 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x4000000004001, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000300)=0x0) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f00000003c0)=[0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) fcntl$getownex(r1, 0x10, &(0x7f0000000400)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000540)=0xe8) r7 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000580)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f00000006c0)=0xe8) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fcntl$getown(r1, 0x9) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000900)) r14 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000940)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000a40)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$unix(r0, &(0x7f0000000c40)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)="b0c06577cd42b74233cf70ccb30a39a1e88f6e050ce5c33e725889af8316dfa12a92d7e288e78e7ed72d5b784f27ad300cb5d5076d48ae23bb7a5910b6b3eb0378c3de757e4f1721eed3e20a988dc6b01d7f9f8f1b", 0x55}, {&(0x7f00000001c0)="fdf89748b90ecc0612cb2d592dc6791c42d6aecc073a8f9c901b03ea2ac388c4edc3d62f4af95a0a3e4924f0c2b79468d5d7a0cc6eef8b262bbf30ddc58c64f4df449f457ee1f3ff1368fbbb0096791bf677300c6005f42cb392ce8f4bb7bf052cb83716970fdced86fdb1ebfb7b748da10356986f981812ecb5f30293fe3867a620c4ddd0f375fad5f8126ee54c615ee016b86ab9fd44a4e6cd2a35be40f81f96c91c3be4db2df3d6b2f1f4b900aeb620db042cd786f93dba892fd9ca3914062e33bcbf74eef26ff0ec9c26446f722e10f7ca30576ae5f12ed028bf6c23d76d835fb114e6a3069614eeed3fc5ba", 0xee}], 0x2, &(0x7f0000000b00)=[@rights={0x38, 0x1, 0x1, [r0, r0, r1, r0, r1, r1, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r1, r1, r1, r0]}], 0x128, 0x80}, 0x40) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) 01:28:15 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xd336, 0x240001) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x8000, 0x7) 01:28:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x7}) 01:28:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0x7}) 01:28:15 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200006) r3 = socket$inet6(0xa, 0x3, 0x3a) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x10240, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740), &(0x7f0000000800)) openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x0, 0x0) r5 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000300)={0x20000008}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000540)={{0x0, 0x5}, 0x1}, 0x10) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4000, 0x11, r2, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x7e}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x4}) ioctl$TIOCLINUX7(r4, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r7) recvfrom$inet6(r4, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f00000006c0)={0x3, 0x7, {0x0, 0x3f, 0x80000088a, {0x40, 0x7}, {0xfa, 0x40000000080}, @const={0x7, {0x5, 0x9, 0x0, 0x8001}}}, {0x0, 0x8, 0x4, {0x10000, 0x4}, {0x7, 0xfffffffffffffffe}, @const={0x6728, {0x3, 0x7f92, 0x9, 0x677}}}}) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) 01:28:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x9) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x800000000028) 01:28:15 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0xe7ffffff, 0x0, 0x0, 0x0, 0x3}}) 01:28:15 executing program 3: socket$netlink(0x10, 0x3, 0x4) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x89, 0x4, 0x5}, 0x401}}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000080)) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x2, 0x0) 01:28:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x1c}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xac, &(0x7f00000000c0)=""/251}, 0x48) [ 265.035125] WARNING: