, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000300)={0x15, 0x837, &(0x7f00000003c0)="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"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc202, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000f80), 0xffffffffffffffff) getpgrp(0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[@ANYBLOB="8000"], 0x2) 02:59:11 executing program 0: syz_open_dev$sndtimer(0x0, 0x0, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd) write$evdev(r1, &(0x7f0000000600)=[{{}, 0x0, 0xffffffffffffff01}, {{0x0, 0x7530}, 0x0, 0x101, 0x237}], 0x30) gettid() getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x42a}, &(0x7f0000000280)=0xfffffffffffffd47) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000017c0)={0x287, "75d1679892429585d6c46d6f40f4d34d91ff84b7908403368d478b5cdfea2f15", 0x1, 0x1}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001780)={@remote, 0x4c}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000680)={@local, @remote, 0x0}, &(0x7f0000001640)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x1a, &(0x7f0000001a00)=ANY=[@ANYBLOB="c0b65ffdff0000009c51e0ff09000000a53500e4000005009067799dec7aaea2b231a37c5366b1b77b71baa222b7676da274730823303aa54fd838f0d68ec1655bed444932cda4cab76c62a6057e392c623d4864de25a1387e4f873f5f9623145b6069b6f8893e08bfa9ecbdbc845f8ce6be828ac1af8e1788d12f9c9a45577163f8fb93963123cc137017bb95919476c31abe05876e6a2bc2daa4c48fe7a4b9ba7a3495d6d9b9be0359c8ec468dcc9b049cb461ac31ce9f78b470b9d1036affc6653875011a4b55d530fda54b3c21600c"], 0x0, 0x401, 0x0, 0x0, 0x40f00, 0x1, [], r3, 0x2}, 0x48) fallocate(r1, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f00000006c0)="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", 0x0}, 0x18) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) accept(r1, 0x0, &(0x7f0000000200)) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000440)={&(0x7f0000000400)}) tee(r1, r2, 0x3, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r1, 0x7, 0x1, 0x3, &(0x7f00000001c0)=[0x0], 0x1}, 0x20) write$FUSE_POLL(r1, &(0x7f0000000140)={0x18, 0x0, 0x1, {0x9}}, 0x18) write$P9_RFLUSH(r4, &(0x7f0000000480)={0x7, 0x6d, 0x1}, 0x7) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0xf145, 0x1, 0x5, 0x40]}) ptrace$getregs(0xc, 0x0, 0x5, &(0x7f00000004c0)=""/58) sendfile(r4, r4, &(0x7f00000000c0), 0x0) 02:59:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=@nbd={'/dev/nbd'}, &(0x7f0000001640)='./file0\x00', &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 02:59:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x40480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='cpuset$)vboxnet1,cgroup^)\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000500)=""/73) recvfrom$inet6(r0, 0x0, 0x0, 0x2, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @loopback, 0x101}, 0x1c) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) write(r0, &(0x7f0000000140), 0x0) 02:59:11 executing program 1: syz_open_dev$dri(0x0, 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00`\x9f\xb8\xabt\xb0\xf3\x0e\xf7\x04\x8eG\t)\x88\x9a&\x05\xdc\x92\xff\xa1\x93~\'\xb8K]5\x11\xd2\xe9\\\xcc\xfdfV\xe1\xe42W\xe6@\b1\x98w\x0e]\xab4A\xb5', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {0x0}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r3, 0x0, 0x800000000001}, 0x14) r6 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000001ac0)=""/4096) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r7, r5, 0x0, 0xb, &(0x7f0000000140)='/dev/vsock\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xffffffffffffffc2, &(0x7f0000000040)='/proc/self/attr/current\x00'}, 0x30) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl$TIOCSPGRP(r3, 0x5410, 0x0) [ 314.886310] gfs2: path_lookup on /dev/nbd returned error -2 02:59:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=@nbd={'/dev/nbd'}, &(0x7f0000001640)='./file0\x00', &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) [ 314.942191] audit: type=1800 audit(1545101951.619:38): pid=9925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16773 res=0 [ 314.967512] sched: DL replenish lagged too much [ 314.979213] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 02:59:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0105303, &(0x7f0000000200)={{}, 'port0\x00'}) 02:59:11 executing program 4: mlockall(0x1) fdatasync(0xffffffffffffffff) r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000140)={0x0, 0x3}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='\x00') r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) signalfd(0xffffffffffffffff, 0x0, 0x0) fstat(r1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f00000006c0)={0x2, 0x18001}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 02:59:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0105303, &(0x7f0000000200)={{}, 'port0\x00'}) 02:59:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0105303, &(0x7f0000000200)={{}, 'port0\x00'}) 02:59:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=@nbd={'/dev/nbd'}, &(0x7f0000001640)='./file0\x00', &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) [ 315.253766] gfs2: path_lookup on /dev/nbd returned error -2 [ 315.482518] gfs2: path_lookup on /dev/nbd returned error -2 02:59:12 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x2b9}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) pipe2(0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000540)={0x3}) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x80000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/\x01\x00op_packet\x00-X\xb2H\t\x00\x00\x00(D', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000003c0)={0xff5, 0x698, 0x6, 0x7}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f0000000c00)={0x0, 0xfb, 0x1015, 0x3, 0xfff, "a5744d9ae4b043c08e0fc4f3d73b0c01", "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"}, 0x1015, 0x3) bind$bt_sco(r3, &(0x7f0000000040), 0x8) listen(r3, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={0x0, r2}, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') memfd_create(&(0x7f0000000000)='.\x00', 0x1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000001c40)=ANY=[@ANYBLOB="5fa6353185d253c500020008000500010000000000000000f181ac1b000600018000000800090081fffffb2c000200080004008e0000000800060008000000080007000008000900020000004400020008000909e100000014000100e00000010000000000000000000000000800030000000000140001400000000000ffff7f000001080002004ed6a27811f8452d7673168f4227db9ae8ca0ce75a69aaa12c957b5cf54b0751d35086e89bb010f5d00b6dd9ead624fe3988875b6f08bfc7bd59b28ba4c7c947ef6e08b3e1a4459cda3b2a6e7eb6ea5a3c1bfbb0213b3d613d87e576c302515831106a96a6a8171432590781bb3c29292b53e024694a1f68da0730590d3d40d552255df1c661d4ed0c80124d3cf2f95536517d874e8cad721205406cbdfa95c7fa9d45eb6d49c6df7f19d0170f43a05c474f1b9dd932c41349aa4d9d69b486a94b4664de626adee30836fe3737480e427beb21fa11948ac8402f5f0000000000000000000000000000000000000000000000000000abce00cfab1dd9e2d1ee8fce14cb6a602727dcfc465f31c04f7102705f3bb4e671d6461baadc42efce840a80afe0c77505001df74538041c8b9d5e3cd1726e120b99d9b87ff37ba2"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) move_pages(0x0, 0x4, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f00000001c0), 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000380)='\x00', 0x1, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) accept$unix(r3, &(0x7f0000000840)=@abs, &(0x7f0000000740)=0xfffffffffffffe90) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x581000, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0xc40, 0x5, 0x10001, 0x5, 0x9, 0x4, 0x9}, 0x1c) 02:59:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0105303, &(0x7f0000000200)={{}, 'port0\x00'}) [ 315.721296] audit: type=1800 audit(1545101952.399:39): pid=9914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16773 res=0 [ 315.747709] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 02:59:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0xd, 0x209e1e, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x13) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 02:59:12 executing program 1: syz_open_dev$dri(0x0, 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00`\x9f\xb8\xabt\xb0\xf3\x0e\xf7\x04\x8eG\t)\x88\x9a&\x05\xdc\x92\xff\xa1\x93~\'\xb8K]5\x11\xd2\xe9\\\xcc\xfdfV\xe1\xe42W\xe6@\b1\x98w\x0e]\xab4A\xb5', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {0x0}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r3, 0x0, 0x800000000001}, 0x14) r6 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000001ac0)=""/4096) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r7, r5, 0x0, 0xb, &(0x7f0000000140)='/dev/vsock\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xffffffffffffffc2, &(0x7f0000000040)='/proc/self/attr/current\x00'}, 0x30) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl$TIOCSPGRP(r3, 0x5410, 0x0) 02:59:12 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x2b9}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) pipe2(0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000540)={0x3}) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x80000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/\x01\x00op_packet\x00-X\xb2H\t\x00\x00\x00(D', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000003c0)={0xff5, 0x698, 0x6, 0x7}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f0000000c00)={0x0, 0xfb, 0x1015, 0x3, 0xfff, "a5744d9ae4b043c08e0fc4f3d73b0c01", "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"}, 0x1015, 0x3) bind$bt_sco(r3, &(0x7f0000000040), 0x8) listen(r3, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={0x0, r2}, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') memfd_create(&(0x7f0000000000)='.\x00', 0x1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000001c40)=ANY=[@ANYBLOB="5fa6353185d253c500020008000500010000000000000000f181ac1b000600018000000800090081fffffb2c000200080004008e0000000800060008000000080007000008000900020000004400020008000909e100000014000100e00000010000000000000000000000000800030000000000140001400000000000ffff7f000001080002004ed6a27811f8452d7673168f4227db9ae8ca0ce75a69aaa12c957b5cf54b0751d35086e89bb010f5d00b6dd9ead624fe3988875b6f08bfc7bd59b28ba4c7c947ef6e08b3e1a4459cda3b2a6e7eb6ea5a3c1bfbb0213b3d613d87e576c302515831106a96a6a8171432590781bb3c29292b53e024694a1f68da0730590d3d40d552255df1c661d4ed0c80124d3cf2f95536517d874e8cad721205406cbdfa95c7fa9d45eb6d49c6df7f19d0170f43a05c474f1b9dd932c41349aa4d9d69b486a94b4664de626adee30836fe3737480e427beb21fa11948ac8402f5f0000000000000000000000000000000000000000000000000000abce00cfab1dd9e2d1ee8fce14cb6a602727dcfc465f31c04f7102705f3bb4e671d6461baadc42efce840a80afe0c77505001df74538041c8b9d5e3cd1726e120b99d9b87ff37ba2"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) move_pages(0x0, 0x4, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f00000001c0), 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000380)='\x00', 0x1, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) accept$unix(r3, &(0x7f0000000840)=@abs, &(0x7f0000000740)=0xfffffffffffffe90) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x581000, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0xc40, 0x5, 0x10001, 0x5, 0x9, 0x4, 0x9}, 0x1c) 02:59:12 executing program 0: syz_open_dev$sndtimer(0x0, 0x0, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd) write$evdev(r1, &(0x7f0000000600)=[{{}, 0x0, 0xffffffffffffff01}, {{0x0, 0x7530}, 0x0, 0x101, 0x237}], 0x30) gettid() getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x42a}, &(0x7f0000000280)=0xfffffffffffffd47) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000017c0)={0x287, "75d1679892429585d6c46d6f40f4d34d91ff84b7908403368d478b5cdfea2f15", 0x1, 0x1}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001780)={@remote, 0x4c}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000680)={@local, @remote, 0x0}, &(0x7f0000001640)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x1a, &(0x7f0000001a00)=ANY=[@ANYBLOB="c0b65ffdff0000009c51e0ff09000000a53500e4000005009067799dec7aaea2b231a37c5366b1b77b71baa222b7676da274730823303aa54fd838f0d68ec1655bed444932cda4cab76c62a6057e392c623d4864de25a1387e4f873f5f9623145b6069b6f8893e08bfa9ecbdbc845f8ce6be828ac1af8e1788d12f9c9a45577163f8fb93963123cc137017bb95919476c31abe05876e6a2bc2daa4c48fe7a4b9ba7a3495d6d9b9be0359c8ec468dcc9b049cb461ac31ce9f78b470b9d1036affc6653875011a4b55d530fda54b3c21600c"], 0x0, 0x401, 0x0, 0x0, 0x40f00, 0x1, [], r3, 0x2}, 0x48) fallocate(r1, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f00000006c0)="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", 0x0}, 0x18) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) accept(r1, 0x0, &(0x7f0000000200)) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000440)={&(0x7f0000000400)}) tee(r1, r2, 0x3, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r1, 0x7, 0x1, 0x3, &(0x7f00000001c0)=[0x0], 0x1}, 0x20) write$FUSE_POLL(r1, &(0x7f0000000140)={0x18, 0x0, 0x1, {0x9}}, 0x18) write$P9_RFLUSH(r4, &(0x7f0000000480)={0x7, 0x6d, 0x1}, 0x7) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0xf145, 0x1, 0x5, 0x40]}) ptrace$getregs(0xc, 0x0, 0x5, &(0x7f00000004c0)=""/58) sendfile(r4, r4, &(0x7f00000000c0), 0x0) 02:59:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x40480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='cpuset$)vboxnet1,cgroup^)\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000500)=""/73) recvfrom$inet6(r0, 0x0, 0x0, 0x2, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @loopback, 0x101}, 0x1c) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) write(r0, &(0x7f0000000140), 0x0) [ 315.859075] syz-executor0 (9952) used greatest stack depth: 14056 bytes left 02:59:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0xd, 0x209e1e, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x13) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) [ 316.046715] audit: type=1800 audit(1545101952.729:40): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16803 res=0 [ 316.250939] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 02:59:13 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x2b9}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) pipe2(0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000540)={0x3}) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x80000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/\x01\x00op_packet\x00-X\xb2H\t\x00\x00\x00(D', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000003c0)={0xff5, 0x698, 0x6, 0x7}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f0000000c00)={0x0, 0xfb, 0x1015, 0x3, 0xfff, "a5744d9ae4b043c08e0fc4f3d73b0c01", "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"}, 0x1015, 0x3) bind$bt_sco(r3, &(0x7f0000000040), 0x8) listen(r3, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={0x0, r2}, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') memfd_create(&(0x7f0000000000)='.\x00', 0x1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) move_pages(0x0, 0x4, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f00000001c0), 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000380)='\x00', 0x1, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) accept$unix(r3, &(0x7f0000000840)=@abs, &(0x7f0000000740)=0xfffffffffffffe90) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x581000, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0xc40, 0x5, 0x10001, 0x5, 0x9, 0x4, 0x9}, 0x1c) 02:59:13 executing program 1: syz_open_dev$dri(0x0, 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00`\x9f\xb8\xabt\xb0\xf3\x0e\xf7\x04\x8eG\t)\x88\x9a&\x05\xdc\x92\xff\xa1\x93~\'\xb8K]5\x11\xd2\xe9\\\xcc\xfdfV\xe1\xe42W\xe6@\b1\x98w\x0e]\xab4A\xb5', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {0x0}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r3, 0x0, 0x800000000001}, 0x14) r6 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000001ac0)=""/4096) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r7, r5, 0x0, 0xb, &(0x7f0000000140)='/dev/vsock\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xffffffffffffffc2, &(0x7f0000000040)='/proc/self/attr/current\x00'}, 0x30) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl$TIOCSPGRP(r3, 0x5410, 0x0) 02:59:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0xd, 0x209e1e, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x13) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 02:59:13 executing program 4: syz_open_dev$sndtimer(0x0, 0x0, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd) write$evdev(r1, &(0x7f0000000600)=[{{}, 0x0, 0xffffffffffffff01}, {{0x0, 0x7530}, 0x0, 0x101, 0x237}], 0x30) gettid() getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x42a}, &(0x7f0000000280)=0xfffffffffffffd47) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000017c0)={0x287, "75d1679892429585d6c46d6f40f4d34d91ff84b7908403368d478b5cdfea2f15", 0x1, 0x1}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001780)={@remote, 0x4c}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000680)={@local, @remote, 0x0}, &(0x7f0000001640)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x1a, &(0x7f0000001a00)=ANY=[@ANYBLOB="c0b65ffdff0000009c51e0ff09000000a53500e4000005009067799dec7aaea2b231a37c5366b1b77b71baa222b7676da274730823303aa54fd838f0d68ec1655bed444932cda4cab76c62a6057e392c623d4864de25a1387e4f873f5f9623145b6069b6f8893e08bfa9ecbdbc845f8ce6be828ac1af8e1788d12f9c9a45577163f8fb93963123cc137017bb95919476c31abe05876e6a2bc2daa4c48fe7a4b9ba7a3495d6d9b9be0359c8ec468dcc9b049cb461ac31ce9f78b470b9d1036affc6653875011a4b55d530fda54b3c21600c"], 0x0, 0x401, 0x0, 0x0, 0x40f00, 0x1, [], r3, 0x2}, 0x48) fallocate(r1, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f00000006c0)="61e27d7ccbd5fb9b86d79486f8eecd1734996c82dd07b924096325f8aa50e8b0fcbac4c2e8a06b0dac4a6eaf24e71caa75950b9a8acdaafadf63d860fe90ccd7b6ed593e48c090492e1e15bddf11313ac70e10affbfa9770b669e39bfc4b5bf3680f2fd0f764fd4d4088cd080ee2d55b80e03ecd9884eccc2e5cb707f3dbe41c13121026bcf8426fa6033548fdc565c07921d10338a8a920abfb89f327bac413e197ffde432352eb0adc5bc108907415212f676e327c6c37259aa0997782100cd98d19f99df5eaea08e08941e9e4d8c42fed28c9698b66aa5b5d28b327307d6eab9d7d3aa96e3c6afca9399a8004afa7e3c58eadc9d5253e5f5fdcde446b31659fbfc73ca9f768ada51d595f4cbc7cc31207c382d46044e085e16ad47b22d076af653371252292003cc213a3030c18bdf65f1d40c2a5dae4db3c4e4557d4037ad3ae4c8eac3768c2e2effe8a6f4e6e8ac0eb496ba49458cd45e71c417442cc2425d0dabeebf8ca0639cf15ed607aea59534016f8a38ecc6b01c2ffbca3d723b4aac07bbaed9cff9784e1c3752ab9785993da03d26f5a17578ccd6e41f13fbcbac64a5e5cb447c4cb8a3dbaba1d5ea02b39ee69240a4e9933004c72bdf9aab68412a592daa5f1da0737d5c46fd8cfe086d8bf3fe65571efc54ded5edbe00eb336c622da1079d2d61e4dd7d168b3a296c8f9bec843f8eced3ac7c3198c0b0f0b0008ebf4da158ddbad73eef34bbef0e3d1551ab676a227615668e24142876cdc35482f0b7b6e841b0582ff2474fa7a1c91f64291b895f06154883726eca1ded99d27a04853a267dd25e61c2f0116a194ea54ebe99cd93adc8be3486fa5ef6570cf6c3d6714419f30dea4da6e1430425900bd9152b8c5a51cd4695fc7c03d482be7131702fe990e9b78b56f7224a4c0829949b55a06889796defa5d41c106f6902e47ed194c92ffa34575a18b4e53227983c9d6f959564cb87a346dd9b7057852083a68be6188089bd9bbce5580a0cf05376550722b5e92be0863efddb74abcecf399e9e6fbdf97e095c882365ca145cf2c58972513b822f3821ad7cbf92377b67860f89d0c674ad7f8162284211c80242c2f705a275782c4014713886acecffcbd5e6e13536b8d126937f1242b275f310b2270f97506d42e7763abb24ca477e9c72e747c3a26d15b5dfec2d2a7f15186bc63b64d1129c7a53c84c3fb736c470633aa1b27929341e782a83da8bb616c2983d630bf3b75857fb6bf0faeea3700b90966f10278db58a659967d02cacc560521463057c4a474f377b504b5caf9a83a56479644073df15978cdf8e7b1107480511a9059bde0ebcde82c91e3ff9120479e53a395e5522152f1494a5a3932efd2a549506162ef55749c9cbb8bf958c483b0f7e10b5fc75e2943ea27640770c31680ce9cbb5556f6ee6d6336c4279c5dff9577b7f3da5b7cee7dbfd591e857c4a3ef66c91ca85a007ed74588e07dcbd30537d1c24a00183189fcd60b82613aae55d47d9d5568c45b52605796cc0439da96f82efd817348dcf37c4f341366ee3a40e286f7b77526140c2220174edeb7fc518fa85791629f0575192b770eb96350185b4e6091cabaf4984f64e9802f283ea271b3e2ab2dc0918b02b5e483a8645391af4cf7a997683cad2e91bd6aa4a9a5f42dc18e84f92b8199d994e405cb6b8d928e4131331d421a7c3dc13c9dd7168043ed8f81a59a5c10ca72c39aa61342eb210430a65c5b8b6ff5bc51110a98825dd7e5bd4b4ffb718bce290c0edf2fb9db5dcd6652e794f75d3c23a02ce86afd01f15e6de7e84e55f93c640fee85174a15e1c96c70104a2613f723eb988d9760aacddd58252aa5b0f5da39a69b09804dd00a6a8744eea992d63aedebb3c2cd1d26a1eebe63993400a5f11ae28df36e490807ee8f54113a963b5e0e531a2d37dea5b3a0db23031ec0fd0d2245a4386a5edb2981ff037fe8e46406bc2db3e2dc895f0d77ca62b3fd57cd5ecf418914a78f594ac5e2ad57b101ee08eead683128204e1ac024c832d069c49aabf163655bf5306257e40ea0aec1d1bd1e9d8f58711372c13caa69c4c65e299c247b69f8ff4440041a1d4ebd1b20dcc789817184dd14fcf487f5321e37b331c88c3a53dcd7ee887f1d161510f46f6502842dc2d8d8d7f431a563aa5a258551d60a1c88ddf9de7d530beec6a4c93922e269f6f3ee163891b4356c0156636b7905406d46d1bf873250162eba871afa249277f531946144d081024b93a4b507bb19241450ba339034a6708b79b8ef2bef135451a7b58fcc499e7ea6832e6cb684b91de3e50285fb8195196af7cc5d1f3ed552ab2522043e6313fb444a0397196e60ddc8b0141c8ade348a151fcb7858aa2db5650e8d4e81255178c36320a08df56a5723c1ce1f636031a0b7db3d58e575e6bac33f421c5847bf0aaf757140b437eae896ab49bbc22bce109c3b347fbbf679010efb98203de6b2b7fdc97c7dacabde7c6e0519e931a5ab407f9fca8773605f5949a4f7857de2b540ac9b0f3c75093f9669338e44666a8373d696c79c3f028f9747b960f479226be28d946101da0394a5049d0631015996e5dcc95ce1d26036575278de541d5e180e627eb5f9a5c94e9e85d4604d3ca29de75533279c1344dfba51fdbbb7358292145873c80ee967532243d7bfffa4ad120aefb6ce5580aea7a4b6707c6330c85eed3e959c7d53f9777cedb4a66fd548ce9a3f32f4956e545b4c918b7d32432ccdf3eeaf54cb1e4ac51043587cd7578814e1ccd49db6dbec03be7251f8acc416000cc4baf9fd56f3982c5ffcaaa1f881c9bf0d2e5d55a4bbf4179c7887d21bcfa3987250398b4c1ac6bb8a23a2287a87ac9564557b7e6cb59a8ce49f2d3a384b66d009b170334b0e0c50bdaf00edb5df3a9a4f4d49d10d3327dc26c1a5a1b628a62ddd9a5d26c6db260a0140b8a4347e3d89314baf81dea18d1616887b1b2df6e08b17fa0010129aec71aa2e4fccdc9c7c2f237272255ea84d7c615ead38426e470191af58adedea4ffb432ef69a35898e81dbfd3d0131cbd04a1532edf79159e27f0c451939cf86ef15ea8830049681de8ca8c6af97a2e5706cad8216eb40564a1a2ee3e8fc5188796f9d4bbf0e66e99d586da79f80ba319f17b7f8e74821f507ba65fb41543b940ae6a374d7f32d592f6b039018193c2c4544528200e8050b7c0d0911c677c30598bcc8b09512b0505ab9b83dc9923679d02bc91871244dcc006ff885f50973d70dbe4db3bf909a69ec1dab470a56a932c8cf9000cb583575eae90fc08dfe08f81cbe876f7c67cd853843691119191d40dd35059a61f68be7363a52adc85b2dbc1dfc1b3072acc1d9365f2be282747072f43616a2b4ccae92dd28ca32aee72f9d3fb6b0efa314a2c5e11d98594c97af7d8297b5a32270bda16b1c153cfe1705c571d4e71c63ee50273ebe486926ec9a05dd418dc8dc4d63ae8f410b5dc05560f084f6410ecf538ede3ea04d567ffb403143ca6c5803f491f9fdf5cc35b588e70e54e2ee76f88cf63400f6713350c103e338c05720d708bc8c476e00a00d6c12b3a833f9f8f2d631d3a6bb40fea734cc1e51294845e3d83e7d4348690d08e7dcfb8a148446efc8ad62adcc44963bd0f576957f10455f84a79b76b1d8a5456049425e28cb3ba1c4dafe34f8186c1632b9fd10b8370e419836711daa94a29d6634e3fb6858a8c2db7e377c9b90ce2c3510c749029b496aabf827a940119b16ce827cc3b2e5169069ace82c2c751404bc1b5779657755905a3c49f2beb8f67f1273d68783d76d4757eefa2a9c67c4beddb892dc875d623791e431b356b9497938878777886fdd94b8e9dfdeb2b37d831efdad6de555ef4712c1d5e0cf4fa6036de5902d86f862f2397e1f7ad8f20936e654b8586915db6e89e6d9b40c3b8b6d1f48f2f8234888256d899a19ef35af37af51832056b50fe4322c7ceed49f28faf9bd458eee7507544ac2dbd6b0ef098dc3197b12410c6c8e11beb41d12c785eb7765ff5d39f3e7398dded6067a42f1be818d8e86b0aacb23a6d0560c3e09dee4d93751b9d869cc20f2e8912bd6e75d35d3e0040fc480c9cc0fa77ea7752085d7a00c1e8696b55bda0515e54454871bf1bf004b4b53b2b16fc5de96d23bec03120db5371500d5f4bc5edf758d5cd0d2109d53500b8d1d3863d23e24357d4a3020eb9ad68ef7b8d00ef96a1b91de383cbdeaaa7bbd8d2a23a9434bc607a8e56265b2bc3c631dd4f804ead7a3f378289c3db3ea6727e22a1bd2afdbe93b9015f1203cacc58c3f8679cabeb12598fc7562770725253386eb24d5881c18db244df50497a0d67a6264856372106a1c3c2b1f233b2a000ffa4679fce543c0d1a2e5a59175d26d5e00b805f98545beab8f461847ef5a9ebfb559cbf0f5192545071a505dd13536c27fa99ca1557976124c3cb113b0f8897b021e4ca55f702cd994e4f04511ce6a18940a70927a72554aeb0c5c56cd17a29d96dc15df81a18b961dfacd7c3a015f73178e53764ac4138feaa80335cc0ac5ef4c0f168cf3cffd1f21ff6d3844814eb96435df14e10ababfc54b776531b3e3d82a41237b0620145ca27a4f0a40676e2ea3a3bb8d552c77f37dbdea1f800935a2db7265524033ca62ab6fa8aeb18a72ebff507273c0a90586a354d3ced8ce884deaa2bd0aaff0647c5146ef9afe8e9cada36380ddbf67facb8fa1d01402450ebbcf52ab972447f03a6ce22e8d09cb5887085c39b37a05be98c3ac1c8ce62d2bd773dc268fdf5ef9cae61bb3388fe153c1083d7e38799032157ab75200af55568c788f8ecfced1684bb27436aad0f58678f0097297683b46dcc99d71b45f8de0ac25009981502e8f681271f7d3bbcc75db907e16a2bd58a805d90eb84e0ac988101de2b2f946a1d05199c98cdc6c1dc49d591930097584fad3077f344018499112392d02efbc60b130e04a2317724f397a8d851b2990ec6569e4be6c0e0b8bb3c2e05513806cecffb3e081d0f7d4b81f3677cf2fc431b5c126327d7f46020296ff0838b445b1e5df83d0d475bf68ae5d8006bab0b775ca8143b58e03d9457a4c2ad8c70dc428866fa3b1f20783d03fa92c90c856956fc73b6963081fe27771f33ab1242fe88e63414eaeb5cc5838acba6b5deca6e54005f6f6404892ba5db515daad2c130755926c566370bce9a185cfb8f1fef200df39eda476d19871d5d10580be6a0658db280ce9c26f2fe686ccebe1642bf91ec60eda1fae2ab9e62e598c2a355c6e0bbce39daf1f296c8a84408c07baba840773bcb31c8d4adc3cd5f699c6bba6be8f79a15e8fb7f7c5450e8261251da9bf7c6111aa9d3c3ca0f02f14ecd056a3659dca1b828263b13aa6106bfeca5134cb5d457f7ce95be3b79c0199a86b468d5c22932ed5e3259fb6c3c750bbfa35e84d964f6ca5a4ce4839a6734c8787c12936b7d7892724bd04994340b3a8efcd935563f1a079ed609b11888d06e1849ff61a96c93929e6d80cb7d16dea5cf28a2397f09294eae4a38283a527c1faa40d1bf755d5a581483c2fe39149fa63b83d2e0ad26e4f5efbf833", 0x0}, 0x18) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) accept(r1, 0x0, &(0x7f0000000200)) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000440)={&(0x7f0000000400)}) tee(r1, r2, 0x3, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r1, 0x7, 0x1, 0x3, &(0x7f00000001c0)=[0x0], 0x1}, 0x20) write$FUSE_POLL(r1, &(0x7f0000000140)={0x18, 0x0, 0x1, {0x9}}, 0x18) write$P9_RFLUSH(r4, &(0x7f0000000480)={0x7, 0x6d, 0x1}, 0x7) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0xf145, 0x1, 0x5, 0x40]}) ptrace$getregs(0xc, 0x0, 0x5, &(0x7f00000004c0)=""/58) sendfile(r4, r4, &(0x7f00000000c0), 0x0) [ 316.860343] audit: type=1800 audit(1545101953.539:41): pid=10004 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor4" name="bus" dev="sda1" ino=16810 res=0 02:59:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0xd, 0x209e1e, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x13) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 02:59:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x40480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='cpuset$)vboxnet1,cgroup^)\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000500)=""/73) recvfrom$inet6(r0, 0x0, 0x0, 0x2, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @loopback, 0x101}, 0x1c) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) write(r0, &(0x7f0000000140), 0x0) 02:59:13 executing program 0: syz_open_dev$sndtimer(0x0, 0x0, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd) write$evdev(r1, &(0x7f0000000600)=[{{}, 0x0, 0xffffffffffffff01}, {{0x0, 0x7530}, 0x0, 0x101, 0x237}], 0x30) gettid() getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x42a}, &(0x7f0000000280)=0xfffffffffffffd47) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000017c0)={0x287, "75d1679892429585d6c46d6f40f4d34d91ff84b7908403368d478b5cdfea2f15", 0x1, 0x1}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001780)={@remote, 0x4c}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000680)={@local, @remote, 0x0}, &(0x7f0000001640)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x1a, &(0x7f0000001a00)=ANY=[@ANYBLOB="c0b65ffdff0000009c51e0ff09000000a53500e4000005009067799dec7aaea2b231a37c5366b1b77b71baa222b7676da274730823303aa54fd838f0d68ec1655bed444932cda4cab76c62a6057e392c623d4864de25a1387e4f873f5f9623145b6069b6f8893e08bfa9ecbdbc845f8ce6be828ac1af8e1788d12f9c9a45577163f8fb93963123cc137017bb95919476c31abe05876e6a2bc2daa4c48fe7a4b9ba7a3495d6d9b9be0359c8ec468dcc9b049cb461ac31ce9f78b470b9d1036affc6653875011a4b55d530fda54b3c21600c"], 0x0, 0x401, 0x0, 0x0, 0x40f00, 0x1, [], r3, 0x2}, 0x48) fallocate(r1, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f00000006c0)="61e27d7ccbd5fb9b86d79486f8eecd1734996c82dd07b924096325f8aa50e8b0fcbac4c2e8a06b0dac4a6eaf24e71caa75950b9a8acdaafadf63d860fe90ccd7b6ed593e48c090492e1e15bddf11313ac70e10affbfa9770b669e39bfc4b5bf3680f2fd0f764fd4d4088cd080ee2d55b80e03ecd9884eccc2e5cb707f3dbe41c13121026bcf8426fa6033548fdc565c07921d10338a8a920abfb89f327bac413e197ffde432352eb0adc5bc108907415212f676e327c6c37259aa0997782100cd98d19f99df5eaea08e08941e9e4d8c42fed28c9698b66aa5b5d28b327307d6eab9d7d3aa96e3c6afca9399a8004afa7e3c58eadc9d5253e5f5fdcde446b31659fbfc73ca9f768ada51d595f4cbc7cc31207c382d46044e085e16ad47b22d076af653371252292003cc213a3030c18bdf65f1d40c2a5dae4db3c4e4557d4037ad3ae4c8eac3768c2e2effe8a6f4e6e8ac0eb496ba49458cd45e71c417442cc2425d0dabeebf8ca0639cf15ed607aea59534016f8a38ecc6b01c2ffbca3d723b4aac07bbaed9cff9784e1c3752ab9785993da03d26f5a17578ccd6e41f13fbcbac64a5e5cb447c4cb8a3dbaba1d5ea02b39ee69240a4e9933004c72bdf9aab68412a592daa5f1da0737d5c46fd8cfe086d8bf3fe65571efc54ded5edbe00eb336c622da1079d2d61e4dd7d168b3a296c8f9bec843f8eced3ac7c3198c0b0f0b0008ebf4da158ddbad73eef34bbef0e3d1551ab676a227615668e24142876cdc35482f0b7b6e841b0582ff2474fa7a1c91f64291b895f06154883726eca1ded99d27a04853a267dd25e61c2f0116a194ea54ebe99cd93adc8be3486fa5ef6570cf6c3d6714419f30dea4da6e1430425900bd9152b8c5a51cd4695fc7c03d482be7131702fe990e9b78b56f7224a4c0829949b55a06889796defa5d41c106f6902e47ed194c92ffa34575a18b4e53227983c9d6f959564cb87a346dd9b7057852083a68be6188089bd9bbce5580a0cf05376550722b5e92be0863efddb74abcecf399e9e6fbdf97e095c882365ca145cf2c58972513b822f3821ad7cbf92377b67860f89d0c674ad7f8162284211c80242c2f705a275782c4014713886acecffcbd5e6e13536b8d126937f1242b275f310b2270f97506d42e7763abb24ca477e9c72e747c3a26d15b5dfec2d2a7f15186bc63b64d1129c7a53c84c3fb736c470633aa1b27929341e782a83da8bb616c2983d630bf3b75857fb6bf0faeea3700b90966f10278db58a659967d02cacc560521463057c4a474f377b504b5caf9a83a56479644073df15978cdf8e7b1107480511a9059bde0ebcde82c91e3ff9120479e53a395e5522152f1494a5a3932efd2a549506162ef55749c9cbb8bf958c483b0f7e10b5fc75e2943ea27640770c31680ce9cbb5556f6ee6d6336c4279c5dff9577b7f3da5b7cee7dbfd591e857c4a3ef66c91ca85a007ed74588e07dcbd30537d1c24a00183189fcd60b82613aae55d47d9d5568c45b52605796cc0439da96f82efd817348dcf37c4f341366ee3a40e286f7b77526140c2220174edeb7fc518fa85791629f0575192b770eb96350185b4e6091cabaf4984f64e9802f283ea271b3e2ab2dc0918b02b5e483a8645391af4cf7a997683cad2e91bd6aa4a9a5f42dc18e84f92b8199d994e405cb6b8d928e4131331d421a7c3dc13c9dd7168043ed8f81a59a5c10ca72c39aa61342eb210430a65c5b8b6ff5bc51110a98825dd7e5bd4b4ffb718bce290c0edf2fb9db5dcd6652e794f75d3c23a02ce86afd01f15e6de7e84e55f93c640fee85174a15e1c96c70104a2613f723eb988d9760aacddd58252aa5b0f5da39a69b09804dd00a6a8744eea992d63aedebb3c2cd1d26a1eebe63993400a5f11ae28df36e490807ee8f54113a963b5e0e531a2d37dea5b3a0db23031ec0fd0d2245a4386a5edb2981ff037fe8e46406bc2db3e2dc895f0d77ca62b3fd57cd5ecf418914a78f594ac5e2ad57b101ee08eead683128204e1ac024c832d069c49aabf163655bf5306257e40ea0aec1d1bd1e9d8f58711372c13caa69c4c65e299c247b69f8ff4440041a1d4ebd1b20dcc789817184dd14fcf487f5321e37b331c88c3a53dcd7ee887f1d161510f46f6502842dc2d8d8d7f431a563aa5a258551d60a1c88ddf9de7d530beec6a4c93922e269f6f3ee163891b4356c0156636b7905406d46d1bf873250162eba871afa249277f531946144d081024b93a4b507bb19241450ba339034a6708b79b8ef2bef135451a7b58fcc499e7ea6832e6cb684b91de3e50285fb8195196af7cc5d1f3ed552ab2522043e6313fb444a0397196e60ddc8b0141c8ade348a151fcb7858aa2db5650e8d4e81255178c36320a08df56a5723c1ce1f636031a0b7db3d58e575e6bac33f421c5847bf0aaf757140b437eae896ab49bbc22bce109c3b347fbbf679010efb98203de6b2b7fdc97c7dacabde7c6e0519e931a5ab407f9fca8773605f5949a4f7857de2b540ac9b0f3c75093f9669338e44666a8373d696c79c3f028f9747b960f479226be28d946101da0394a5049d0631015996e5dcc95ce1d26036575278de541d5e180e627eb5f9a5c94e9e85d4604d3ca29de75533279c1344dfba51fdbbb7358292145873c80ee967532243d7bfffa4ad120aefb6ce5580aea7a4b6707c6330c85eed3e959c7d53f9777cedb4a66fd548ce9a3f32f4956e545b4c918b7d32432ccdf3eeaf54cb1e4ac51043587cd7578814e1ccd49db6dbec03be7251f8acc416000cc4baf9fd56f3982c5ffcaaa1f881c9bf0d2e5d55a4bbf4179c7887d21bcfa3987250398b4c1ac6bb8a23a2287a87ac9564557b7e6cb59a8ce49f2d3a384b66d009b170334b0e0c50bdaf00edb5df3a9a4f4d49d10d3327dc26c1a5a1b628a62ddd9a5d26c6db260a0140b8a4347e3d89314baf81dea18d1616887b1b2df6e08b17fa0010129aec71aa2e4fccdc9c7c2f237272255ea84d7c615ead38426e470191af58adedea4ffb432ef69a35898e81dbfd3d0131cbd04a1532edf79159e27f0c451939cf86ef15ea8830049681de8ca8c6af97a2e5706cad8216eb40564a1a2ee3e8fc5188796f9d4bbf0e66e99d586da79f80ba319f17b7f8e74821f507ba65fb41543b940ae6a374d7f32d592f6b039018193c2c4544528200e8050b7c0d0911c677c30598bcc8b09512b0505ab9b83dc9923679d02bc91871244dcc006ff885f50973d70dbe4db3bf909a69ec1dab470a56a932c8cf9000cb583575eae90fc08dfe08f81cbe876f7c67cd853843691119191d40dd35059a61f68be7363a52adc85b2dbc1dfc1b3072acc1d9365f2be282747072f43616a2b4ccae92dd28ca32aee72f9d3fb6b0efa314a2c5e11d98594c97af7d8297b5a32270bda16b1c153cfe1705c571d4e71c63ee50273ebe486926ec9a05dd418dc8dc4d63ae8f410b5dc05560f084f6410ecf538ede3ea04d567ffb403143ca6c5803f491f9fdf5cc35b588e70e54e2ee76f88cf63400f6713350c103e338c05720d708bc8c476e00a00d6c12b3a833f9f8f2d631d3a6bb40fea734cc1e51294845e3d83e7d4348690d08e7dcfb8a148446efc8ad62adcc44963bd0f576957f10455f84a79b76b1d8a5456049425e28cb3ba1c4dafe34f8186c1632b9fd10b8370e419836711daa94a29d6634e3fb6858a8c2db7e377c9b90ce2c3510c749029b496aabf827a940119b16ce827cc3b2e5169069ace82c2c751404bc1b5779657755905a3c49f2beb8f67f1273d68783d76d4757eefa2a9c67c4beddb892dc875d623791e431b356b9497938878777886fdd94b8e9dfdeb2b37d831efdad6de555ef4712c1d5e0cf4fa6036de5902d86f862f2397e1f7ad8f20936e654b8586915db6e89e6d9b40c3b8b6d1f48f2f8234888256d899a19ef35af37af51832056b50fe4322c7ceed49f28faf9bd458eee7507544ac2dbd6b0ef098dc3197b12410c6c8e11beb41d12c785eb7765ff5d39f3e7398dded6067a42f1be818d8e86b0aacb23a6d0560c3e09dee4d93751b9d869cc20f2e8912bd6e75d35d3e0040fc480c9cc0fa77ea7752085d7a00c1e8696b55bda0515e54454871bf1bf004b4b53b2b16fc5de96d23bec03120db5371500d5f4bc5edf758d5cd0d2109d53500b8d1d3863d23e24357d4a3020eb9ad68ef7b8d00ef96a1b91de383cbdeaaa7bbd8d2a23a9434bc607a8e56265b2bc3c631dd4f804ead7a3f378289c3db3ea6727e22a1bd2afdbe93b9015f1203cacc58c3f8679cabeb12598fc7562770725253386eb24d5881c18db244df50497a0d67a6264856372106a1c3c2b1f233b2a000ffa4679fce543c0d1a2e5a59175d26d5e00b805f98545beab8f461847ef5a9ebfb559cbf0f5192545071a505dd13536c27fa99ca1557976124c3cb113b0f8897b021e4ca55f702cd994e4f04511ce6a18940a70927a72554aeb0c5c56cd17a29d96dc15df81a18b961dfacd7c3a015f73178e53764ac4138feaa80335cc0ac5ef4c0f168cf3cffd1f21ff6d3844814eb96435df14e10ababfc54b776531b3e3d82a41237b0620145ca27a4f0a40676e2ea3a3bb8d552c77f37dbdea1f800935a2db7265524033ca62ab6fa8aeb18a72ebff507273c0a90586a354d3ced8ce884deaa2bd0aaff0647c5146ef9afe8e9cada36380ddbf67facb8fa1d01402450ebbcf52ab972447f03a6ce22e8d09cb5887085c39b37a05be98c3ac1c8ce62d2bd773dc268fdf5ef9cae61bb3388fe153c1083d7e38799032157ab75200af55568c788f8ecfced1684bb27436aad0f58678f0097297683b46dcc99d71b45f8de0ac25009981502e8f681271f7d3bbcc75db907e16a2bd58a805d90eb84e0ac988101de2b2f946a1d05199c98cdc6c1dc49d591930097584fad3077f344018499112392d02efbc60b130e04a2317724f397a8d851b2990ec6569e4be6c0e0b8bb3c2e05513806cecffb3e081d0f7d4b81f3677cf2fc431b5c126327d7f46020296ff0838b445b1e5df83d0d475bf68ae5d8006bab0b775ca8143b58e03d9457a4c2ad8c70dc428866fa3b1f20783d03fa92c90c856956fc73b6963081fe27771f33ab1242fe88e63414eaeb5cc5838acba6b5deca6e54005f6f6404892ba5db515daad2c130755926c566370bce9a185cfb8f1fef200df39eda476d19871d5d10580be6a0658db280ce9c26f2fe686ccebe1642bf91ec60eda1fae2ab9e62e598c2a355c6e0bbce39daf1f296c8a84408c07baba840773bcb31c8d4adc3cd5f699c6bba6be8f79a15e8fb7f7c5450e8261251da9bf7c6111aa9d3c3ca0f02f14ecd056a3659dca1b828263b13aa6106bfeca5134cb5d457f7ce95be3b79c0199a86b468d5c22932ed5e3259fb6c3c750bbfa35e84d964f6ca5a4ce4839a6734c8787c12936b7d7892724bd04994340b3a8efcd935563f1a079ed609b11888d06e1849ff61a96c93929e6d80cb7d16dea5cf28a2397f09294eae4a38283a527c1faa40d1bf755d5a581483c2fe39149fa63b83d2e0ad26e4f5efbf833", 0x0}, 0x18) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) accept(r1, 0x0, &(0x7f0000000200)) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000440)={&(0x7f0000000400)}) tee(r1, r2, 0x3, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r1, 0x7, 0x1, 0x3, &(0x7f00000001c0)=[0x0], 0x1}, 0x20) write$FUSE_POLL(r1, &(0x7f0000000140)={0x18, 0x0, 0x1, {0x9}}, 0x18) write$P9_RFLUSH(r4, &(0x7f0000000480)={0x7, 0x6d, 0x1}, 0x7) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0xf145, 0x1, 0x5, 0x40]}) ptrace$getregs(0xc, 0x0, 0x5, &(0x7f00000004c0)=""/58) sendfile(r4, r4, &(0x7f00000000c0), 0x0) [ 316.953444] syz-executor0 (9978) used greatest stack depth: 13064 bytes left [ 317.005288] audit: type=1800 audit(1545101953.689:42): pid=10011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16594 res=0 [ 317.348107] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 02:59:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x40480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='cpuset$)vboxnet1,cgroup^)\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000500)=""/73) recvfrom$inet6(r0, 0x0, 0x0, 0x2, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @loopback, 0x101}, 0x1c) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) write(r0, &(0x7f0000000140), 0x0) 02:59:14 executing program 1: syz_open_dev$dri(0x0, 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00`\x9f\xb8\xabt\xb0\xf3\x0e\xf7\x04\x8eG\t)\x88\x9a&\x05\xdc\x92\xff\xa1\x93~\'\xb8K]5\x11\xd2\xe9\\\xcc\xfdfV\xe1\xe42W\xe6@\b1\x98w\x0e]\xab4A\xb5', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {0x0}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r3, 0x0, 0x800000000001}, 0x14) r6 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000001ac0)=""/4096) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r7, r5, 0x0, 0xb, &(0x7f0000000140)='/dev/vsock\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xffffffffffffffc2, &(0x7f0000000040)='/proc/self/attr/current\x00'}, 0x30) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl$TIOCSPGRP(r3, 0x5410, 0x0) 02:59:14 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e20, @rand_addr=0x2b9}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) pipe2(0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000540)={0x3}) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x80000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/\x01\x00op_packet\x00-X\xb2H\t\x00\x00\x00(D', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000003c0)={0xff5, 0x698, 0x6, 0x7}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f0000000c00)={0x0, 0xfb, 0x1015, 0x3, 0xfff, "a5744d9ae4b043c08e0fc4f3d73b0c01", "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"}, 0x1015, 0x3) bind$bt_sco(r3, &(0x7f0000000040), 0x8) listen(r3, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={0x0, r2}, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') memfd_create(&(0x7f0000000000)='.\x00', 0x1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x0) move_pages(0x0, 0x4, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f00000001c0), 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000380)='\x00', 0x1, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) accept$unix(r3, &(0x7f0000000840)=@abs, &(0x7f0000000740)=0xfffffffffffffe90) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x581000, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0xc40, 0x5, 0x10001, 0x5, 0x9, 0x4, 0x9}, 0x1c) [ 317.562088] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 02:59:14 executing program 4: syz_open_dev$sndtimer(0x0, 0x0, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd) write$evdev(r1, &(0x7f0000000600)=[{{}, 0x0, 0xffffffffffffff01}, {{0x0, 0x7530}, 0x0, 0x101, 0x237}], 0x30) gettid() getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001800)=ANY=[@ANYBLOB="f2000000b239db7c5135f4952cd2bc7a805df6a5f5461ccad2415f6d58a0416d2bb95c969771e1972be6a8a007f875d49e18995f493b6f31592c4bd3117d6967fd3eaca8eba98d09afb9a9c3117737a8afaf3957da19ac62d7cead4a7d237089ef0c6e311c162e796b02ab6c47aa4974e02eb20807887d3140a964762103b8fd1fb65f675c6154e88c95a80f401ea48a4d77165b5948121a064e6179908160338321b2c6380af03e06dc72bbf08360052b409372b35a9bbb463df383dde213d85cd3095dd6431de7dbf6b1fba266a992ddbb0ad8069614e8346f1874a2400f215b7a34192015d380333b42351aea23fa0cf26fd3fb44445b94bc"], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x42a}, &(0x7f0000000280)=0xfffffffffffffd47) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000017c0)={0x287, "75d1679892429585d6c46d6f40f4d34d91ff84b7908403368d478b5cdfea2f15", 0x1, 0x1}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001780)={@remote, 0x4c}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000680)={@local, @remote, 0x0}, &(0x7f0000001640)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x1a, &(0x7f0000001a00)=ANY=[@ANYBLOB="c0b65ffdff0000009c51e0ff09000000a53500e4000005009067799dec7aaea2b231a37c5366b1b77b71baa222b7676da274730823303aa54fd838f0d68ec1655bed444932cda4cab76c62a6057e392c623d4864de25a1387e4f873f5f9623145b6069b6f8893e08bfa9ecbdbc845f8ce6be828ac1af8e1788d12f9c9a45577163f8fb93963123cc137017bb95919476c31abe05876e6a2bc2daa4c48fe7a4b9ba7a3495d6d9b9be0359c8ec468dcc9b049cb461ac31ce9f78b470b9d1036affc6653875011a4b55d530fda54b3c21600c"], 0x0, 0x401, 0x0, 0x0, 0x40f00, 0x1, [], r3, 0x2}, 0x48) fallocate(r1, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f00000006c0)="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", 0x0}, 0x18) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) accept(r1, 0x0, &(0x7f0000000200)) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000440)={&(0x7f0000000400)}) tee(r1, r2, 0x3, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r1, 0x7, 0x1, 0x3, &(0x7f00000001c0)=[0x0], 0x1}, 0x20) write$FUSE_POLL(r1, &(0x7f0000000140)={0x18, 0x0, 0x1, {0x9}}, 0x18) write$P9_RFLUSH(r4, &(0x7f0000000480)={0x7, 0x6d, 0x1}, 0x7) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0xf145, 0x1, 0x5, 0x40]}) ptrace$getregs(0xc, 0x0, 0x5, &(0x7f00000004c0)=""/58) sendfile(r4, r4, &(0x7f00000000c0), 0x0) 02:59:14 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:59:14 executing program 0: syz_open_dev$sndtimer(0x0, 0x0, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd) write$evdev(r1, &(0x7f0000000600)=[{{}, 0x0, 0xffffffffffffff01}, {{0x0, 0x7530}, 0x0, 0x101, 0x237}], 0x30) gettid() getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x42a}, &(0x7f0000000280)=0xfffffffffffffd47) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000017c0)={0x287, "75d1679892429585d6c46d6f40f4d34d91ff84b7908403368d478b5cdfea2f15", 0x1, 0x1}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001780)={@remote, 0x4c}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000680)={@local, @remote, 0x0}, &(0x7f0000001640)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x1a, &(0x7f0000001a00)=ANY=[@ANYBLOB="c0b65ffdff0000009c51e0ff09000000a53500e4000005009067799dec7aaea2b231a37c5366b1b77b71baa222b7676da274730823303aa54fd838f0d68ec1655bed444932cda4cab76c62a6057e392c623d4864de25a1387e4f873f5f9623145b6069b6f8893e08bfa9ecbdbc845f8ce6be828ac1af8e1788d12f9c9a45577163f8fb93963123cc137017bb95919476c31abe05876e6a2bc2daa4c48fe7a4b9ba7a3495d6d9b9be0359c8ec468dcc9b049cb461ac31ce9f78b470b9d1036affc6653875011a4b55d530fda54b3c21600c"], 0x0, 0x401, 0x0, 0x0, 0x40f00, 0x1, [], r3, 0x2}, 0x48) fallocate(r1, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f00000006c0)="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", 0x0}, 0x18) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) accept(r1, 0x0, &(0x7f0000000200)) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000440)={&(0x7f0000000400)}) tee(r1, r2, 0x3, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r1, 0x7, 0x1, 0x3, &(0x7f00000001c0)=[0x0], 0x1}, 0x20) write$FUSE_POLL(r1, &(0x7f0000000140)={0x18, 0x0, 0x1, {0x9}}, 0x18) write$P9_RFLUSH(r4, &(0x7f0000000480)={0x7, 0x6d, 0x1}, 0x7) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0xf145, 0x1, 0x5, 0x40]}) ptrace$getregs(0xc, 0x0, 0x5, &(0x7f00000004c0)=""/58) sendfile(r4, r4, &(0x7f00000000c0), 0x0) 02:59:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000040), 0x4000000000005a0, 0x0) [ 317.993283] audit: type=1800 audit(1545101954.669:43): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor4" name="bus" dev="sda1" ino=16806 res=0 02:59:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0xffffffffffff6560) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000090a43ba5d806055b6fdd80b40000000060001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) r2 = dup(r0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000005c0)) getresuid(&(0x7f0000000e40), 0x0, &(0x7f0000000ec0)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000e28000/0x18000)=nil, 0x0, 0x0, 0x20, &(0x7f0000000100)=[@cr0={0x0, 0x40010000}, @cr4={0x1, 0x20000}], 0x2) getgroups(0x0, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000000800)}], 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x21000000, &(0x7f0000fff000/0x1000)=nil}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000480)={@pppoe={0x18, 0x0, {0x0, @random="aaaff850bf50"}}, {0x0}, 0x0, 0x40}, 0xa0) r6 = request_key(&(0x7f00000026c0)='dns_resolver\x00', &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)='\x00', 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000140)={0x3, 0x200}) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x4) keyctl$search(0xa, r6, &(0x7f0000002640)='.request_key_auth\x00', &(0x7f0000002680)={'syz'}, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000c00000/0x400000)=nil}) 02:59:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x40480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='cpuset$)vboxnet1,cgroup^)\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000500)=""/73) recvfrom$inet6(r0, 0x0, 0x0, 0x2, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @loopback, 0x101}, 0x1c) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) write(r0, &(0x7f0000000140), 0x0) [ 318.115155] audit: type=1800 audit(1545101954.739:44): pid=10045 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16811 res=0 02:59:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x40480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='cpuset$)vboxnet1,cgroup^)\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000500)=""/73) recvfrom$inet6(r0, 0x0, 0x0, 0x2, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @loopback, 0x101}, 0x1c) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) write(r0, &(0x7f0000000140), 0x0) [ 318.348423] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 318.553076] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 02:59:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000040), 0x4000000000005a0, 0x0) 02:59:15 executing program 4: syz_open_dev$sndtimer(0x0, 0x0, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000100)='./bus\x00', 0xfffffffffffffffd) write$evdev(r1, &(0x7f0000000600)=[{{}, 0x0, 0xffffffffffffff01}, {{0x0, 0x7530}, 0x0, 0x101, 0x237}], 0x30) gettid() getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x42a}, &(0x7f0000000280)=0xfffffffffffffd47) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000017c0)={0x287, "75d1679892429585d6c46d6f40f4d34d91ff84b7908403368d478b5cdfea2f15", 0x1, 0x1}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000001780)={@remote, 0x4c}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000680)={@local, @remote, 0x0}, &(0x7f0000001640)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x1a, &(0x7f0000001a00)=ANY=[@ANYBLOB="c0b65ffdff0000009c51e0ff09000000a53500e4000005009067799dec7aaea2b231a37c5366b1b77b71baa222b7676da274730823303aa54fd838f0d68ec1655bed444932cda4cab76c62a6057e392c623d4864de25a1387e4f873f5f9623145b6069b6f8893e08bfa9ecbdbc845f8ce6be828ac1af8e1788d12f9c9a45577163f8fb93963123cc137017bb95919476c31abe05876e6a2bc2daa4c48fe7a4b9ba7a3495d6d9b9be0359c8ec468dcc9b049cb461ac31ce9f78b470b9d1036affc6653875011a4b55d530fda54b3c21600c"], 0x0, 0x401, 0x0, 0x0, 0x40f00, 0x1, [], r3, 0x2}, 0x48) fallocate(r1, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000180)='./bus\x00', 0x4002, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f00000006c0)="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", 0x0}, 0x18) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) accept(r1, 0x0, &(0x7f0000000200)) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000440)={&(0x7f0000000400)}) tee(r1, r2, 0x3, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r1, 0x7, 0x1, 0x3, &(0x7f00000001c0)=[0x0], 0x1}, 0x20) write$FUSE_POLL(r1, &(0x7f0000000140)={0x18, 0x0, 0x1, {0x9}}, 0x18) write$P9_RFLUSH(r4, &(0x7f0000000480)={0x7, 0x6d, 0x1}, 0x7) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000001700)={0x0, 0x0, [0xf145, 0x1, 0x5, 0x40]}) ptrace$getregs(0xc, 0x0, 0x5, &(0x7f00000004c0)=""/58) sendfile(r4, r4, &(0x7f00000000c0), 0x0) 02:59:15 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x7fffffff, 0x3}}) [ 319.006212] audit: type=1800 audit(1545101955.689:45): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor4" name="bus" dev="sda1" ino=16806 res=0 02:59:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000040), 0x4000000000005a0, 0x0) 02:59:15 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff84, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) 02:59:15 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) 02:59:15 executing program 0: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'nr0\x00', 'team0\x00', 'vlan0\x00', 'veth0_to_team\x00', @remote, [], @remote, [], 0xa0, 0xa0, 0xd0, [@vlan={'vlan\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x0, 0x0, 'bond0\x00', 'team0\x00', 'bond0\x00', 'veth1_to_bridge\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x278) 02:59:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) openat$pfkey(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x40480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000380)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='cpuset$)vboxnet1,cgroup^)\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000500)=""/73) recvfrom$inet6(r0, 0x0, 0x0, 0x2, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @loopback, 0x101}, 0x1c) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, 0x0) write(r0, &(0x7f0000000140), 0x0) 02:59:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback, 0x0, 0x6c}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 02:59:16 executing program 5: read(0xffffffffffffffff, &(0x7f0000000380)=""/141, 