CPU: 0 PID: 11194 at fs/attr.c:234 notify_change+0xca2/0xfb0 [ 265.038316] kobject: 'kvm' (000000007c03fef0): kobject_uevent_env [ 265.042903] Kernel panic - not syncing: panic_on_warn set ... [ 265.042903] [ 265.042923] CPU: 0 PID: 11194 Comm: syz-executor.3 Not tainted 4.19.36 #4 [ 265.042932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.042938] Call Trace: [ 265.042964] dump_stack+0x172/0x1f0 [ 265.042990] panic+0x263/0x51d [ 265.043008] ? __warn_printk+0xf3/0xf3 [ 265.043034] ? notify_change+0xca2/0xfb0 [ 265.043055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.043077] ? __warn.cold+0x5/0x54 [ 265.099473] ? notify_change+0xca2/0xfb0 [ 265.103571] __warn.cold+0x20/0x54 [ 265.107133] ? notify_change+0xca2/0xfb0 [ 265.111294] report_bug+0x263/0x2b0 [ 265.114947] do_error_trap+0x204/0x360 [ 265.118878] ? math_error+0x340/0x340 [ 265.122698] ? kasan_check_read+0x11/0x20 [ 265.126862] ? do_raw_spin_unlock+0x57/0x270 [ 265.131288] ? error_entry+0x76/0xd0 [ 265.135038] ? trace_hardirqs_off_caller+0x65/0x220 [ 265.140078] ? simple_xattr_get+0x109/0x180 [ 265.144419] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.149295] do_invalid_op+0x1b/0x20 [ 265.153040] invalid_op+0x14/0x20 [ 265.156525] RIP: 0010:notify_change+0xca2/0xfb0 [ 265.161228] Code: 04 e8 09 00 e8 1f 5a b9 ff 4c 8b 7c 24 20 4c 89 ff e8 62 dc 42 01 89 de 4c 89 ff e8 48 f8 42 01 e9 33 fa ff ff e8 fe 59 b9 ff <0f> 0b e9 42 f4 ff ff e8 f2 59 b9 ff 44 89 f3 4c 89 ea 48 b8 00 00 [ 265.180147] RSP: 0018:ffff88805e0879e0 EFLAGS: 00010216 [ 265.185543] RAX: 0000000000040000 RBX: 0000000000004200 RCX: ffffc9000c4b2000 [ 265.192827] RDX: 00000000000000c1 RSI: ffffffff81b1eb12 RDI: 0000000000000007 [ 265.200110] RBP: ffff88805e087a30 R08: ffff88809fd960c0 R09: ffffed10147f4786 [ 265.207393] R10: ffffed10147f4785 R11: ffff8880a3fa3c2f R12: ffff88805e087a80 [ 265.214704] R13: ffff8880a3fa3b50 R14: 0000000000000000 R15: ffff88805e087b10 [ 265.222022] ? notify_change+0xca2/0xfb0 [ 265.226127] file_remove_privs+0x2a9/0x480 [ 265.230385] ? dentry_needs_remove_privs.part.0+0x80/0x80 [ 265.235955] ? __lock_acquire+0x6eb/0x48f0 [ 265.240208] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 265.245423] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 265.250471] __generic_file_write_iter+0x15e/0x630 [ 265.255440] blkdev_write_iter+0x233/0x440 [ 265.259701] ? __blkdev_get+0x1660/0x1660 [ 265.263886] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 265.269447] ? iov_iter_init+0xc6/0x1f0 [ 265.273446] __vfs_write+0x58e/0x820 [ 265.277186] ? kernel_read+0x120/0x120 [ 265.281095] ? __inode_security_revalidate+0xda/0x120 [ 265.286315] ? selinux_file_permission+0x92/0x550 [ 265.291193] ? security_file_permission+0x8f/0x230 [ 265.296154] ? rw_verify_area+0x118/0x360 [ 265.300324] vfs_write+0x20c/0x560 [ 265.303889] ksys_write+0xea/0x1f0 [ 265.307450] ? __ia32_sys_read+0xb0/0xb0 [ 265.311554] ? do_syscall_64+0x26/0x610 [ 265.315558] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.320936] ? do_syscall_64+0x26/0x610 [ 265.324932] __x64_sys_write+0x73/0xb0 [ 265.328838] do_syscall_64+0x103/0x610 [ 265.332754] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.337951] RIP: 0033:0x458da9 [ 265.341161] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 265.360079] RSP: 002b:00007fa77f0e2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.367819] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 265.376608] RDX: 0000000000000018 RSI: 0000000020000040 RDI: 0000000000000005 [ 265.383901] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 265.391185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa77f0e36d4 [ 265.398471] R13: 00000000004c831e R14: 00000000004de780 R15: 00000000ffffffff [ 265.406689] Kernel Offset: disabled [ 265.410343] Rebooting in 86400 seconds..