0x8d) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000008c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000004c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) connect$unix(r0, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={0x0}, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4840, 0x42) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={r1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000600)={r3, 0x1000000000001f}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="d626000020c69f26fc7191e07f6a1567ee1cf2a75755fed3fa5aaa65ca00575b4b584ef3ea78e4c7d473f6c9f737da45beb2edf0cc19d278ba8a2439027301fd8e244061a2ad3cf2197fe24cc6d8a4f43e"], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000580)) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) [ 319.448690] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 02:59:16 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff84, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) 02:59:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001880)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f0000000080)=""/236) 02:59:16 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff84, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) [ 319.663554] audit: type=1800 audit(1545101956.329:46): pid=10104 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="bus" dev="sda1" ino=16610 res=0 [ 319.747053] audit: type=1804 audit(1545101956.389:47): pid=10107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir632837593/syzkaller.BaP8QF/94/bus" dev="sda1" ino=16610 res=1 02:59:16 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff84, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) 02:59:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 02:59:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140), 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f0000000040), 0x4000000000005a0, 0x0) [ 319.888458] syz-executor4 (10071) used greatest stack depth: 13016 bytes left 02:59:16 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000500, 0x300000000000000, 0x8, 0x1, 0xfffffff4, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) shmctl$SHM_INFO(0x0, 0xe, 0x0) signalfd(r0, &(0x7f0000000180)={0x8}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x0) fcntl$getflags(r0, 0x0) 02:59:16 executing program 0: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000057000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f000002e000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) 02:59:16 executing program 5: read(0xffffffffffffffff, &(0x7f0000000380)=""/141, 0x8d) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000008c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000004c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) connect$unix(r0, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={0x0}, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4840, 0x42) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={r1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000600)={r3, 0x1000000000001f}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="d626000020c69f26fc7191e07f6a1567ee1cf2a75755fed3fa5aaa65ca00575b4b584ef3ea78e4c7d473f6c9f737da45beb2edf0cc19d278ba8a2439027301fd8e244061a2ad3cf2197fe24cc6d8a4f43e"], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000580)) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) 02:59:16 executing program 0: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000057000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f000002e000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) 02:59:16 executing program 1: read(0xffffffffffffffff, &(0x7f0000000380)=""/141, 0x8d) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000008c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000004c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) connect$unix(r0, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={0x0}, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4840, 0x42) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={r1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000600)={r3, 0x1000000000001f}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="d626000020c69f26fc7191e07f6a1567ee1cf2a75755fed3fa5aaa65ca00575b4b584ef3ea78e4c7d473f6c9f737da45beb2edf0cc19d278ba8a2439027301fd8e244061a2ad3cf2197fe24cc6d8a4f43e"], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000580)) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) [ 320.218805] kauditd_printk_skb: 2 callbacks suppressed [ 320.218820] audit: type=1804 audit(1545101956.899:50): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir632837593/syzkaller.BaP8QF/95/bus" dev="sda1" ino=16815 res=1 02:59:17 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x201, 0x100000000009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000000)) 02:59:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x200000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x1, {0x8, 0x4, 0xd96b, 0xd299, 0x2, 0x100000001}, 0x9, 0x7ff}, 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="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") setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) io_setup(0x1, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000900)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140)=0x40000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000240)={0x5, 0x8, 0x5d4b, 0x1, 0x40000000000}) fcntl$setstatus(r3, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) sendfile(r3, r2, &(0x7f0000000180)=0xd0000, 0x100000005) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x0, 0x3}}, 0x14) sendto$inet(r0, &(0x7f0000000980), 0x0, 0x800, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/42, 0x2a, 0x20, &(0x7f00000000c0)={0xa, 0x4e24, 0xd4a, @mcast1, 0x1}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0x0, 0x2, 0x601, 0x40}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) 02:59:17 executing program 0: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000057000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f000002e000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) 02:59:17 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x201, 0x100000000009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000000)) [ 320.451868] audit: type=1800 audit(1545101957.129:51): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor1" name="bus" dev="sda1" ino=16524 res=0 [ 320.519770] audit: type=1804 audit(1545101957.129:52): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/88/bus" dev="sda1" ino=16524 res=1 02:59:17 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000500, 0x300000000000000, 0x8, 0x1, 0xfffffff4, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) shmctl$SHM_INFO(0x0, 0xe, 0x0) signalfd(r0, &(0x7f0000000180)={0x8}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x0) fcntl$getflags(r0, 0x0) 02:59:17 executing program 5: read(0xffffffffffffffff, &(0x7f0000000380)=""/141, 0x8d) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000008c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000004c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) connect$unix(r0, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={0x0}, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4840, 0x42) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={r1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000600)={r3, 0x1000000000001f}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="d626000020c69f26fc7191e07f6a1567ee1cf2a75755fed3fa5aaa65ca00575b4b584ef3ea78e4c7d473f6c9f737da45beb2edf0cc19d278ba8a2439027301fd8e244061a2ad3cf2197fe24cc6d8a4f43e"], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000580)) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) [ 320.576448] syz-executor4 (10128) used greatest stack depth: 12792 bytes left 02:59:17 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x201, 0x100000000009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000000)) 02:59:17 executing program 1: read(0xffffffffffffffff, &(0x7f0000000380)=""/141, 0x8d) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000008c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000004c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) connect$unix(r0, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={0x0}, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4840, 0x42) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={r1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000600)={r3, 0x1000000000001f}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="d626000020c69f26fc7191e07f6a1567ee1cf2a75755fed3fa5aaa65ca00575b4b584ef3ea78e4c7d473f6c9f737da45beb2edf0cc19d278ba8a2439027301fd8e244061a2ad3cf2197fe24cc6d8a4f43e"], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000580)) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) 02:59:17 executing program 0: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000057000)={0xfffffffffffffffe}, 0x0, 0x8) timer_create(0x3, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f000002e000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) [ 320.768112] audit: type=1800 audit(1545101957.449:53): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="bus" dev="sda1" ino=16819 res=0 02:59:17 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x201, 0x100000000009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000000)) [ 320.828615] audit: type=1804 audit(1545101957.479:54): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir632837593/syzkaller.BaP8QF/96/bus" dev="sda1" ino=16819 res=1 02:59:17 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000500, 0x300000000000000, 0x8, 0x1, 0xfffffff4, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) shmctl$SHM_INFO(0x0, 0xe, 0x0) signalfd(r0, &(0x7f0000000180)={0x8}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x0) fcntl$getflags(r0, 0x0) 02:59:17 executing program 5: read(0xffffffffffffffff, &(0x7f0000000380)=""/141, 0x8d) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000008c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000004c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) connect$unix(r0, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={0x0}, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4840, 0x42) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={r1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000600)={r3, 0x1000000000001f}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="d626000020c69f26fc7191e07f6a1567ee1cf2a75755fed3fa5aaa65ca00575b4b584ef3ea78e4c7d473f6c9f737da45beb2edf0cc19d278ba8a2439027301fd8e244061a2ad3cf2197fe24cc6d8a4f43e"], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000580)) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) [ 321.025982] audit: type=1804 audit(1545101957.559:55): pid=10175 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/89/bus" dev="sda1" ino=16821 res=1 02:59:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x174) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x4, 0x0, 0x7f, 0x8, 'syz1\x00', 0x3800000000}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'veth0_to_bridge\x00', @ifru_names='bridge_slave_1\x00'}}) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, &(0x7f00000000c0)=0x80, 0x0) r2 = getgid() getresgid(&(0x7f0000000100), &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = getgid() setgroups(0x3, &(0x7f0000000300)=[r2, r3, r4]) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @mcast2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x6, 0x10000, 0x400, 0x400, 0x7, 0x8}) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0xff, 0x9, 0x3fc, 0x7, 0x3ff}) [ 321.272476] audit: type=1800 audit(1545101957.559:56): pid=10171 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor1" name="bus" dev="sda1" ino=16821 res=0 [ 321.319055] syz-executor2 (10148) used greatest stack depth: 10744 bytes left [ 321.326540] audit: type=1800 audit(1545101957.999:57): pid=10185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="bus" dev="sda1" ino=16819 res=0 [ 321.398441] audit: type=1804 audit(1545101958.059:58): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir632837593/syzkaller.BaP8QF/97/bus" dev="sda1" ino=16819 res=1 02:59:18 executing program 1: read(0xffffffffffffffff, &(0x7f0000000380)=""/141, 0x8d) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000008c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000004c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) connect$unix(r0, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={0x0}, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4840, 0x42) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={r1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000600)={r3, 0x1000000000001f}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r1}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="d626000020c69f26fc7191e07f6a1567ee1cf2a75755fed3fa5aaa65ca00575b4b584ef3ea78e4c7d473f6c9f737da45beb2edf0cc19d278ba8a2439027301fd8e244061a2ad3cf2197fe24cc6d8a4f43e"], 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x0, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6dac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000580)) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) 02:59:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x200000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x1, {0x8, 0x4, 0xd96b, 0xd299, 0x2, 0x100000001}, 0x9, 0x7ff}, 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="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") setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) io_setup(0x1, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000900)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140)=0x40000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000240)={0x5, 0x8, 0x5d4b, 0x1, 0x40000000000}) fcntl$setstatus(r3, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) sendfile(r3, r2, &(0x7f0000000180)=0xd0000, 0x100000005) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x0, 0x3}}, 0x14) sendto$inet(r0, &(0x7f0000000980), 0x0, 0x800, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/42, 0x2a, 0x20, &(0x7f00000000c0)={0xa, 0x4e24, 0xd4a, @mcast1, 0x1}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0x0, 0x2, 0x601, 0x40}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) [ 321.478964] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 321.498671] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 321.510337] loop3: p1 p2 p3 p4 [ 321.689369] audit: type=1804 audit(1545101958.359:59): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/90/bus" dev="sda1" ino=16818 res=1 02:59:18 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000500, 0x300000000000000, 0x8, 0x1, 0xfffffff4, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) shmctl$SHM_INFO(0x0, 0xe, 0x0) signalfd(r0, &(0x7f0000000180)={0x8}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x0) fcntl$getflags(r0, 0x0) 02:59:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x200000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x1, {0x8, 0x4, 0xd96b, 0xd299, 0x2, 0x100000001}, 0x9, 0x7ff}, 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="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") setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) io_setup(0x1, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000900)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140)=0x40000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000240)={0x5, 0x8, 0x5d4b, 0x1, 0x40000000000}) fcntl$setstatus(r3, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) sendfile(r3, r2, &(0x7f0000000180)=0xd0000, 0x100000005) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x0, 0x3}}, 0x14) sendto$inet(r0, &(0x7f0000000980), 0x0, 0x800, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/42, 0x2a, 0x20, &(0x7f00000000c0)={0xa, 0x4e24, 0xd4a, @mcast1, 0x1}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0x0, 0x2, 0x601, 0x40}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) 02:59:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x200000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x1, {0x8, 0x4, 0xd96b, 0xd299, 0x2, 0x100000001}, 0x9, 0x7ff}, 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="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") setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) io_setup(0x1, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000900)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140)=0x40000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000240)={0x5, 0x8, 0x5d4b, 0x1, 0x40000000000}) fcntl$setstatus(r3, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) sendfile(r3, r2, &(0x7f0000000180)=0xd0000, 0x100000005) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x0, 0x3}}, 0x14) sendto$inet(r0, &(0x7f0000000980), 0x0, 0x800, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/42, 0x2a, 0x20, &(0x7f00000000c0)={0xa, 0x4e24, 0xd4a, @mcast1, 0x1}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0x0, 0x2, 0x601, 0x40}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) 02:59:18 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000500, 0x300000000000000, 0x8, 0x1, 0xfffffff4, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) shmctl$SHM_INFO(0x0, 0xe, 0x0) signalfd(r0, &(0x7f0000000180)={0x8}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x0) fcntl$getflags(r0, 0x0) [ 322.251237] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 322.298296] print_req_error: I/O error, dev loop3, sector 101 [ 322.304831] print_req_error: I/O error, dev loop3, sector 1 [ 322.304877] print_req_error: I/O error, dev loop3, sector 301 [ 322.310941] print_req_error: I/O error, dev loop3, sector 1 [ 322.316795] print_req_error: I/O error, dev loop3, sector 201 [ 322.323353] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 322.336804] print_req_error: I/O error, dev loop3, sector 5 [ 322.342588] Buffer I/O error on dev loop3p1, logical block 1, async page read [ 322.350100] print_req_error: I/O error, dev loop3, sector 1 [ 322.355889] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 322.363394] print_req_error: I/O error, dev loop3, sector 5 [ 322.369315] Buffer I/O error on dev loop3p1, logical block 1, async page read [ 322.376924] print_req_error: I/O error, dev loop3, sector 1 [ 322.382730] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 322.390072] print_req_error: I/O error, dev loop3, sector 101 02:59:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x174) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x4, 0x0, 0x7f, 0x8, 'syz1\x00', 0x3800000000}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'veth0_to_bridge\x00', @ifru_names='bridge_slave_1\x00'}}) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, &(0x7f00000000c0)=0x80, 0x0) r2 = getgid() getresgid(&(0x7f0000000100), &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = getgid() setgroups(0x3, &(0x7f0000000300)=[r2, r3, r4]) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @mcast2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x6, 0x10000, 0x400, 0x400, 0x7, 0x8}) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0xff, 0x9, 0x3fc, 0x7, 0x3ff}) [ 322.396147] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 322.403581] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 322.411938] Buffer I/O error on dev loop3p1, logical block 1, async page read [ 322.419387] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 322.426772] Buffer I/O error on dev loop3p2, logical block 1, async page read 02:59:19 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000500, 0x300000000000000, 0x8, 0x1, 0xfffffff4, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) shmctl$SHM_INFO(0x0, 0xe, 0x0) signalfd(r0, &(0x7f0000000180)={0x8}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x0) fcntl$getflags(r0, 0x0) 02:59:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x200000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x1, {0x8, 0x4, 0xd96b, 0xd299, 0x2, 0x100000001}, 0x9, 0x7ff}, 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="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") setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) io_setup(0x1, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000900)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140)=0x40000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000240)={0x5, 0x8, 0x5d4b, 0x1, 0x40000000000}) fcntl$setstatus(r3, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) sendfile(r3, r2, &(0x7f0000000180)=0xd0000, 0x100000005) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x0, 0x3}}, 0x14) sendto$inet(r0, &(0x7f0000000980), 0x0, 0x800, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/42, 0x2a, 0x20, &(0x7f00000000c0)={0xa, 0x4e24, 0xd4a, @mcast1, 0x1}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0x0, 0x2, 0x601, 0x40}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) [ 322.702530] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) 02:59:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x200000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x1, {0x8, 0x4, 0xd96b, 0xd299, 0x2, 0x100000001}, 0x9, 0x7ff}, 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="b2acc17b59768cb96c17b094bb17fc7c64d0bace35c14ecac8d46f0127552d194a7b2cc769274ede17a16cad592374539aa7435fee9f5f9ce12cdbe2a16853cf73e30a0cae3c5da01dc5d435ab7d21f3eb7ac603e93b5ff13901b9b5136143667947acb5b07ce723a7c545ea2d0ef95289075228610caa37517257387acb92b5dfb7efabc67df29d7bfbad45d95f583df0fb621840f78f34c7aeccdd520c7f81fadb3a9fdf8695021162c2b05dc6755da62b99a0934322ae8d4dd34b4b17f35113af63ccd485e122c03c7ec5089769e5d66add1ca9f3a072328e8a5d3d7d133e701e9aaf60a82624fe93d3dcdc2846a3f4a4acae91aa0568a9cda8edd362586e") setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) io_setup(0x1, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000900)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140)=0x40000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000240)={0x5, 0x8, 0x5d4b, 0x1, 0x40000000000}) fcntl$setstatus(r3, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) sendfile(r3, r2, &(0x7f0000000180)=0xd0000, 0x100000005) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x0, 0x3}}, 0x14) sendto$inet(r0, &(0x7f0000000980), 0x0, 0x800, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/42, 0x2a, 0x20, &(0x7f00000000c0)={0xa, 0x4e24, 0xd4a, @mcast1, 0x1}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0x0, 0x2, 0x601, 0x40}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) 02:59:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x200000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x1, {0x8, 0x4, 0xd96b, 0xd299, 0x2, 0x100000001}, 0x9, 0x7ff}, 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="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") setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) io_setup(0x1, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000900)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140)=0x40000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000240)={0x5, 0x8, 0x5d4b, 0x1, 0x40000000000}) fcntl$setstatus(r3, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) sendfile(r3, r2, &(0x7f0000000180)=0xd0000, 0x100000005) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x0, 0x3}}, 0x14) sendto$inet(r0, &(0x7f0000000980), 0x0, 0x800, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/42, 0x2a, 0x20, &(0x7f00000000c0)={0xa, 0x4e24, 0xd4a, @mcast1, 0x1}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0x0, 0x2, 0x601, 0x40}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) 02:59:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x174) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x4, 0x0, 0x7f, 0x8, 'syz1\x00', 0x3800000000}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'veth0_to_bridge\x00', @ifru_names='bridge_slave_1\x00'}}) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, &(0x7f00000000c0)=0x80, 0x0) r2 = getgid() getresgid(&(0x7f0000000100), &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = getgid() setgroups(0x3, &(0x7f0000000300)=[r2, r3, r4]) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @mcast2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x6, 0x10000, 0x400, 0x400, 0x7, 0x8}) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0xff, 0x9, 0x3fc, 0x7, 0x3ff}) 02:59:19 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000500, 0x300000000000000, 0x8, 0x1, 0xfffffff4, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000140)=0xc) shmctl$SHM_INFO(0x0, 0xe, 0x0) signalfd(r0, &(0x7f0000000180)={0x8}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x0) fcntl$getflags(r0, 0x0) [ 323.217713] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 02:59:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x200000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x1, {0x8, 0x4, 0xd96b, 0xd299, 0x2, 0x100000001}, 0x9, 0x7ff}, 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="b2acc17b59768cb96c17b094bb17fc7c64d0bace35c14ecac8d46f0127552d194a7b2cc769274ede17a16cad592374539aa7435fee9f5f9ce12cdbe2a16853cf73e30a0cae3c5da01dc5d435ab7d21f3eb7ac603e93b5ff13901b9b5136143667947acb5b07ce723a7c545ea2d0ef95289075228610caa37517257387acb92b5dfb7efabc67df29d7bfbad45d95f583df0fb621840f78f34c7aeccdd520c7f81fadb3a9fdf8695021162c2b05dc6755da62b99a0934322ae8d4dd34b4b17f35113af63ccd485e122c03c7ec5089769e5d66add1ca9f3a072328e8a5d3d7d133e701e9aaf60a82624fe93d3dcdc2846a3f4a4acae91aa0568a9cda8edd362586e") setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) io_setup(0x1, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000900)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140)=0x40000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000240)={0x5, 0x8, 0x5d4b, 0x1, 0x40000000000}) fcntl$setstatus(r3, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) sendfile(r3, r2, &(0x7f0000000180)=0xd0000, 0x100000005) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x0, 0x3}}, 0x14) sendto$inet(r0, &(0x7f0000000980), 0x0, 0x800, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/42, 0x2a, 0x20, &(0x7f00000000c0)={0xa, 0x4e24, 0xd4a, @mcast1, 0x1}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0x0, 0x2, 0x601, 0x40}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) [ 323.327817] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 323.342821] loop3: p1 p2 p3 p4 02:59:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x200000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x1, {0x8, 0x4, 0xd96b, 0xd299, 0x2, 0x100000001}, 0x9, 0x7ff}, 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="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") setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) io_setup(0x1, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000900)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140)=0x40000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000240)={0x5, 0x8, 0x5d4b, 0x1, 0x40000000000}) fcntl$setstatus(r3, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) sendfile(r3, r2, &(0x7f0000000180)=0xd0000, 0x100000005) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x0, 0x3}}, 0x14) sendto$inet(r0, &(0x7f0000000980), 0x0, 0x800, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/42, 0x2a, 0x20, &(0x7f00000000c0)={0xa, 0x4e24, 0xd4a, @mcast1, 0x1}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0x0, 0x2, 0x601, 0x40}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) [ 323.896340] syz-executor1 (10243) used greatest stack depth: 10664 bytes left 02:59:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000015, 0x5, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=""/222}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt(r1, 0x20000100000114, 0xa, &(0x7f00003cbffc)="02000000", 0x4) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x2, 0x10031, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000adf000)={0x2, 0x0, @loopback}, 0x10) sendmsg$alg(r1, &(0x7f0000159fc8)={0x0, 0x0, &(0x7f0000fc8000), 0x0, &(0x7f0000000e8e)}, 0x0) 02:59:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x200000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x1, {0x8, 0x4, 0xd96b, 0xd299, 0x2, 0x100000001}, 0x9, 0x7ff}, 0xe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) openat$cgroup_ro(r1, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="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") setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value, 0x8) io_setup(0x1, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000900)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r3 = creat(&(0x7f00000005c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000140)=0x40000) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000240)={0x5, 0x8, 0x5d4b, 0x1, 0x40000000000}) fcntl$setstatus(r3, 0x4, 0x86100) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000002c0)=0x2) sendfile(r3, r2, &(0x7f0000000180)=0xd0000, 0x100000005) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x10, 0x0, 0x3}}, 0x14) sendto$inet(r0, &(0x7f0000000980), 0x0, 0x800, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/42, 0x2a, 0x20, &(0x7f00000000c0)={0xa, 0x4e24, 0xd4a, @mcast1, 0x1}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0x0, 0x2, 0x601, 0x40}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) 02:59:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x174) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x4, 0x0, 0x7f, 0x8, 'syz1\x00', 0x3800000000}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'veth0_to_bridge\x00', @ifru_names='bridge_slave_1\x00'}}) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, &(0x7f00000000c0)=0x80, 0x0) r2 = getgid() getresgid(&(0x7f0000000100), &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) r4 = getgid() setgroups(0x3, &(0x7f0000000300)=[r2, r3, r4]) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @mcast2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x6, 0x10000, 0x400, 0x400, 0x7, 0x8}) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0xff, 0x9, 0x3fc, 0x7, 0x3ff}) 02:59:20 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a", 0x50, 0x10000}], 0x0, 0x0) 02:59:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0=\xb4\x86,g\xc3\xda\x87\x00\x19\x00', 0x4}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 02:59:21 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x1ffd, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) bind$xdp(r2, &(0x7f0000000840), 0x10) [ 324.394407] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 324.475542] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 324.502438] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 756082810144684242 /dev/loop0 [ 324.508959] loop3: p1 p2 p3 p4 02:59:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000003c0)={0x0, 0x11000}) 02:59:21 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x503, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 02:59:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003ec0)=[{0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000170100000200000001003500be000000"], 0x18}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0743cc05e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18}], 0x18}], 0x4924944, 0x0) 02:59:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000003c0)) execve(0x0, 0x0, 0x0) getitimer(0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setpgid(0x0, 0x0) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000008c0)={0x7}, 0x7) 02:59:21 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a", 0x50, 0x10000}], 0x0, 0x0) [ 325.110047] syz-executor1 (10286) used greatest stack depth: 10648 bytes left 02:59:21 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1200, 0xb, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x1, 0x81, 0x1, 0x400, 0x7968, 0x5, 0x6, 0x5, 0x0, 0x0, 0xb6, 0x0, 0xc50c, 0xf8c, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x5, 0xf6e, 0x1000000000000000, 0x8001, 0x3, 0x0, 0xd2b, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4ce, 0x3, 0x3, 0x100}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = geteuid() stat(&(0x7f0000000240)='./file0\x00', 0x0) chown(0x0, r0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{}, {0x8, 0x4}], {0x10, 0x2}}, 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=@md0='/dev/md0\x00', &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='bpf\x00', 0x0, &(0x7f0000000480)='system.posix_acl_access\x00') openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) 02:59:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r3, r3) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000080)=0xfffffffffffff001) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x2000, 0x0) socket$inet6(0xa, 0x0, 0xe2) dup(0xffffffffffffffff) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x2, 0x100000001, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000300)={0x0}) 02:59:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) 02:59:22 executing program 2: setpgid(0x0, 0xffffffffffffffff) 02:59:22 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a", 0x50, 0x10000}], 0x0, 0x0) 02:59:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) 02:59:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) ioctl$FIONREAD(r1, 0x80047456, &(0x7f0000000000)) 02:59:22 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1200, 0xb, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x1, 0x81, 0x1, 0x400, 0x7968, 0x5, 0x6, 0x5, 0x0, 0x0, 0xb6, 0x0, 0xc50c, 0xf8c, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x5, 0xf6e, 0x1000000000000000, 0x8001, 0x3, 0x0, 0xd2b, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4ce, 0x3, 0x3, 0x100}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = geteuid() stat(&(0x7f0000000240)='./file0\x00', 0x0) chown(0x0, r0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{}, {0x8, 0x4}], {0x10, 0x2}}, 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=@md0='/dev/md0\x00', &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='bpf\x00', 0x0, &(0x7f0000000480)='system.posix_acl_access\x00') openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) 02:59:22 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x503, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 02:59:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) 02:59:22 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x70}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) 02:59:22 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a", 0x50, 0x10000}], 0x0, 0x0) 02:59:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa421d9531720601cc0dc2652b00140000fe800000a9557c844f3d58c3fbffffffffff"], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000180), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000001c0)="ad", 0x1, 0x0, 0x0, 0x0) 02:59:22 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1200, 0xb, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x1, 0x81, 0x1, 0x400, 0x7968, 0x5, 0x6, 0x5, 0x0, 0x0, 0xb6, 0x0, 0xc50c, 0xf8c, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x5, 0xf6e, 0x1000000000000000, 0x8001, 0x3, 0x0, 0xd2b, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4ce, 0x3, 0x3, 0x100}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = geteuid() stat(&(0x7f0000000240)='./file0\x00', 0x0) chown(0x0, r0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{}, {0x8, 0x4}], {0x10, 0x2}}, 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=@md0='/dev/md0\x00', &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='bpf\x00', 0x0, &(0x7f0000000480)='system.posix_acl_access\x00') openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) 02:59:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r3, r3) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000080)=0xfffffffffffff001) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x2000, 0x0) socket$inet6(0xa, 0x0, 0xe2) dup(0xffffffffffffffff) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x2, 0x100000001, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000300)={0x0}) 02:59:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f0000000140)=[{{}, 0x1, 0x46}], 0x100da) 02:59:23 executing program 2: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x602400) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) r1 = socket(0x2, 0x802, 0x0) ioctl$int_in(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r2 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0) ftruncate(r2, 0x8007ffc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000480)) sendfile(r1, r2, 0x0, 0x400008bca) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) syz_mount_image$reiserfs(0x0, &(0x7f0000000080)='./file0\x00', 0x5, 0x0, 0x0, 0x401, 0x0) 02:59:23 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1200, 0xb, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x1, 0x81, 0x1, 0x400, 0x7968, 0x5, 0x6, 0x5, 0x0, 0x0, 0xb6, 0x0, 0xc50c, 0xf8c, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x5, 0xf6e, 0x1000000000000000, 0x8001, 0x3, 0x0, 0xd2b, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4ce, 0x3, 0x3, 0x100}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = geteuid() stat(&(0x7f0000000240)='./file0\x00', 0x0) chown(0x0, r0, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000400)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, r3) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {}, [], {}, [{}, {0x8, 0x4}], {0x10, 0x2}}, 0x34, 0x1) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=@md0='/dev/md0\x00', &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='bpf\x00', 0x0, &(0x7f0000000480)='system.posix_acl_access\x00') openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) 02:59:23 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x503, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 02:59:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x4c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 02:59:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r3, r3) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000080)=0xfffffffffffff001) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x2000, 0x0) socket$inet6(0xa, 0x0, 0xe2) dup(0xffffffffffffffff) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x2, 0x100000001, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000300)={0x0}) 02:59:23 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x503, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 02:59:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r3, r3) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000080)=0xfffffffffffff001) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x2000, 0x0) socket$inet6(0xa, 0x0, 0xe2) dup(0xffffffffffffffff) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x2, 0x100000001, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000300)={0x0}) 02:59:23 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f0000000140)=[{{}, 0x1, 0x46}], 0x100da) 02:59:23 executing program 2: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x602400) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) r1 = socket(0x2, 0x802, 0x0) ioctl$int_in(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r2 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0) ftruncate(r2, 0x8007ffc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000480)) sendfile(r1, r2, 0x0, 0x400008bca) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) syz_mount_image$reiserfs(0x0, &(0x7f0000000080)='./file0\x00', 0x5, 0x0, 0x0, 0x401, 0x0) 02:59:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f0000000140)=[{{}, 0x1, 0x46}], 0x100da) [ 327.994702] FAT-fs (loop0): invalid media value (0x00) [ 328.041271] FAT-fs (loop0): Can't find a valid FAT filesystem [ 329.533011] FAT-fs (loop4): invalid media value (0x00) [ 329.538470] FAT-fs (loop4): Can't find a valid FAT filesystem 02:59:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r3, r3) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000080)=0xfffffffffffff001) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x2000, 0x0) socket$inet6(0xa, 0x0, 0xe2) dup(0xffffffffffffffff) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x2, 0x100000001, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000300)={0x0}) 02:59:35 executing program 2: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x602400) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) r1 = socket(0x2, 0x802, 0x0) ioctl$int_in(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r2 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0) ftruncate(r2, 0x8007ffc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000480)) sendfile(r1, r2, 0x0, 0x400008bca) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) syz_mount_image$reiserfs(0x0, &(0x7f0000000080)='./file0\x00', 0x5, 0x0, 0x0, 0x401, 0x0) 02:59:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x20, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc00000000000000}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080), 0x4) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000480)) mlock2(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380), 0xffffffffffffff36) read(0xffffffffffffffff, &(0x7f0000000380)=""/141, 0x8d) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) getpgrp(0x0) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x21) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000004c0)="75aedf1291ab946ed950dda5eafb7811a0b7fb6b44c34df5f82786a3f1d332c0781611927b726b414250795b7a95b8ccb848fc345c9243390c6c8e1c5609b493a111f4780ad6aface0a8d7e697a86704d68a366db0bec984f88a23457304a1029ab5d64886ca3d4ebe5ffa7616e6ddadbe66515e88e66f1b1cbb0a8f973e4bc2aaec8941e249ccd92f77833e4c3517a0409e7715f4d7dbe1a7164a5d2160f892", 0x0, 0x3}, 0x20) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f00000007c0)={0x4, 0x2, &(0x7f0000000700)="c5882c8dc8f1042cdad2e4c819b1a1b506ac6b9781a7a76ff95248fb1718f2f09de54cb090ff00f4fea2a1084c720e59156cf0796271e7893a9f4ba1916d097369577d0727193da2c4d5bcdc2bb9f5c5bd5252f715c39e3548ec20342ba822ffc019dfd84531fe7e9ca4fd724af47878948712fa8df40da30e2a1888b1511759a0c3467afac50b159c5818f7fc820b7c887acf05bf408b14d371eb9e535a498043", {0x2, 0x3, 0x41323151, 0x9, 0x20, 0x1f, 0xf, 0x7fff}}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x5, 0x4500000000000003, 0x2200, 0x80ffff00000000, 0xa0008000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffa0010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x6dac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xc, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 02:59:35 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r1, &(0x7f0000000140)=[{{}, 0x1, 0x46}], 0x100da) 02:59:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r3, r3) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000080)=0xfffffffffffff001) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x2000, 0x0) socket$inet6(0xa, 0x0, 0xe2) dup(0xffffffffffffffff) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x2, 0x100000001, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000300)={0x0}) 02:59:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r3, r3) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000080)=0xfffffffffffff001) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x2000, 0x0) socket$inet6(0xa, 0x0, 0xe2) dup(0xffffffffffffffff) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x2, 0x100000001, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000300)={0x0}) 02:59:36 executing program 3: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) r1 = socket$inet6(0xa, 0x200000000000001, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @multicast1}}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000180)=0x40) setsockopt$inet_buf(r1, 0x0, 0x100000040, &(0x7f0000000040), 0x0) [ 339.469134] kauditd_printk_skb: 1 callbacks suppressed [ 339.469157] audit: type=1804 audit(1545101976.139:61): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir632837593/syzkaller.BaP8QF/105/bus" dev="sda1" ino=16864 res=1 02:59:36 executing program 2: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x602400) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) r1 = socket(0x2, 0x802, 0x0) ioctl$int_in(r1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r2 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0) ftruncate(r2, 0x8007ffc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000480)) sendfile(r1, r2, 0x0, 0x400008bca) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) syz_mount_image$reiserfs(0x0, &(0x7f0000000080)='./file0\x00', 0x5, 0x0, 0x0, 0x401, 0x0) 02:59:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 02:59:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x68, r1, 0x101, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x4c, 0x14, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 02:59:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) 02:59:36 executing program 2: socketpair$unix(0x1, 0x2000000003, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x520d0000, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) [ 341.016146] FAT-fs (loop0): invalid media value (0x00) [ 341.025487] FAT-fs (loop0): Can't find a valid FAT filesystem [ 341.357479] FAT-fs (loop4): invalid media value (0x00) [ 341.483102] FAT-fs (loop4): Can't find a valid FAT filesystem 02:59:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r3, r3) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000080)=0xfffffffffffff001) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x2000, 0x0) socket$inet6(0xa, 0x0, 0xe2) dup(0xffffffffffffffff) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x2, 0x100000001, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000300)={0x0}) 02:59:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000005907, 0xffffffff00000024, 0x8, 0x1, 0xc000000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:59:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 02:59:47 executing program 2: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 02:59:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$unix(0x1, 0x1, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, 0x0, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x507000}]) 02:59:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000005907, 0xffffffff00000024, 0x8, 0x1, 0xc000000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:59:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r3, r3) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000080)=0xfffffffffffff001) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x2000, 0x0) socket$inet6(0xa, 0x0, 0xe2) dup(0xffffffffffffffff) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x2, 0x100000001, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000300)={0x0}) 02:59:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = dup2(r3, r3) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000080)=0xfffffffffffff001) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhci\x00', 0x2000, 0x0) socket$inet6(0xa, 0x0, 0xe2) dup(0xffffffffffffffff) r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000)) pselect6(0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x2, 0x100000001, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000300)={0x0}) 02:59:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 02:59:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 02:59:49 executing program 2: syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x8, &(0x7f0000000480)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x400000000000009, 0x0, 0x2, 0xffffffffffffff9c}]) 02:59:49 executing program 1: ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000080)={0x9, "716ba9a5ecb7a19aa869928e11049d7c472d4ce0b29290bd36968f721ecaa089", 0x0, 0x10, 0x0, 0x9, 0x5, 0x0, 0x0, 0x6}) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0xfffffffffffffffe, &(0x7f0000000100)='\n\\-$<') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x6, 0x209e20, 0x1, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000040)={r1, &(0x7f0000000000), 0x0}, 0x18) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e22, @dev}}) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) 02:59:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:59:49 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) [ 353.202329] FAT-fs (loop0): invalid media value (0x00) [ 353.346907] FAT-fs (loop0): Can't find a valid FAT filesystem 02:59:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 353.828417] FAT-fs (loop4): invalid media value (0x00) [ 353.835415] FAT-fs (loop4): Can't find a valid FAT filesystem 02:59:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000005907, 0xffffffff00000024, 0x8, 0x1, 0xc000000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:59:50 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000100)=""/207, &(0x7f0000000000)=0xcf) 02:59:51 executing program 1: clock_nanosleep(0x9, 0x37dc12502000000, &(0x7f0000000100), 0x0) 03:00:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x40, 0xa9, 0x5, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000000140)="1dbfb9596c94f49780388b97450b3e2675dc81870047943b2ed2bf99a9b768c42bc055be87d12d9f30f4d7f33e1b136d6450c664a46e0ac5eaf8dd7b1d138d0d11"}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @loopback}, &(0x7f00000001c0)=0xc) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180), &(0x7f00000003c0)=""/128}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000001c0), &(0x7f00000000c0)=""/50}, 0x18) 03:00:02 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="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", 0x143, 0x10000}], 0x0, 0x0) 03:00:02 executing program 0: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) 03:00:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) munmap(&(0x7f0000831000/0x1000)=nil, 0x1000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) 03:00:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r4, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000005907, 0xffffffff00000024, 0x8, 0x1, 0xc000000000000, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:00:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8971, &(0x7f0000000080)={'team0\x00', 0x0}) close(r2) close(r1) 03:00:02 executing program 0: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) 03:00:02 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) add_key(&(0x7f0000000880)='keyring\x006\xf9\x12l\x12\x05O\\\x0e\x18\xc6R%s\xddy\xf1\xa0\xa3\xa6\tW\xd6\xc7)\xad\x85l\xd8\xf0\xdf\x9c\x04\xd1\x8eW\x90K\x1c\x05 \x9d\xee\x12\xf5\xcc\xc1-\x98\xa7\x007g46a\x0f\xaa\xc8\x8b\xcf\x96\x81\x91\x87\x89\xc2\xadG6e\x98K\x17\x86\x8d\x9c^\x90\x81>\x9e\xc1\xf7?\xde\xbfV8\xf9\xc0\x1f\x88!\xf1\xf7\x8e\xba\xc9\x84\xe3\x85.\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000180)='$proc--bdev\x00', 0x0) exit(0xffffffffffff8000) 03:00:02 executing program 5: fstat(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000006c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r2, &(0x7f0000000100)={r0, r3}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000280)="8ac229c93973c0904b8bd25bcf4ced80a6cc161cc28a6426bf494d629a2be78bc8b386d6200bda54e79a6649a54db91595cd00133fc3002f742810beebc5b63f200a81f966dfcdba4a11e4b1afb84e62d049b04233154152e3d2a1ba516812d13574e7bb4b65e44930793a1ae4e60ab6618afaa471b9ded279d71d2930a2bc08873f1d7121ce4c98f9fe8f392eb5cf41fa9efb476cdcc31807f236257c839eb5702718b66c57d2a669aa83645cdba195de84db936e1cb918f756c4dbbc1b4c38cdca69a59d7448ec27a531fa7e29ed28139c77b3b6c58e09619dfa4f4e5a0c81bf4cdf4c0ebdd9de2c25e0b044bb9084de0586cf0824bc") ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f00000001c0)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b3d851d1e606b1b00000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) 03:00:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000000d000040051c0000050827d29e89a533c54781400000000001000000000000002500000effffff6700040000000000000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x38f, 0x0, 0xffffffffffff8000}]}) 03:00:02 executing program 0: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) 03:00:02 executing program 0: r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) open$dir(0x0, 0x0, 0x0) 03:00:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000000d000040051c0000050827d29e89a533c54781400000000001000000000000002500000effffff6700040000000000000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x38f, 0x0, 0xffffffffffff8000}]}) 03:00:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00\x00\x03\x00', 0x200008000005}) socket$inet6(0xa, 0x0, 0x0) 03:00:02 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0) 03:00:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) munmap(&(0x7f0000831000/0x1000)=nil, 0x1000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) 03:00:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000000d000040051c0000050827d29e89a533c54781400000000001000000000000002500000effffff6700040000000000000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x38f, 0x0, 0xffffffffffff8000}]}) 03:00:03 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0) 03:00:03 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x11, 0x2, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000000, 0x0, 0x20000) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="000627bd7000fbdbdf250b000000440002000800070000000000080005000900000008000500ff03000008000400030000000800050001800000080004000600000008000400080000000800030007000000be35326d4e231d591c114cd2920c07fb0a12e845c5ad454671f65b8aa24e67696aed041abb32bb0b98b094951a57f6a3e79f16fc7e867e2c57b1c55742dfa9a79d7ae20f0aeadd60b36015a6187445ac2083b97fc413bb7722f895120e66d6b32491c7c52532e9eac957d5aceed262de85b5869be2f2fea63b7088061c08f3298eae238fff9277d28df76d4503dfad8fa746a63667fb4df4091ec3"], 0x1}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mincore(&(0x7f0000a56000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x328) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10004}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x100, 0x308) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x50b1040a}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 03:00:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x0, 0x8}) 03:00:03 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0) 03:00:03 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0) 03:00:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000000d000040051c0000050827d29e89a533c54781400000000001000000000000002500000effffff6700040000000000000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x38f, 0x0, 0xffffffffffff8000}]}) [ 367.030830] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 03:00:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x0, 0x8}) 03:00:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) munmap(&(0x7f0000831000/0x1000)=nil, 0x1000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) [ 369.078582] device lo entered promiscuous mode [ 369.084524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 03:00:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00\x00\x03\x00', 0x200008000005}) socket$inet6(0xa, 0x0, 0x0) 03:00:05 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af80f0100000069a2f8ff07000000bf2000000000000095"], 0x0}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9, 0x300000000000000, {0x0, 0x0, 0x0, 0x26}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 03:00:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x0, 0x8}) 03:00:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) munmap(&(0x7f0000831000/0x1000)=nil, 0x1000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) 03:00:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) munmap(&(0x7f0000831000/0x1000)=nil, 0x1000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) [ 369.245325] device lo left promiscuous mode [ 369.806118] device lo entered promiscuous mode 03:00:06 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x11, 0x2, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000000, 0x0, 0x20000) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="000627bd7000fbdbdf250b000000440002000800070000000000080005000900000008000500ff03000008000400030000000800050001800000080004000600000008000400080000000800030007000000be35326d4e231d591c114cd2920c07fb0a12e845c5ad454671f65b8aa24e67696aed041abb32bb0b98b094951a57f6a3e79f16fc7e867e2c57b1c55742dfa9a79d7ae20f0aeadd60b36015a6187445ac2083b97fc413bb7722f895120e66d6b32491c7c52532e9eac957d5aceed262de85b5869be2f2fea63b7088061c08f3298eae238fff9277d28df76d4503dfad8fa746a63667fb4df4091ec3"], 0x1}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mincore(&(0x7f0000a56000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x328) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10004}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x100, 0x308) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x50b1040a}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 03:00:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x0, 0x8}) 03:00:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) munmap(&(0x7f0000831000/0x1000)=nil, 0x1000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) 03:00:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) 03:00:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) munmap(&(0x7f0000831000/0x1000)=nil, 0x1000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) 03:00:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00\x00\x03\x00', 0x200008000005}) socket$inet6(0xa, 0x0, 0x0) [ 370.462799] audit: type=1800 audit(1545102007.139:62): pid=10856 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=16904 res=0 03:00:07 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x11, 0x2, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000000, 0x0, 0x20000) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="000627bd7000fbdbdf250b000000440002000800070000000000080005000900000008000500ff03000008000400030000000800050001800000080004000600000008000400080000000800030007000000be35326d4e231d591c114cd2920c07fb0a12e845c5ad454671f65b8aa24e67696aed041abb32bb0b98b094951a57f6a3e79f16fc7e867e2c57b1c55742dfa9a79d7ae20f0aeadd60b36015a6187445ac2083b97fc413bb7722f895120e66d6b32491c7c52532e9eac957d5aceed262de85b5869be2f2fea63b7088061c08f3298eae238fff9277d28df76d4503dfad8fa746a63667fb4df4091ec3"], 0x1}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mincore(&(0x7f0000a56000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x328) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10004}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x100, 0x308) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x50b1040a}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) [ 370.910272] device lo left promiscuous mode 03:00:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(0xffffffffffffffff, 0x400000066fb) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xc7}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x5, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000600)='fuseblk\x00', 0x10000, &(0x7f0000000e40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x8001}}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}]}}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000200)={0x3f, 0x7, 0x89}) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000dc0)) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0xfc}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0af8ff75256400bfa100000000000007010000f8ffffffb702000004000000bf130000000000008500000006000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x8000a0, 0xe, 0x0, &(0x7f0000000300)="00000074000000000000000039e4", 0x0, 0x429}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xe6, &(0x7f0000000440)='\xa0\xb2\xb1k\xa9\xe2o\xe2\xf4M\xcdw\xe7\xb5\xdeg\xd5\xa8+TM\\*\x86\xaf\xa6\x99CY4\xec[\x8a\xac\xdb\xe0\x81\x15Lg\xa5\x7f\x11Gb\x1a\xaf_\x1c\x98o\xc67D\xbb;o\xea\xdf^\xa2\xb7\xb1\xd3\xd9\x13\xe8\x8e\xfb\x17\xa1W\xde\x15\xb1\n\xcc\xf1\xf5\x93 \x90g\xd9\xf7L\xff\x9fzX\xb0\x16\xbb\xb5E\xd1>\xedR\xb8\x04\x04\xb4\xa31'}, 0x30) syz_open_dev$adsp(&(0x7f0000000d00)='/dev/adsp#\x00', 0x80000000, 0x1) execveat(r0, &(0x7f0000000800)='./file1\x00', &(0x7f0000000b80)=[&(0x7f0000000a80)='\xc0vboxnet0nodevvboxnet0self\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='dfltuid', &(0x7f0000000b40)='syzkaller\x00'], &(0x7f0000000cc0)=[&(0x7f0000000bc0)='nodevmap', &(0x7f0000000c40)=')\x00', &(0x7f0000000c80)='trusted.overlay.origin\x00'], 0x100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000002c0)="b86dfa32da56c4eaa38d2491c97f7b81570dc6167c", 0x0}, 0x20) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) 03:00:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(0xffffffffffffffff, 0x400000066fb) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xc7}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x5, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000600)='fuseblk\x00', 0x10000, &(0x7f0000000e40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x8001}}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}]}}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000200)={0x3f, 0x7, 0x89}) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000dc0)) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0xfc}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0af8ff75256400bfa100000000000007010000f8ffffffb702000004000000bf130000000000008500000006000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x8000a0, 0xe, 0x0, &(0x7f0000000300)="00000074000000000000000039e4", 0x0, 0x429}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xe6, &(0x7f0000000440)='\xa0\xb2\xb1k\xa9\xe2o\xe2\xf4M\xcdw\xe7\xb5\xdeg\xd5\xa8+TM\\*\x86\xaf\xa6\x99CY4\xec[\x8a\xac\xdb\xe0\x81\x15Lg\xa5\x7f\x11Gb\x1a\xaf_\x1c\x98o\xc67D\xbb;o\xea\xdf^\xa2\xb7\xb1\xd3\xd9\x13\xe8\x8e\xfb\x17\xa1W\xde\x15\xb1\n\xcc\xf1\xf5\x93 \x90g\xd9\xf7L\xff\x9fzX\xb0\x16\xbb\xb5E\xd1>\xedR\xb8\x04\x04\xb4\xa31'}, 0x30) syz_open_dev$adsp(&(0x7f0000000d00)='/dev/adsp#\x00', 0x80000000, 0x1) execveat(r0, &(0x7f0000000800)='./file1\x00', &(0x7f0000000b80)=[&(0x7f0000000a80)='\xc0vboxnet0nodevvboxnet0self\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='dfltuid', &(0x7f0000000b40)='syzkaller\x00'], &(0x7f0000000cc0)=[&(0x7f0000000bc0)='nodevmap', &(0x7f0000000c40)=')\x00', &(0x7f0000000c80)='trusted.overlay.origin\x00'], 0x100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000002c0)="b86dfa32da56c4eaa38d2491c97f7b81570dc6167c", 0x0}, 0x20) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) 03:00:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(0xffffffffffffffff, 0x400000066fb) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xc7}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x5, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000600)='fuseblk\x00', 0x10000, &(0x7f0000000e40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x8001}}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}]}}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000200)={0x3f, 0x7, 0x89}) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000dc0)) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0xfc}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0af8ff75256400bfa100000000000007010000f8ffffffb702000004000000bf130000000000008500000006000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x8000a0, 0xe, 0x0, &(0x7f0000000300)="00000074000000000000000039e4", 0x0, 0x429}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xe6, &(0x7f0000000440)='\xa0\xb2\xb1k\xa9\xe2o\xe2\xf4M\xcdw\xe7\xb5\xdeg\xd5\xa8+TM\\*\x86\xaf\xa6\x99CY4\xec[\x8a\xac\xdb\xe0\x81\x15Lg\xa5\x7f\x11Gb\x1a\xaf_\x1c\x98o\xc67D\xbb;o\xea\xdf^\xa2\xb7\xb1\xd3\xd9\x13\xe8\x8e\xfb\x17\xa1W\xde\x15\xb1\n\xcc\xf1\xf5\x93 \x90g\xd9\xf7L\xff\x9fzX\xb0\x16\xbb\xb5E\xd1>\xedR\xb8\x04\x04\xb4\xa31'}, 0x30) syz_open_dev$adsp(&(0x7f0000000d00)='/dev/adsp#\x00', 0x80000000, 0x1) execveat(r0, &(0x7f0000000800)='./file1\x00', &(0x7f0000000b80)=[&(0x7f0000000a80)='\xc0vboxnet0nodevvboxnet0self\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='dfltuid', &(0x7f0000000b40)='syzkaller\x00'], &(0x7f0000000cc0)=[&(0x7f0000000bc0)='nodevmap', &(0x7f0000000c40)=')\x00', &(0x7f0000000c80)='trusted.overlay.origin\x00'], 0x100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000002c0)="b86dfa32da56c4eaa38d2491c97f7b81570dc6167c", 0x0}, 0x20) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) 03:00:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(0xffffffffffffffff, 0x400000066fb) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xc7}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x5, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000600)='fuseblk\x00', 0x10000, &(0x7f0000000e40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x8001}}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}]}}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000200)={0x3f, 0x7, 0x89}) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000dc0)) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0xfc}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0af8ff75256400bfa100000000000007010000f8ffffffb702000004000000bf130000000000008500000006000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x8000a0, 0xe, 0x0, &(0x7f0000000300)="00000074000000000000000039e4", 0x0, 0x429}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xe6, &(0x7f0000000440)='\xa0\xb2\xb1k\xa9\xe2o\xe2\xf4M\xcdw\xe7\xb5\xdeg\xd5\xa8+TM\\*\x86\xaf\xa6\x99CY4\xec[\x8a\xac\xdb\xe0\x81\x15Lg\xa5\x7f\x11Gb\x1a\xaf_\x1c\x98o\xc67D\xbb;o\xea\xdf^\xa2\xb7\xb1\xd3\xd9\x13\xe8\x8e\xfb\x17\xa1W\xde\x15\xb1\n\xcc\xf1\xf5\x93 \x90g\xd9\xf7L\xff\x9fzX\xb0\x16\xbb\xb5E\xd1>\xedR\xb8\x04\x04\xb4\xa31'}, 0x30) syz_open_dev$adsp(&(0x7f0000000d00)='/dev/adsp#\x00', 0x80000000, 0x1) execveat(r0, &(0x7f0000000800)='./file1\x00', &(0x7f0000000b80)=[&(0x7f0000000a80)='\xc0vboxnet0nodevvboxnet0self\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='dfltuid', &(0x7f0000000b40)='syzkaller\x00'], &(0x7f0000000cc0)=[&(0x7f0000000bc0)='nodevmap', &(0x7f0000000c40)=')\x00', &(0x7f0000000c80)='trusted.overlay.origin\x00'], 0x100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000002c0)="b86dfa32da56c4eaa38d2491c97f7b81570dc6167c", 0x0}, 0x20) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) 03:00:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(0xffffffffffffffff, 0x400000066fb) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xc7}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x5, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000600)='fuseblk\x00', 0x10000, &(0x7f0000000e40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x8001}}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}]}}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000200)={0x3f, 0x7, 0x89}) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000dc0)) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0xfc}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0af8ff75256400bfa100000000000007010000f8ffffffb702000004000000bf130000000000008500000006000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x8000a0, 0xe, 0x0, &(0x7f0000000300)="00000074000000000000000039e4", 0x0, 0x429}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xe6, &(0x7f0000000440)='\xa0\xb2\xb1k\xa9\xe2o\xe2\xf4M\xcdw\xe7\xb5\xdeg\xd5\xa8+TM\\*\x86\xaf\xa6\x99CY4\xec[\x8a\xac\xdb\xe0\x81\x15Lg\xa5\x7f\x11Gb\x1a\xaf_\x1c\x98o\xc67D\xbb;o\xea\xdf^\xa2\xb7\xb1\xd3\xd9\x13\xe8\x8e\xfb\x17\xa1W\xde\x15\xb1\n\xcc\xf1\xf5\x93 \x90g\xd9\xf7L\xff\x9fzX\xb0\x16\xbb\xb5E\xd1>\xedR\xb8\x04\x04\xb4\xa31'}, 0x30) syz_open_dev$adsp(&(0x7f0000000d00)='/dev/adsp#\x00', 0x80000000, 0x1) execveat(r0, &(0x7f0000000800)='./file1\x00', &(0x7f0000000b80)=[&(0x7f0000000a80)='\xc0vboxnet0nodevvboxnet0self\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='dfltuid', &(0x7f0000000b40)='syzkaller\x00'], &(0x7f0000000cc0)=[&(0x7f0000000bc0)='nodevmap', &(0x7f0000000c40)=')\x00', &(0x7f0000000c80)='trusted.overlay.origin\x00'], 0x100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000002c0)="b86dfa32da56c4eaa38d2491c97f7b81570dc6167c", 0x0}, 0x20) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) [ 373.168901] device lo entered promiscuous mode [ 373.438092] device lo entered promiscuous mode 03:00:10 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x11, 0x2, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000000, 0x0, 0x20000) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="000627bd7000fbdbdf250b000000440002000800070000000000080005000900000008000500ff03000008000400030000000800050001800000080004000600000008000400080000000800030007000000be35326d4e231d591c114cd2920c07fb0a12e845c5ad454671f65b8aa24e67696aed041abb32bb0b98b094951a57f6a3e79f16fc7e867e2c57b1c55742dfa9a79d7ae20f0aeadd60b36015a6187445ac2083b97fc413bb7722f895120e66d6b32491c7c52532e9eac957d5aceed262de85b5869be2f2fea63b7088061c08f3298eae238fff9277d28df76d4503dfad8fa746a63667fb4df4091ec3"], 0x1}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mincore(&(0x7f0000a56000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x328) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10004}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x100, 0x308) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x50b1040a}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 03:00:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(0xffffffffffffffff, 0x400000066fb) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xc7}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x5, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000600)='fuseblk\x00', 0x10000, &(0x7f0000000e40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x8001}}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}]}}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000200)={0x3f, 0x7, 0x89}) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000dc0)) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0xfc}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0af8ff75256400bfa100000000000007010000f8ffffffb702000004000000bf130000000000008500000006000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x8000a0, 0xe, 0x0, &(0x7f0000000300)="00000074000000000000000039e4", 0x0, 0x429}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xe6, &(0x7f0000000440)='\xa0\xb2\xb1k\xa9\xe2o\xe2\xf4M\xcdw\xe7\xb5\xdeg\xd5\xa8+TM\\*\x86\xaf\xa6\x99CY4\xec[\x8a\xac\xdb\xe0\x81\x15Lg\xa5\x7f\x11Gb\x1a\xaf_\x1c\x98o\xc67D\xbb;o\xea\xdf^\xa2\xb7\xb1\xd3\xd9\x13\xe8\x8e\xfb\x17\xa1W\xde\x15\xb1\n\xcc\xf1\xf5\x93 \x90g\xd9\xf7L\xff\x9fzX\xb0\x16\xbb\xb5E\xd1>\xedR\xb8\x04\x04\xb4\xa31'}, 0x30) syz_open_dev$adsp(&(0x7f0000000d00)='/dev/adsp#\x00', 0x80000000, 0x1) execveat(r0, &(0x7f0000000800)='./file1\x00', &(0x7f0000000b80)=[&(0x7f0000000a80)='\xc0vboxnet0nodevvboxnet0self\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='dfltuid', &(0x7f0000000b40)='syzkaller\x00'], &(0x7f0000000cc0)=[&(0x7f0000000bc0)='nodevmap', &(0x7f0000000c40)=')\x00', &(0x7f0000000c80)='trusted.overlay.origin\x00'], 0x100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000002c0)="b86dfa32da56c4eaa38d2491c97f7b81570dc6167c", 0x0}, 0x20) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) 03:00:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0x97) sendfile(r0, r0, &(0x7f0000000480), 0x8080ffffff10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) socket$inet6(0xa, 0x6, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000000c0)={0x1, 0x0, {0x9, 0x3, 0x0, 0x6}}) write$P9_RSTATFS(r0, &(0x7f0000000240)={0x43, 0x9, 0x1, {0xb4cf, 0x44a2, 0xc2, 0x4, 0x3a, 0x5, 0x1c, 0x38, 0x100000001}}, 0x43) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0xf, 0x4, 0x1000000, {}, {0x5, 0x0, 0x0, 0x9, 0x1, 0x2, "6119fe68"}, 0x350, 0x1, @userptr=0x1000, 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:00:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) 03:00:10 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x11, 0x2, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000000, 0x0, 0x20000) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="000627bd7000fbdbdf250b000000440002000800070000000000080005000900000008000500ff03000008000400030000000800050001800000080004000600000008000400080000000800030007000000be35326d4e231d591c114cd2920c07fb0a12e845c5ad454671f65b8aa24e67696aed041abb32bb0b98b094951a57f6a3e79f16fc7e867e2c57b1c55742dfa9a79d7ae20f0aeadd60b36015a6187445ac2083b97fc413bb7722f895120e66d6b32491c7c52532e9eac957d5aceed262de85b5869be2f2fea63b7088061c08f3298eae238fff9277d28df76d4503dfad8fa746a63667fb4df4091ec3"], 0x1}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mincore(&(0x7f0000a56000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x328) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10004}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x100, 0x308) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x50b1040a}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 03:00:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) accept4(r2, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00\x00\x03\x00', 0x200008000005}) socket$inet6(0xa, 0x0, 0x0) [ 373.682765] audit: type=1800 audit(1545102010.359:63): pid=10915 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=16916 res=0 03:00:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(0xffffffffffffffff, 0x400000066fb) r1 = socket$packet(0x11, 0x0, 0x300) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xc7}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x5, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f00000009c0)=0xc) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000600)='fuseblk\x00', 0x10000, &(0x7f0000000e40)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x8001}}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}]}}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000200)={0x3f, 0x7, 0x89}) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000dc0)) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0xfc}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0af8ff75256400bfa100000000000007010000f8ffffffb702000004000000bf130000000000008500000006000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x8000a0, 0xe, 0x0, &(0x7f0000000300)="00000074000000000000000039e4", 0x0, 0x429}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xe6, &(0x7f0000000440)='\xa0\xb2\xb1k\xa9\xe2o\xe2\xf4M\xcdw\xe7\xb5\xdeg\xd5\xa8+TM\\*\x86\xaf\xa6\x99CY4\xec[\x8a\xac\xdb\xe0\x81\x15Lg\xa5\x7f\x11Gb\x1a\xaf_\x1c\x98o\xc67D\xbb;o\xea\xdf^\xa2\xb7\xb1\xd3\xd9\x13\xe8\x8e\xfb\x17\xa1W\xde\x15\xb1\n\xcc\xf1\xf5\x93 \x90g\xd9\xf7L\xff\x9fzX\xb0\x16\xbb\xb5E\xd1>\xedR\xb8\x04\x04\xb4\xa31'}, 0x30) syz_open_dev$adsp(&(0x7f0000000d00)='/dev/adsp#\x00', 0x80000000, 0x1) execveat(r0, &(0x7f0000000800)='./file1\x00', &(0x7f0000000b80)=[&(0x7f0000000a80)='\xc0vboxnet0nodevvboxnet0self\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='dfltuid', &(0x7f0000000b40)='syzkaller\x00'], &(0x7f0000000cc0)=[&(0x7f0000000bc0)='nodevmap', &(0x7f0000000c40)=')\x00', &(0x7f0000000c80)='trusted.overlay.origin\x00'], 0x100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000002c0)="b86dfa32da56c4eaa38d2491c97f7b81570dc6167c", 0x0}, 0x20) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0x10) 03:00:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) 03:00:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) [ 374.094924] audit: type=1800 audit(1545102010.779:64): pid=10938 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=16914 res=0 [ 374.184339] audit: type=1800 audit(1545102010.869:65): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16917 res=0 [ 374.311748] device lo left promiscuous mode 03:00:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) [ 376.107192] device lo entered promiscuous mode [ 376.114778] device lo left promiscuous mode [ 376.317344] audit: type=1800 audit(1545102012.999:66): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16915 res=0 [ 376.354198] device lo entered promiscuous mode 03:00:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) 03:00:13 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x11, 0x2, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000000, 0x0, 0x20000) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="000627bd7000fbdbdf250b000000440002000800070000000000080005000900000008000500ff03000008000400030000000800050001800000080004000600000008000400080000000800030007000000be35326d4e231d591c114cd2920c07fb0a12e845c5ad454671f65b8aa24e67696aed041abb32bb0b98b094951a57f6a3e79f16fc7e867e2c57b1c55742dfa9a79d7ae20f0aeadd60b36015a6187445ac2083b97fc413bb7722f895120e66d6b32491c7c52532e9eac957d5aceed262de85b5869be2f2fea63b7088061c08f3298eae238fff9277d28df76d4503dfad8fa746a63667fb4df4091ec3"], 0x1}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mincore(&(0x7f0000a56000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x328) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10004}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x100, 0x308) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x50b1040a}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 03:00:13 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x11, 0x2, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000000, 0x0, 0x20000) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="000627bd7000fbdbdf250b000000440002000800070000000000080005000900000008000500ff03000008000400030000000800050001800000080004000600000008000400080000000800030007000000be35326d4e231d591c114cd2920c07fb0a12e845c5ad454671f65b8aa24e67696aed041abb32bb0b98b094951a57f6a3e79f16fc7e867e2c57b1c55742dfa9a79d7ae20f0aeadd60b36015a6187445ac2083b97fc413bb7722f895120e66d6b32491c7c52532e9eac957d5aceed262de85b5869be2f2fea63b7088061c08f3298eae238fff9277d28df76d4503dfad8fa746a63667fb4df4091ec3"], 0x1}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) mincore(&(0x7f0000a56000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x328) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10004}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x100, 0x308) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x50b1040a}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) 03:00:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) 03:00:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) 03:00:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) [ 376.666169] audit: type=1800 audit(1545102013.349:67): pid=10967 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=16914 res=0 [ 376.766790] audit: type=1800 audit(1545102013.449:68): pid=10974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16915 res=0 [ 376.898250] audit: type=1800 audit(1545102013.449:69): pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16916 res=0 [ 376.917428] audit: type=1800 audit(1545102013.559:70): pid=10975 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=16917 res=0 [ 376.964298] device lo left promiscuous mode [ 377.579394] device lo entered promiscuous mode [ 377.585781] device lo left promiscuous mode 03:00:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) [ 377.761540] device lo entered promiscuous mode 03:00:14 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000100)={0x18, 0x0, 0x1}, 0x18) 03:00:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) 03:00:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) 03:00:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x10}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x5, 0x5}, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6, 0x6}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000003c0)={&(0x7f000066b000/0x1000)=nil, 0x1000}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000, 0x0) userfaultfd(0x80000) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x100000001}, 0x10) close(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000140)="360f009ada06f36d66b9f70b00000f32ea00001b000f013c2e653e2636260f322d9a009c0f01c99a0050db00", 0x2c}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) 03:00:14 executing program 3: clone(0x13102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0xc000400100079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="230305"]) 03:00:14 executing program 3: clone(0x13102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0xc000400100079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="230305"]) 03:00:14 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@gettaction={0x20, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) [ 377.970984] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 377.991749] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 378.035687] audit: type=1800 audit(1545102014.719:71): pid=11003 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=16893 res=0 [ 378.135821] audit: type=1800 audit(1545102014.769:72): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=16907 res=0 [ 378.160089] audit: type=1800 audit(1545102014.839:73): pid=11012 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16914 res=0 [ 378.181585] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 378.227561] audit: type=1800 audit(1545102014.899:74): pid=11014 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16918 res=0 03:00:15 executing program 3: clone(0x13102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0xc000400100079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="230305"]) [ 378.386080] tc_dump_action: action bad kind 03:00:15 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, &(0x7f0000000400)) ioctl(r2, 0xffffffffffffffb7, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) fstat(r0, 0x0) 03:00:15 executing program 3: clone(0x13102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0xc000400100079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="230305"]) [ 378.428411] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub 03:00:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xc001, 0x2ca06}]}}}]}, 0x3c}}, 0x0) 03:00:15 executing program 0: mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), 0x4) 03:00:15 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, &(0x7f0000000400)) ioctl(r2, 0xffffffffffffffb7, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) fstat(r0, 0x0) [ 378.613418] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 378.647430] netlink: 'syz-executor4': attribute type 1 has an invalid length. 03:00:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8108551b, &(0x7f0000000280)={0x0, 0x3, @start}) ioctl$sock_inet_SIOCRTMSG(r0, 0x80045510, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0xd8a6ba155d0cceee) 03:00:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="009000000000000000000000000200000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x174) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) stat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000240)) r2 = request_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='GPL\x00', 0xfffffffffffffffb) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'veth0_to_bridge\x00', @ifru_names='bridge_slave_1\x00'}}) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, &(0x7f00000000c0)=0x80, 0x0) r3 = getgid() getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000640), &(0x7f0000000680)=0x30) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)='veth0_to_bridge\x00', r2) getresgid(&(0x7f0000000100), &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000480)={0x100000, 0x3002, 0x0, 0x4, 0x8}) r5 = getgid() setgroups(0x3, &(0x7f0000000300)=[r3, r4, r5]) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0xff, 0x9, 0x3fc, 0x7, 0x3ff}) r6 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r6, 0x200080184153, 0x0) 03:00:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000002740)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)='veth1_to_bridge\x00'}) 03:00:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x3e, 0x7, 0x3b}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r3, 0xffffffffffffffb7, &(0x7f0000000080)) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000280)={0x0, 0x3f, {0x5, 0x4, 0x3016, 0x0, 0x6, 0x0, 0x0, 0x6}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000001380)={0x77359400}) socket(0x0, 0x0, 0x0) 03:00:15 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, &(0x7f0000000400)) ioctl(r2, 0xffffffffffffffb7, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) fstat(r0, 0x0) 03:00:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000500)=[@free_buffer], 0x0, 0x0, 0x0}) 03:00:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @sint={0x2, 0xffffffffffffffff}}]}) [ 378.877827] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 378.951638] binder: 11064:11065 BC_FREE_BUFFER u0000000000000000 no match [ 378.966829] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 378.983802] binder_alloc: binder_alloc_mmap_handler: 11064 20001000-20004000 already mapped failed -16 [ 378.997924] loop5: p1 p2 p3 p4 03:00:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8108551b, &(0x7f0000000280)={0x0, 0x3, @start}) ioctl$sock_inet_SIOCRTMSG(r0, 0x80045510, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0xd8a6ba155d0cceee) [ 379.001807] binder: BINDER_SET_CONTEXT_MGR already set [ 379.026020] binder: 11064:11065 ioctl 40046207 0 returned -16 [ 379.063823] binder_alloc: 11064: binder_alloc_buf, no vma 03:00:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x3e, 0x7, 0x3b}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r3, 0xffffffffffffffb7, &(0x7f0000000080)) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000280)={0x0, 0x3f, {0x5, 0x4, 0x3016, 0x0, 0x6, 0x0, 0x0, 0x6}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000001380)={0x77359400}) socket(0x0, 0x0, 0x0) [ 379.093597] binder: 11064:11079 got reply transaction with no transaction stack [ 379.094128] binder: 11064:11081 BC_FREE_BUFFER u0000000000000000 no match 03:00:15 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, &(0x7f0000000400)) ioctl(r2, 0xffffffffffffffb7, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) fstat(r0, 0x0) 03:00:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8108551b, &(0x7f0000000280)={0x0, 0x3, @start}) ioctl$sock_inet_SIOCRTMSG(r0, 0x80045510, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0xd8a6ba155d0cceee) [ 379.142850] binder: undelivered TRANSACTION_COMPLETE [ 379.148151] binder: undelivered transaction 17, process died. [ 379.178915] binder: undelivered TRANSACTION_COMPLETE 03:00:15 executing program 2: pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000a9000)={0x2, 0x0, @loopback}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) munmap(&(0x7f00001bf000/0x1000)=nil, 0x1000) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) poll(&(0x7f0000000100), 0x0, 0x0) 03:00:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@local, @in6=@loopback}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000340)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) [ 379.428333] binder: 11064:11079 transaction failed 29201/-71, size 0-0 line 2741 [ 379.445486] binder: 11064:11068 transaction failed 29189/-3, size 0-0 line 2973 [ 379.454353] binder: undelivered TRANSACTION_ERROR: 29201 [ 379.490785] loop_reread_partitions: partition scan of loop5 () failed (rc=-16) [ 379.504963] print_req_error: 1004 callbacks suppressed [ 379.504973] print_req_error: I/O error, dev loop5, sector 201 [ 379.506396] print_req_error: I/O error, dev loop5, sector 101 [ 379.518347] print_req_error: I/O error, dev loop5, sector 201 [ 379.528539] buffer_io_error: 1000 callbacks suppressed [ 379.528549] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 379.541466] print_req_error: I/O error, dev loop5, sector 101 [ 379.541890] print_req_error: I/O error, dev loop5, sector 301 [ 379.547419] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 379.560720] print_req_error: I/O error, dev loop5, sector 105 [ 379.566940] Buffer I/O error on dev loop5p2, logical block 1, async page read [ 379.574442] print_req_error: I/O error, dev loop5, sector 101 [ 379.580345] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 379.587834] print_req_error: I/O error, dev loop5, sector 105 [ 379.593883] Buffer I/O error on dev loop5p2, logical block 1, async page read [ 379.601213] print_req_error: I/O error, dev loop5, sector 205 [ 379.607205] Buffer I/O error on dev loop5p3, logical block 1, async page read [ 379.614591] print_req_error: I/O error, dev loop5, sector 101 [ 379.620489] Buffer I/O error on dev loop5p2, logical block 0, async page read [ 379.627889] Buffer I/O error on dev loop5p2, logical block 1, async page read [ 379.636189] Buffer I/O error on dev loop5p3, logical block 0, async page read [ 379.643586] Buffer I/O error on dev loop5p3, logical block 1, async page read [ 379.660722] binder: undelivered TRANSACTION_ERROR: 29189 03:00:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x3e, 0x7, 0x3b}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r3, 0xffffffffffffffb7, &(0x7f0000000080)) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000280)={0x0, 0x3f, {0x5, 0x4, 0x3016, 0x0, 0x6, 0x0, 0x0, 0x6}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000001380)={0x77359400}) socket(0x0, 0x0, 0x0) 03:00:16 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x8108551b, &(0x7f0000000280)={0x0, 0x3, @start}) ioctl$sock_inet_SIOCRTMSG(r0, 0x80045510, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}}) sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0xd8a6ba155d0cceee) 03:00:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000880)={0x8, "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", 0x1000}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100, 0x0, 0x300000000000000]}, 0x2c) 03:00:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="009000000000000000000000000200000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x174) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) stat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000240)) r2 = request_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='GPL\x00', 0xfffffffffffffffb) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'veth0_to_bridge\x00', @ifru_names='bridge_slave_1\x00'}}) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, &(0x7f00000000c0)=0x80, 0x0) r3 = getgid() getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000640), &(0x7f0000000680)=0x30) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)='veth0_to_bridge\x00', r2) getresgid(&(0x7f0000000100), &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000480)={0x100000, 0x3002, 0x0, 0x4, 0x8}) r5 = getgid() setgroups(0x3, &(0x7f0000000300)=[r3, r4, r5]) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0xff, 0x9, 0x3fc, 0x7, 0x3ff}) r6 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r6, 0x200080184153, 0x0) 03:00:16 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20003, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 03:00:16 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20003, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 03:00:16 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:00:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x3e, 0x7, 0x3b}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x0) ioctl(r3, 0xffffffffffffffb7, &(0x7f0000000080)) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000280)={0x0, 0x3f, {0x5, 0x4, 0x3016, 0x0, 0x6, 0x0, 0x0, 0x6}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000001380)={0x77359400}) socket(0x0, 0x0, 0x0) 03:00:16 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20003, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 03:00:16 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 380.347221] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 03:00:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@local, @in6=@loopback}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000340)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) [ 380.402629] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 380.409264] loop5: p1 p2 p3 p4 03:00:17 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20003, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 03:00:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0xfffffece) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') close(r1) syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') close(r0) 03:00:17 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:00:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000880)={0x8, "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", 0x1000}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100, 0x0, 0x300000000000000]}, 0x2c) 03:00:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="009000000000000000000000000200000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x174) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) stat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000240)) r2 = request_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='GPL\x00', 0xfffffffffffffffb) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'veth0_to_bridge\x00', @ifru_names='bridge_slave_1\x00'}}) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, &(0x7f00000000c0)=0x80, 0x0) r3 = getgid() getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000640), &(0x7f0000000680)=0x30) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)='veth0_to_bridge\x00', r2) getresgid(&(0x7f0000000100), &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000480)={0x100000, 0x3002, 0x0, 0x4, 0x8}) r5 = getgid() setgroups(0x3, &(0x7f0000000300)=[r3, r4, r5]) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0xff, 0x9, 0x3fc, 0x7, 0x3ff}) r6 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r6, 0x200080184153, 0x0) 03:00:17 executing program 4: r0 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000280), 0x1c) 03:00:17 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000019c0)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x200000000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 03:00:17 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000015c0)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1c8, 0x0) 03:00:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000880)={0x8, "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", 0x1000}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100, 0x0, 0x300000000000000]}, 0x2c) 03:00:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@local, @in6=@loopback}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000340)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) [ 381.174632] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 381.192437] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 381.208283] loop5: p1 p2 p3 p4 03:00:17 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000000)=@ng={0x4, 0x8}, 0x2, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) [ 381.346344] audit: type=1804 audit(1545102018.029:75): pid=11201 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir466335438/syzkaller.lCNEqr/132/bus" dev="sda1" ino=16929 res=1 03:00:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) r2 = gettid() clock_gettime(0x2, &(0x7f0000000280)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f00000002c0)={0x0, r3+30000000}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) tkill(r2, 0x17) [ 381.548137] audit: type=1804 audit(1545102018.029:76): pid=11201 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir466335438/syzkaller.lCNEqr/132/bus" dev="sda1" ino=16929 res=1 03:00:18 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 381.731962] audit: type=1804 audit(1545102018.029:77): pid=11202 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir466335438/syzkaller.lCNEqr/132/bus" dev="sda1" ino=16929 res=1 03:00:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000880)={0x8, "4d19a20f80c6b6cdb5cdfffbf1de8fd5e959eaba73109810997b81082d2b0a173ca1a2a1deb25208b0902687f4a3839e98a5519a30065910a22652caa0058ca50d34f132e26479d2338712773f35bc8436dab754fb0a4810bbd25eb5da180cddcf0d6b06f8b97779d7ffe6fb471a2da7d4d67b17033843a5c0751a7e13a261bb30b85a02b8f2dae566d3f9ac58af34b3de92596711c769b2e0c2877c1ea511a5269fabf2fcaa4ca4685977e8ec522d2decc4e99f488151cae3c764e30667bd1efdae82b9c1ba684aa47880c6c3d26f45dba256ea9077d774cda87bfcbfa6dd7592a654c55c667c35034619b9596a775e7970e373a6f8d9ce1b7a14f8419984110092ebdaf3a7dbf32aff5a001426f28fcfa0f5940d9056420506a4adbb62e13ba76b48c44296088b03038c40e60d6df4f63e251fa3d2a5722af62ff8bda89799896022ef8755d7386613507fe18dfa8ddee09d64e6c09fdf7de45d10c76dbc15dfec467059837fcf71b053741a604148b26ac85c6e650b1a3c3df5b964815ddee94543fb06bee6f6f0a26f31c9bfdb2ede30f195a3fffe051f198f5769b6e4aa46f182aa664738b799b89152bcf35b8647f3cff17f2bfe9fc3438247df7988eebd5349254487ca2298fe04d34d922f048a94a5336febb3d233cd4d971b2ef909643413a740cae4d06af3897ac79bc6d004e00b052acae068a80006490c34049b7bc757b23ab3a36a70e346096714b9d6ee1e28ff34230a281a1d94ef3c9d679e3b12b44b270bae24aaf503e603c958e22d38d95e63cac0b72478b4dfa2a8bffc5e735ff70c21f5d1c412d359b6d6abeb1a58a96e191c6192286fe2cf7132e247a780ef1e2a9c8e55ad7ddf4fee5643a66ecaa7ba80f193194af3b881a025787ee9540ca60fc16dbcab63c4e95de720f6843ae0740260ce881d426d0f375565e862cf62d3fa1dd2318d3190cf8d263b1b85fe467db4af57f38af86e6c6ac8d02a94b2f9c8aaf7a4d69ea93ec9610c215cc4396b4d5d882d8b97b27d1876af4e60bce5965e264ad119a62d7aa6464fe2d79bbd9c246faa7cc493f16fa81fd941ec6fafd208b0776f48c11fe8f29b3a62f06064679f338c7d8631d4c74c702433b78571d8eab99d6eaea09ae458c1ace3424191fc45c2fe7f7ccd25f2c28de13eeb8881fe36c5e0ffc4fe3d320e4a1907386d42e705f0e6f0114cd80a15f23be7ab7e05339d16f5108c91826ff6f563c2b2e79d15fdae81de935b512b9ab1d092eb11b78ee951897d971cd6339f8e0d196ebc0e73af79b43398b2da5c8192f481aa56a62a67c9d999359c6dc14e9d31e344c8003449949afc5015ea41583c4a3c1a08cc6e9f00347ec9a4de6c88ccab1082955c0f682eb611e1149462a34bbfeb0aa20834710c437f1d2d06e446d851dd2c91ad7b3a5e2450f0323585e45c2bfa28c91d68026ca762167d24432b9b7b5f88e03fa05233ae17328b4366c86c23282044a98aab26feae158536a814dfa028bd4b2ba548d66c6fa27ced32ff86bbb5477754393d10a6cfe96f56a0ba5d53b243cb94872900a548a8c404863f434fb48200c4f421b9935061f592e17129ac12d5caa70568c1201d2ba92671ab935d02fec59ce83c085ca689895e382e640ab2bf23ea15f2b41241a20fd1b6d5474e0a77e21b0680d16f86f7aa863412583ee09b03001543842b6bc1a47e3c338080788ac5b81e5fe522efaacdf43a30af80f0abe5af86ef91944ec8bc5c5f0cae452afad6a1021f299c73bc45d97ebf8a6cb57045827c37d2dacc9c609b161c9b3d3940fcf48175573156dd22c304130a97477f270f9b1db1c49aec0eeb91adf46ca6f43bd9084b49d885b6dbca0dc8d58d80ed59b0f7e733548a46c8024e1ec42d01e4a3e28acb92a78615cff793794e699350051379a9e78c6a63dadeffc0939f3f21f39e9c37a06fee0ac7adf72279a54014e7676328ad37198236bcdf52955d639747a391be052fcebec58d7e335777a0438fc2e2aa3b87d873ae7b20c510a3f53a412220dad2b3d640e042df01ef4f8777b9c921f666c180d2d0b49c274d3fea5fa1369d2b3994b7fd431374329742326028dab5cce1c4b54afbf88feb00416b01627398d7780f2b6b9ff0fbee1ac7b3e6084a517bd35d342697a15a10b40c170c1770ea46106b0f680921e9b44d7e810240313d150f54816bc8641b415d46b24f4c95af9b51308d3eca7b745e5905ee3b504b4236025ab99a4a3e6e5987c19822f68e22032bb271b84dad48276fa15a92921e1ce9f0e397b94b54dbf0a549915c6d6d16e55049a3e7871d0a9b3bf328206193f1cfe6b8a2794e2e756346a2c584be71138a275c4d9eb9ded1bef2be1aafc3eceb672b75d14bacf88d05ee0cbf1798c9fff2510b7048ca4e357e18c2e6c1cfc94c21801b5b9a4467812250a4d2883caeeadb8ab7227565b226c5d35f15b506a69e5f4b56bf6124b5bf088f9940f7fc1116bd29874d3fa83327f4f6b3018fec78664ceab9b23b3d55c5433c243e95020fcb22eb5a55deaccbb3b34e95a81a0d2cb36f717c2cb4e646546a34c60946ba5e902238fefe4e600295cbc14ef197fed284402fa0f84a9b2a8822a383ffc5dd536a6bd27617fe73c8fef9c63d31dea572c5f4def74fd15363c9e364a8e256861393741a47c0b97c4f67e588ecc9b86b088ac8a9eb36b2d219cbfe07e1e763f969df3ba76c6e7e445cf64af1c6901f35b65947deb2a215a007fc95ecf3a3bd924db87e0fb18ba1423f71dc6e815dc42b1272e77fbb6e4a26ca0fc81e58e4d9606b00ed916e2623473c89fbc890b8b9efa0d79812a33959324405bc2237f75c589865a48e1a1585efa3e9177f2fddd0b9debc514401fbfcbac9f83797ecee42b20c533900c0f9927d1c56b592c49cf85f240631e36b2d269349f300f238f44950ab58ed04297a70c85a79ebac66263121702a71e6ed48f947f0ee960c2d4f540b97aafd505b0b973a9718a2e9566a08102ecf3ec9069caea0ced8b305dd4a484e90b8d65fee6058f33c171761e6aa2287c328a3c89bb3891e9891c52c3a3c154e1aa4dcf8372a012d46772404f61d38ae3c9fe2956106b8bcb2b67e0b8ae986ad57ba85f9506aefc3e82f6b37468535dcaf36a962a66ad6f61d30172500ddcb3141f7c33122a3f56830654abc4678456d513ae7a533e87551bca0cf9e8d15772b022afef45f42f2370303f77a3de7ba4944ff90196066c17d7ca8d8243e47769ab9d00d5cb549c64bef4810fa7eadbd0bfe2ed3545c5a3ef9ff3fa759654cd8a749ff90e806e193d8ba0ec66007edfbf0ef0aa444c38a9e2687630885ed5e2342372e53f9342cf12d6ee4e4490dbc3bcd71e494b6029649ed00db55c728ec6d18db50ba981ee5497a53812748adf7577502ff2a538ca2469f48a74cdd6a2d658018e660a1c6ea148cb36353131ed23be7d35bd47cf181c52bb6691aa803bbfa8b18a87158ad607980bbab7cbc3d688ff9724b987c4922be528ccc9314199d0c486f2351f02260e7265e03b803efb949d4bc0aa1ae67d4760f332f6c2ca3a972af4d8ce25413b12dd1480792962fac4a2e854a09b09674e3fa3499efeb1dfb790801c30f41a402a801ef58175a810372880da04fc9caff70905ab86668df570e280cebbf427b7fa27a82fa0737121e3c787ee21134225f14d7dd7631fe57634693559499be594979420f9ee33863be1801ff897355f530e7bb26a67cd137506e4820aae554af94146544b56e1963204b911e0d3425c64478926d5473603df74802cdef0353cdfc6aa1183453b3049c4ed5aa8acd4eeac031047a4970806372ddd392d0ab2f8888bc5d43595271120ccc295a577178f45b0047596eb15a0785b71fb248aa87dca116fb6aa42d7abe3b24d07113ececa4ac7e80b8232ff23f040863789803d9d86802bd8658336249db58ae4e3022435acb6ee088c7131c80b65aa1e80a435a1b8538cc29a0d1357152d7293fab25b6ac7bf8c631067e18384c34b480d0d2726cc068a0f5a474ace025c56063f490f22bf0d15f1b5299954d894a3fa37cd67076159717dbd5f16fe612ad8a93e6adfa251ac7f6ebe7c32180da59d2d20ce6289fbb7bd60337a0fa7ff45b6c76f4ff41afee8e13a5eb0ed3653cc79591aff53a07591d32a034b47a4e38e7380d7133c7dd6c22f20421ba411227df8604fe84017bdcee9fe95f927d3c9f404fb72686aec6d176bc3899207a5d7f24a87914ef8f5d3dd654c881b65e515efbb91fdc9c372923415ea2b78198a824bc3db6d2b5b2d6b83832e30b374ec57becdbbe4c15f45b9d94b926a100371e44677156c088cfa4d44c298c048350850fafcced80878d7cd9d8c498bdb4ead27d9b474c909c481694a256c9e90a6dd18120f1bf227e3947e3d09cd061d1185652d412ed4548a4a458c21966ade9c84298b7cf89ac2d6de55910ccb1cac10f6a5f1aae4ea22852fccd1cb74f02414425f362667222d6b1280f4bd58f6a9f80528d1d685835377bc15168110eac2320f2a2b44677a2e3189a1b31fba9d2320cde94cb3dcca6308d1157ae3291e7591e002a28de1077537931629814456530c9cdabe760fa9d7b3643db37ba72a6b2849ba91143b5ad3ab6d4d6cf43a83ce1f3559a61c8a9232f693394c45992f66a8535f7f967c783219f7307bcb27b538b9ac1a24e7eac6a7c9e7c17fbd81278121243eb6ec1c8c7387d2ba41ca6973d5f8ad63c2f62159707642e92d44368c6387326f74e0d5a387c40f495145a7af9dc4a72d9e59989c2fb56a24aa056f403c41bf4ae0123431088a36f12384ae17ac9697e9c399fdacd0748f31d253a6c820032614288595a7358d4cdf4944dbdce1a7a915aa7e3364594437290b0407a041780a517ed805ce928626b93b08364a74271aa3ce157c24e135a2e32330cd19a41191e8b1f5e237aa056a7d84e991a5409daf859fcfbebf6a0f234ac399b4be65fafbe29185e55fade2a24d1efdca5807918c0633ea2f2abe84110f10970775db7302c3dd26e3adceb0dd65687c97b4d377cac147dfe654b849c7c62a6a6120dd1c83901f205a532184370f2d4337133f370926793e7d6b85695bb01f8e5274e9bb0e9d1f64f3eb1cf318770f176fbea5fe097e33404df0feb53f82cc7f865b248a1c55eb5a3e69fb656f43603c6f7f43ae25f5b1f57e3cbe02d77bc3cc44f64ca4e792e692620615a8321cce2bef8216dd3b0fd89d5eaf6bb6f69704b5d37c83becfbb24b6705b47edc26422c80a24b1c6dd3792adbc5a48dccba2dad17314d708409620c6a04f0bcf9b33efee4d792a9ac78383a6e004bcc9c23c48f9e9c5c992ecd5bbf6f1dc1a7c8028082c806eb66b13ddb9170948c75a07c8de2fd89c9a16bba75a9b645d6c3825d41edb243aa6995c5f77a9f146b69fc65858918b1d56b38a7d5f38d75b9c4b6ff1476ec0b42d79f742162eca321695b1fa7ad46da23b88f19a3aa4995106e2b6c8b45a1210942f14b4a9a9f736e1b02c64cca846c667094d7914afc8700af5f5ab5df434cf14c094413dd610d633d336eef0f163f0a077dcdcd1ce81e1c490bd19362d401aeefa08ba9907fbe28c58916f6104b84309594cbfe0ae40e6736b0057dcac6571312aec5e04bd429000b2126c69921836666101cd59d6deb4e47fddff2788e91fab7ee214202e6370b38af17d9796b67d8c50bee019295e158209a91b7114d6cb7d62a89753ef6b4b2041a59b2c0fccd1d6c0bc92b5bee59bceee0332c1147a5cc3a4ca89bcd", 0x1000}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400100, 0x0, 0x300000000000000]}, 0x2c) 03:00:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@local, @in6=@loopback}}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000340)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) rt_sigqueueinfo(0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) 03:00:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0xfffffffffffffffe, 0x1d3) 03:00:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="009000000000000000000000000200000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200422020002d010000d306000055aa", 0x60, 0x1a0}]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x174) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, 0x0) stat(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000240)) r2 = request_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='GPL\x00', 0xfffffffffffffffb) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'veth0_to_bridge\x00', @ifru_names='bridge_slave_1\x00'}}) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, &(0x7f00000000c0)=0x80, 0x0) r3 = getgid() getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000640), &(0x7f0000000680)=0x30) request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f0000000700)='veth0_to_bridge\x00', r2) getresgid(&(0x7f0000000100), &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000480)={0x100000, 0x3002, 0x0, 0x4, 0x8}) r5 = getgid() setgroups(0x3, &(0x7f0000000300)=[r3, r4, r5]) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0xff, 0x9, 0x3fc, 0x7, 0x3ff}) r6 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r6, 0x200080184153, 0x0) 03:00:18 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x20000000802, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write(r1, &(0x7f0000000000)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) 03:00:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r0, 0x180}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) dup2(r2, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e23, @local}], 0x2c) 03:00:18 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x57cd, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x23b, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000007c0)={r3, 0x20}, &(0x7f0000000b40)=0x8) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') kcmp(0x0, 0x0, 0x5, r2, r2) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000680)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) chmod(&(0x7f0000000480)='./file0/file0/file0\x00', 0x20) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x802c0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x62) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000540), &(0x7f00000005c0)=0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$FUSE_GETXATTR(r4, &(0x7f0000000700)={0x18, 0x0, 0x5, {0x6}}, 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000880)={0x9, {0x2, 0x4e22, @dev}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @rand_addr=0x7000000}, 0x100, 0x92, 0x4, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7}) getpid() write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @rand_addr=0x8001}, 0xd8a}}}, 0x90) [ 382.308391] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 382.343985] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 382.397556] loop5: p1 p2 p3 p4 03:00:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:00:19 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x57cd, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x23b, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000007c0)={r3, 0x20}, &(0x7f0000000b40)=0x8) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') kcmp(0x0, 0x0, 0x5, r2, r2) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000680)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) chmod(&(0x7f0000000480)='./file0/file0/file0\x00', 0x20) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x802c0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x62) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000540), &(0x7f00000005c0)=0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$FUSE_GETXATTR(r4, &(0x7f0000000700)={0x18, 0x0, 0x5, {0x6}}, 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000880)={0x9, {0x2, 0x4e22, @dev}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @rand_addr=0x7000000}, 0x100, 0x92, 0x4, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7}) getpid() write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @rand_addr=0x8001}, 0xd8a}}}, 0x90) 03:00:19 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x57cd, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x23b, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000007c0)={r3, 0x20}, &(0x7f0000000b40)=0x8) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') kcmp(0x0, 0x0, 0x5, r2, r2) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000680)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) chmod(&(0x7f0000000480)='./file0/file0/file0\x00', 0x20) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x802c0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x62) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000540), &(0x7f00000005c0)=0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$FUSE_GETXATTR(r4, &(0x7f0000000700)={0x18, 0x0, 0x5, {0x6}}, 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000880)={0x9, {0x2, 0x4e22, @dev}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @rand_addr=0x7000000}, 0x100, 0x92, 0x4, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7}) getpid() write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @rand_addr=0x8001}, 0xd8a}}}, 0x90) 03:00:21 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x57cd, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x23b, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000007c0)={r3, 0x20}, &(0x7f0000000b40)=0x8) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') kcmp(0x0, 0x0, 0x5, r2, r2) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000680)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) chmod(&(0x7f0000000480)='./file0/file0/file0\x00', 0x20) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x802c0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x62) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000540), &(0x7f00000005c0)=0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$FUSE_GETXATTR(r4, &(0x7f0000000700)={0x18, 0x0, 0x5, {0x6}}, 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000880)={0x9, {0x2, 0x4e22, @dev}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @rand_addr=0x7000000}, 0x100, 0x92, 0x4, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7}) getpid() write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @rand_addr=0x8001}, 0xd8a}}}, 0x90) 03:00:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ff9000/0x2000)=nil, 0x1922, 0x800000, 0x0, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0x393) 03:00:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xfb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726874796e2d002eb3ae160eaae95d41769667ef55fe8d55537f6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e0215bf552f715233"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup2(r4, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x3, 0x100000000, 0x5, 0x5, 0x245, 0xb7, 0x1]}) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) 03:00:21 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x57cd, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x23b, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000007c0)={r3, 0x20}, &(0x7f0000000b40)=0x8) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') kcmp(0x0, 0x0, 0x5, r2, r2) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000680)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) chmod(&(0x7f0000000480)='./file0/file0/file0\x00', 0x20) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x802c0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x62) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000540), &(0x7f00000005c0)=0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$FUSE_GETXATTR(r4, &(0x7f0000000700)={0x18, 0x0, 0x5, {0x6}}, 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000880)={0x9, {0x2, 0x4e22, @dev}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @rand_addr=0x7000000}, 0x100, 0x92, 0x4, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7}) getpid() write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @rand_addr=0x8001}, 0xd8a}}}, 0x90) 03:00:21 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031ae85717070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f4a00fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900150003000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 03:00:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) write(r3, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 384.573703] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 384.626679] Unknown ioctl 21533 [ 384.637785] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 384.661791] FS-Cache: Duplicate cookie detected [ 384.667884] FS-Cache: O-cookie c=0000000048ab41b2 [p=00000000bb56f35b fl=222 nc=0 na=1] 03:00:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x88) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) [ 384.676226] FS-Cache: O-cookie d=000000007cf2aa1e n=00000000bce9b920 [ 384.682913] FS-Cache: O-key=[10] '02000200000002000000' [ 384.688452] FS-Cache: N-cookie c=0000000031c23054 [p=00000000bb56f35b fl=2 nc=0 na=1] [ 384.697079] FS-Cache: N-cookie d=000000007cf2aa1e n=000000004e3594fd [ 384.703723] FS-Cache: N-key=[10] '02000200000002000000' 03:00:21 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x57cd, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x23b, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000007c0)={r3, 0x20}, &(0x7f0000000b40)=0x8) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') kcmp(0x0, 0x0, 0x5, r2, r2) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000680)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) chmod(&(0x7f0000000480)='./file0/file0/file0\x00', 0x20) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x802c0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x62) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000540), &(0x7f00000005c0)=0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$FUSE_GETXATTR(r4, &(0x7f0000000700)={0x18, 0x0, 0x5, {0x6}}, 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000880)={0x9, {0x2, 0x4e22, @dev}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @rand_addr=0x7000000}, 0x100, 0x92, 0x4, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7}) getpid() write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @rand_addr=0x8001}, 0xd8a}}}, 0x90) 03:00:21 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x57cd, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x23b, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000200)=0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000a80)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000007c0)={r3, 0x20}, &(0x7f0000000b40)=0x8) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') kcmp(0x0, 0x0, 0x5, r2, r2) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000680)={'ip6gre0\x00', {0x2, 0x0, @multicast2}}) chmod(&(0x7f0000000480)='./file0/file0/file0\x00', 0x20) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x802c0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x62) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000540), &(0x7f00000005c0)=0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$FUSE_GETXATTR(r4, &(0x7f0000000700)={0x18, 0x0, 0x5, {0x6}}, 0x18) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000880)={0x9, {0x2, 0x4e22, @dev}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @rand_addr=0x7000000}, 0x100, 0x92, 0x4, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7}) getpid() write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @rand_addr=0x8001}, 0xd8a}}}, 0x90) 03:00:21 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) [ 385.449883] Unknown ioctl 21533 03:00:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9d78bd36f9879cb5f16ddda8ed22a9798c16d01d0965ce9bc1db714340065cdf"}}) 03:00:22 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f000002cff6)='./control\x00', 0x0) mkdirat(r0, &(0x7f0000016ff8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000080)='./control\x00', r1, &(0x7f0000000040)='./control\x00', 0x2) 03:00:22 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local, @random="6f7e6256f32e", [], {@ipv6={0x86dd, {0x0, 0x6, "6d570e", 0x14, 0xff, 0x0, @empty, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 03:00:22 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r0}) socket$inet6(0xa, 0x0, 0x100) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000110003002abd7000fcdbdf2503000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000841}, 0x8811) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000540)="0a5c2d023c126285718070") sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x800000000, 0x0, @random="b06de07ad55b"}, 0x10) [ 387.551619] 8021q: adding VLAN 0 to HW filter on device bond0 03:00:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xfb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726874796e2d002eb3ae160eaae95d41769667ef55fe8d55537f6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e0215bf552f715233"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup2(r4, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x3, 0x100000000, 0x5, 0x5, 0x245, 0xb7, 0x1]}) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) 03:00:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00\x00\x00\x005\xab\xe1\xe8\r\x90>\rqz\xc1\x88\x9aE\xe5\x81\xc9\xe1J\\\x8f\x95\xf5\xd2\x96\x8a\xe8\xc7g\xe9\xd1\x8f\xd6\x9a') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x20011, r1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x20) 03:00:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2000000000}) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x371fcda8, 0x80}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r0, r1, 0x0) 03:00:24 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockname$netlink(r0, 0x0, &(0x7f00000000c0)) 03:00:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000001c0)="2400000021002531075f01650272fc028000002f0010fd0033ff000c080017003c090000", 0x24) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis128)\x00'}, 0x58) 03:00:24 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r0}) socket$inet6(0xa, 0x0, 0x100) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000110003002abd7000fcdbdf2503000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000841}, 0x8811) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000540)="0a5c2d023c126285718070") sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x800000000, 0x0, @random="b06de07ad55b"}, 0x10) 03:00:24 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r0}) socket$inet6(0xa, 0x0, 0x100) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000110003002abd7000fcdbdf2503000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000841}, 0x8811) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000540)="0a5c2d023c126285718070") sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x800000000, 0x0, @random="b06de07ad55b"}, 0x10) [ 387.845426] Unknown ioctl 21533 03:00:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xfb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726874796e2d002eb3ae160eaae95d41769667ef55fe8d55537f6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e0215bf552f715233"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup2(r4, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x3, 0x100000000, 0x5, 0x5, 0x245, 0xb7, 0x1]}) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) 03:00:24 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18}, 0x4b5d) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x4018, 0x0) 03:00:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x63, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0xd0, 0x0, &(0x7f0000001380)={0x77359400}) close(r1) 03:00:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000968ff6)=@file={0x1, './file0\x00'}, 0xa) r3 = open(&(0x7f0000000200)='./file0\x00', 0x200000, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000034c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x1, 0x0) [ 388.021836] Unknown ioctl 21533 03:00:24 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000040)=0x68) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r0}) socket$inet6(0xa, 0x0, 0x100) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000110003002abd7000fcdbdf2503000000"], 0x1}, 0x1, 0x0, 0x0, 0x20000841}, 0x8811) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000540)="0a5c2d023c126285718070") sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x800000000, 0x0, @random="b06de07ad55b"}, 0x10) [ 388.181655] 8021q: adding VLAN 0 to HW filter on device bond0 03:00:25 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xfb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726874796e2d002eb3ae160eaae95d41769667ef55fe8d55537f6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e0215bf552f715233"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup2(r4, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x3, 0x100000000, 0x5, 0x5, 0x245, 0xb7, 0x1]}) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) 03:00:25 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18}, 0x4b5d) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x4018, 0x0) 03:00:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000002c0), 0x400000000000435, 0x10922, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x165}}, 0x0) 03:00:25 executing program 5: clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4100000c, 0x0) 03:00:25 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x1000000000003) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000240)="b7", 0x1, 0x8000, 0x0, 0x0) connect(r1, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) close(r1) 03:00:25 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18}, 0x4b5d) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x4018, 0x0) [ 388.465246] Unknown ioctl 21533 03:00:25 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0x18}, 0x4b5d) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x4018, 0x0) 03:00:26 executing program 5: clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4100000c, 0x0) 03:00:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xfb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726874796e2d002eb3ae160eaae95d41769667ef55fe8d55537f6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e0215bf552f715233"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup2(r4, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x3, 0x100000000, 0x5, 0x5, 0x245, 0xb7, 0x1]}) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) 03:00:26 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000140)={0x8, 0x20000000000000}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') r1 = semget(0x2, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.ima\x00', &(0x7f0000000500)=@sha1={0x1, "1549c6a79f24f4d62dfc8d54ff2f57971d4014c3"}, 0x15, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000680)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x98391aa8d00f7f6a) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000140)=""/56) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0xfff, 0x3, 0x400}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x400100, 0x0) listen(r0, 0x8) lsetxattr$security_smack_transmute(&(0x7f0000000580)='./file0\x00', &(0x7f0000000600)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000640)='TRUE', 0x4, 0x1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000003c0)=""/74) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x5) [ 390.233662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.318312] Unknown ioctl 21533 03:00:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000140)={0x8, 0x20000000000000}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') r1 = semget(0x2, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.ima\x00', &(0x7f0000000500)=@sha1={0x1, "1549c6a79f24f4d62dfc8d54ff2f57971d4014c3"}, 0x15, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000680)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x98391aa8d00f7f6a) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000140)=""/56) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0xfff, 0x3, 0x400}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x400100, 0x0) listen(r0, 0x8) lsetxattr$security_smack_transmute(&(0x7f0000000580)='./file0\x00', &(0x7f0000000600)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000640)='TRUE', 0x4, 0x1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000003c0)=""/74) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x5) 03:00:27 executing program 5: clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4100000c, 0x0) [ 390.823989] 8021q: adding VLAN 0 to HW filter on device bond0 03:00:27 executing program 5: clone(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4100000c, 0x0) 03:00:27 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xfb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726874796e2d002eb3ae160eaae95d41769667ef55fe8d55537f6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e0215bf552f715233"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup2(r4, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x3, 0x100000000, 0x5, 0x5, 0x245, 0xb7, 0x1]}) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) 03:00:27 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000002c0), 0x400000000000435, 0x10922, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x165}}, 0x0) 03:00:27 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000140)={0x8, 0x20000000000000}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') r1 = semget(0x2, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.ima\x00', &(0x7f0000000500)=@sha1={0x1, "1549c6a79f24f4d62dfc8d54ff2f57971d4014c3"}, 0x15, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000680)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x98391aa8d00f7f6a) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000140)=""/56) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0xfff, 0x3, 0x400}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x400100, 0x0) listen(r0, 0x8) lsetxattr$security_smack_transmute(&(0x7f0000000580)='./file0\x00', &(0x7f0000000600)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000640)='TRUE', 0x4, 0x1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000003c0)=""/74) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x5) 03:00:27 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x1000000000003) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000240)="b7", 0x1, 0x8000, 0x0, 0x0) connect(r1, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) close(r1) [ 391.109545] Unknown ioctl 21533 03:00:27 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) select(0x40, &(0x7f0000002000), 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x172) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x7f, 0x200) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) finit_module(r2, 0x0, 0x3) 03:00:28 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000140)={0x8, 0x20000000000000}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') r1 = semget(0x2, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.ima\x00', &(0x7f0000000500)=@sha1={0x1, "1549c6a79f24f4d62dfc8d54ff2f57971d4014c3"}, 0x15, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000680)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "149b9f43d44925ac5d7590e6b6a9adff"}, 0x11, 0x98391aa8d00f7f6a) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000140)=""/56) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0xfff, 0x3, 0x400}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x400100, 0x0) listen(r0, 0x8) lsetxattr$security_smack_transmute(&(0x7f0000000580)='./file0\x00', &(0x7f0000000600)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000640)='TRUE', 0x4, 0x1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f00000003c0)=""/74) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x5) 03:00:28 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) select(0x40, &(0x7f0000002000), 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x172) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x7f, 0x200) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) finit_module(r2, 0x0, 0x3) 03:00:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xfb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726874796e2d002eb3ae160eaae95d41769667ef55fe8d55537f6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e0215bf552f715233"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup2(r4, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x3, 0x100000000, 0x5, 0x5, 0x245, 0xb7, 0x1]}) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) 03:00:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000004c0)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r2, 0x0, 0x2) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) close(r1) 03:00:30 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) select(0x40, &(0x7f0000002000), 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x172) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x7f, 0x200) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) finit_module(r2, 0x0, 0x3) 03:00:30 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x1000000000003) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000240)="b7", 0x1, 0x8000, 0x0, 0x0) connect(r1, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) close(r1) [ 393.340981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.521025] Unknown ioctl 21533 [ 394.248963] 8021q: adding VLAN 0 to HW filter on device bond0 03:00:31 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000002c0), 0x400000000000435, 0x10922, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x165}}, 0x0) 03:00:31 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) select(0x40, &(0x7f0000002000), 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x172) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = syz_open_dev$usbmon(0x0, 0x7f, 0x200) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) finit_module(r2, 0x0, 0x3) 03:00:31 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x1000000000003) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f0000000240)="b7", 0x1, 0x8000, 0x0, 0x0) connect(r1, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) close(r1) 03:00:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x10000000100132, 0xffffffffffffffff, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x4d0d6200, 0x800}, 0x18) 03:00:31 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x90) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00'}, 0x0) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x18) 03:00:31 executing program 3: add_key$user(0x0, &(0x7f0000000100)={'syz'}, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 03:00:31 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = getpgrp(0x0) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r0, &(0x7f0000000000)={r1}) 03:00:31 executing program 5: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x203}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:00:33 executing program 5: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x203}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 396.524298] 8021q: adding VLAN 0 to HW filter on device bond0 03:00:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2272, &(0x7f0000000200)) 03:00:33 executing program 3: add_key$user(0x0, &(0x7f0000000100)={'syz'}, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 03:00:33 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000002c0), 0x400000000000435, 0x10922, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0xfffffff0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x10}}, 0x165}}, 0x0) 03:00:33 executing program 5: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x203}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:00:33 executing program 0: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000fffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000006c0)={0x9, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40000000000003b, &(0x7f0000000000)=@dstopts, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x8, 0x4e}, &(0x7f0000000380), 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x4, 0x207) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 03:00:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x3, 0xfffffffffffffffc}, 0x4) 03:00:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00\xac\xf4\x19\x19\x00\x02\xcb\xd7^\x0f\xc6~\xf6\xf7\xfd\xde\xc3q\xcc\xcc\xc6\xb4\xa8\xf7\xe3R\xe6F0\x87n\xedr\xfa\x8f\xed\xdf\xce\xd0W\xe90s\xc1\xc1L#D\x97Y\x9e\f\xbeF[\xcd9\xe7\"\n\x00\xc7\x12\x99\xad\xe1&\xf9\xca\x82\x8e\xba\xea:\xa6\fB \a\xe1YR\xd0.\x8a\xc2~\x98\xf3\r\xe7\x81\x90\xdd\xe0s\xb1\x18\x95\x8b\xc3[\xa2j@\xb4My%M\x8f>w[z)\xda\xe9\xc8\xc4\'\x13\xae\xdf<,\xe8H\x83\xd0z\x7fn\f\xfb\x9f\xc3\xf6\"\xa4\x9b\xce\x1c\nt\xc7r4\x98\xacQ/a?~\xdeLrRK\x91M-\x8c\t@\xe7-\x97;\xdac\xc7\xe4\x85\xfbF\xb6Nm\xd3\xbd\x80\xbb|\xf6\xd8\xec\v\x10\xece\x81:\x10S\xbbiW\x13\x05\x90\a\xdf]<\xe3\x9b\xe5Z\xab\x90Z\x15i\xc9\xac\x9c\x1a\xbb\x04Q.\x17\x9a\xcc\x80q\rE\x14\xaf\xd1l\xb8\x18r\xda\xdd\x00oB\t\x0e2\xeaE2\x91aN\x80[', 0x106) write$binfmt_elf32(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f"], 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x8200) 03:00:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x74, 0x0, 0x0, 0x100}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 03:00:33 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0), &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd354569", 0x79, 0xfffffffffffffffd) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00', 0x0, 0x0, 0x61}, 0x2c) r1 = socket(0x1e, 0x4, 0x0) sync() setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000003c0)=@req={0x80, 0x0, 0x3}, 0x10) r2 = socket(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000007740)={0x77359400}) socket(0x0, 0x80000, 0x0) lstat(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f00000004c0)) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x3}, 0x10) sendto$inet6(r2, &(0x7f0000000480), 0x37, 0x0, 0x0, 0x2a6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f00000000c0), 0x0) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) clone(0x204000, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0xa7db, 0x0) 03:00:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x74, 0x0, 0x0, 0x100}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 03:00:34 executing program 3: add_key$user(0x0, &(0x7f0000000100)={'syz'}, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 03:00:34 executing program 0: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000fffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000006c0)={0x9, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40000000000003b, &(0x7f0000000000)=@dstopts, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x8, 0x4e}, &(0x7f0000000380), 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x4, 0x207) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 03:00:34 executing program 4: r0 = open(&(0x7f0000000200)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0xa, 0x1, "e846"}, 0x0) 03:00:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x74, 0x0, 0x0, 0x100}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 03:00:34 executing program 4: write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xf, 0x0, {{0x0, 0x0, 0x3}, 0x1f6}}, 0x18) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0xffffffffffffffed, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 398.057104] encrypted_key: keyword 'update' not allowed when called from .instantiate method 03:00:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000380)=[@increfs_done, @release], 0x0, 0x0, 0x0}) 03:00:36 executing program 5: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x203}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 03:00:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x74, 0x0, 0x0, 0x100}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 03:00:36 executing program 0: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000fffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000006c0)={0x9, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40000000000003b, &(0x7f0000000000)=@dstopts, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x8, 0x4e}, &(0x7f0000000380), 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x4, 0x207) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 03:00:36 executing program 3: add_key$user(0x0, &(0x7f0000000100)={'syz'}, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x800000009) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 03:00:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)=""/164) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000100)=0x44) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0xffffffff, 0x2}, 0x14) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) eventfd2(0x8, 0x80000) [ 399.838850] Unknown ioctl 1074025837 [ 399.866618] binder: 11726:11729 BC_INCREFS_DONE u0000000000000000 no match [ 399.930912] binder: 11726:11742 Acquire 1 refcount change on invalid ref 0 ret -22 03:00:36 executing program 5: r0 = getpid() r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0xfff, 0x4) sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sync_file_range(r2, 0xc67, 0xc1ef, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000), 0x4) r3 = getpid() gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) msgsnd(0x0, &(0x7f0000000300)={0x2}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) [ 399.976537] binder: 11726:11741 BC_INCREFS_DONE u0000000000000000 no match [ 400.028828] binder: 11726:11741 Release 1 refcount change on invalid ref 0 ret -22 03:00:36 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 03:00:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000380)=[@increfs_done, @release], 0x0, 0x0, 0x0}) 03:00:37 executing program 5: r0 = getpid() r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0xfff, 0x4) sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sync_file_range(r2, 0xc67, 0xc1ef, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000), 0x4) r3 = getpid() gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) msgsnd(0x0, &(0x7f0000000300)={0x2}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) [ 400.311446] binder: 11753:11754 BC_INCREFS_DONE u0000000000000000 no match [ 400.338380] Unknown ioctl 1074025837 03:00:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000380)=[@increfs_done, @release], 0x0, 0x0, 0x0}) 03:00:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)=""/164) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000100)=0x44) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0xffffffff, 0x2}, 0x14) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) eventfd2(0x8, 0x80000) 03:00:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 400.565650] binder: 11768:11769 BC_INCREFS_DONE u0000000000000000 no match 03:00:37 executing program 5: r0 = getpid() r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0xfff, 0x4) sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sync_file_range(r2, 0xc67, 0xc1ef, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000), 0x4) r3 = getpid() gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) msgsnd(0x0, &(0x7f0000000300)={0x2}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) [ 400.714838] Unknown ioctl 1074025837 03:00:37 executing program 0: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000fffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000006c0)={0x9, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40000000000003b, &(0x7f0000000000)=@dstopts, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x8, 0x4e}, &(0x7f0000000380), 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4, 0x4}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x4, 0x207) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 03:00:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000380)=[@increfs_done, @release], 0x0, 0x0, 0x0}) 03:00:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 400.876798] binder: 11782:11784 BC_INCREFS_DONE u0000000000000000 no match 03:00:37 executing program 5: r0 = getpid() r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0xfff, 0x4) sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sync_file_range(r2, 0xc67, 0xc1ef, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000), 0x4) r3 = getpid() gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) msgsnd(0x0, &(0x7f0000000300)={0x2}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) 03:00:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)=""/164) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000100)=0x44) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0xffffffff, 0x2}, 0x14) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) eventfd2(0x8, 0x80000) 03:00:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)=""/164) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000100)=0x44) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0xffffffff, 0x2}, 0x14) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) eventfd2(0x8, 0x80000) [ 401.112967] Unknown ioctl 1074025837 03:00:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) [ 401.151907] Unknown ioctl 1074025837 03:00:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)=""/164) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000100)=0x44) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0xffffffff, 0x2}, 0x14) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) eventfd2(0x8, 0x80000) 03:00:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000380)=[@increfs_done, @release], 0x0, 0x0, 0x0}) [ 401.313750] Unknown ioctl 1074025837 03:00:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000380)=[@increfs_done, @release], 0x0, 0x0, 0x0}) 03:00:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000380)=[@increfs_done, @release], 0x0, 0x0, 0x0}) [ 401.395512] binder: 11815:11817 BC_INCREFS_DONE u0000000000000000 no match 03:00:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)=""/164) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000100)=0x44) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0xffffffff, 0x2}, 0x14) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) eventfd2(0x8, 0x80000) [ 401.540991] binder: 11821:11822 BC_INCREFS_DONE u0000000000000000 no match [ 401.557611] binder: 11823:11824 BC_INCREFS_DONE u0000000000000000 no match [ 401.614425] Unknown ioctl 1074025837 03:00:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000380)=[@increfs_done, @release], 0x0, 0x0, 0x0}) 03:00:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)=""/164) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000100)=0x44) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0xffffffff, 0x2}, 0x14) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) eventfd2(0x8, 0x80000) 03:00:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000380)=[@increfs_done, @release], 0x0, 0x0, 0x0}) 03:00:38 executing program 1: prctl$PR_GET_TID_ADDRESS(0x23, &(0x7f0000000000)) [ 401.895709] binder: 11833:11834 BC_INCREFS_DONE u0000000000000000 no match 03:00:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)=""/164) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000100)=0x44) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0xffffffff, 0x2}, 0x14) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) eventfd2(0x8, 0x80000) 03:00:38 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2, 0x700}, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) [ 401.945965] binder: 11832:11838 BC_INCREFS_DONE u0000000000000000 no match [ 401.969367] Unknown ioctl 1074025837 03:00:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000380)=[@increfs_done, @release], 0x0, 0x0, 0x0}) 03:00:38 executing program 1: syz_emit_ethernet(0xffffffe9, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0xa9e, 0x2b, 0x0, @local={0xfe, 0x80, [0x8848000000000000]}, @local, {[], @tcp={{0x600, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000100)={0x0, 0x2, [0x0, 0xad4]}) 03:00:38 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2, 0x700}, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) 03:00:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x1}, 0x90) 03:00:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)=""/164) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000100)=0x44) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0xffffffff, 0x2}, 0x14) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) eventfd2(0x8, 0x80000) [ 402.190423] Unknown ioctl 1074025837 03:00:38 executing program 1: syz_emit_ethernet(0xffffffe9, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0xa9e, 0x2b, 0x0, @local={0xfe, 0x80, [0x8848000000000000]}, @local, {[], @tcp={{0x600, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000100)={0x0, 0x2, [0x0, 0xad4]}) 03:00:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1) fcntl$notify(r0, 0x402, 0x0) [ 402.258228] Unknown ioctl 1074025837 03:00:39 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f00000006c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0xb, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x8a42) 03:00:39 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2, 0x700}, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) 03:00:39 executing program 1: syz_emit_ethernet(0xffffffe9, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0xa9e, 0x2b, 0x0, @local={0xfe, 0x80, [0x8848000000000000]}, @local, {[], @tcp={{0x600, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000100)={0x0, 0x2, [0x0, 0xad4]}) 03:00:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x7) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000003c0)=""/164) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00'}, &(0x7f0000000100)=0x44) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty}, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0xffffffff, 0x2}, 0x14) getsockname$netlink(r2, &(0x7f0000000300), &(0x7f0000000340)=0xc) eventfd2(0x8, 0x80000) 03:00:39 executing program 1: syz_emit_ethernet(0xffffffe9, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0xa9e, 0x2b, 0x0, @local={0xfe, 0x80, [0x8848000000000000]}, @local, {[], @tcp={{0x600, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000100)={0x0, 0x2, [0x0, 0xad4]}) 03:00:39 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000580)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) write$cgroup_int(r0, &(0x7f0000000240), 0x12) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000004c0)) write$cgroup_int(r2, 0x0, 0x0) 03:00:39 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2, 0x700}, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) 03:00:39 executing program 3: mq_open(0x0, 0x0, 0x0, 0xfffffffffffffffd) 03:00:39 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) write$binfmt_elf64(r7, &(0x7f0000001340)=ANY=[@ANYBLOB="7f454c460904050907000000000000000300070007000000f8010000000000004000000000000000a303000000000000880000000500380001007f00010401000000000001000080030000000200000000000000ff7f0000000000000100000000000000e1ffffffffffffff0000000004000000aa0900000000000000000000000000000000000000000000090000000000000004000000000000000000000000050800b2b8e7c0207f8c15435c5f65b824f94833ce5a469e19cefe3db700dc0aba3b189fc1cba86b252746cf2a9f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b2bb7d9f33580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000065de00000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff4000000000000000000000000000000000000000000000000ff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c019ee678bef3d13e8836f647a06c900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000032d06de4de000d2485f2fc810000000000000000006b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c69d31de01e727909d33d7050081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000803ced27eb9652decf000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043ee40e966c62f82e4fcdc96ed2d4f95616dc23050816251768870c4636f0fcdff6ffd97feba45ad6421c4a554e71fea6330d29ea77dcea012b965b9ebe6d6c22867ac57f2ab7f279d7a4fca83b6ccf680b3816f0e74ed98f6d864846e3a33fc65f54755e3"], 0x83f) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000a80)=ANY=[@ANYBLOB="a945d4856e0c93889d1a0e538427f40ba41c60f094e759b7987f690c81fb140651913ddc8e93dc2538038984836cabfc4789c558a21d021e33bd4c869670cacd748c95f16e58a57f191bd366969e232f408f763bbd8e83c47905f09dfebaec1bf0cbe5a5bd0a42ea8802"], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1010, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1}) 03:00:39 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) write$cgroup_int(r1, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) [ 403.135575] Unknown ioctl 1074025837 03:00:39 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) 03:00:39 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f00000006c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0xb, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x8a42) [ 403.205137] device nr0 entered promiscuous mode 03:00:40 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) 03:00:40 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) 03:00:40 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f00000006c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0xb, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x8a42) [ 403.599430] dccp_close: ABORT with 4222 bytes unread 03:00:40 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) 03:00:40 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) write$binfmt_elf64(r7, &(0x7f0000001340)=ANY=[@ANYBLOB="7f454c460904050907000000000000000300070007000000f8010000000000004000000000000000a303000000000000880000000500380001007f00010401000000000001000080030000000200000000000000ff7f0000000000000100000000000000e1ffffffffffffff0000000004000000aa0900000000000000000000000000000000000000000000090000000000000004000000000000000000000000050800b2b8e7c0207f8c15435c5f65b824f94833ce5a469e19cefe3db700dc0aba3b189fc1cba86b252746cf2a9f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b2bb7d9f33580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000065de00000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff4000000000000000000000000000000000000000000000000ff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c019ee678bef3d13e8836f647a06c900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000032d06de4de000d2485f2fc810000000000000000006b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c69d31de01e727909d33d7050081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000803ced27eb9652decf000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043ee40e966c62f82e4fcdc96ed2d4f95616dc23050816251768870c4636f0fcdff6ffd97feba45ad6421c4a554e71fea6330d29ea77dcea012b965b9ebe6d6c22867ac57f2ab7f279d7a4fca83b6ccf680b3816f0e74ed98f6d864846e3a33fc65f54755e3"], 0x83f) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000a80)=ANY=[@ANYBLOB="a945d4856e0c93889d1a0e538427f40ba41c60f094e759b7987f690c81fb140651913ddc8e93dc2538038984836cabfc4789c558a21d021e33bd4c869670cacd748c95f16e58a57f191bd366969e232f408f763bbd8e83c47905f09dfebaec1bf0cbe5a5bd0a42ea8802"], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1010, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1}) 03:00:40 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000580)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) write$cgroup_int(r0, &(0x7f0000000240), 0x12) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000004c0)) write$cgroup_int(r2, 0x0, 0x0) 03:00:40 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) write$binfmt_elf64(r7, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x83f) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000a80)=ANY=[@ANYBLOB="a945d4856e0c93889d1a0e538427f40ba41c60f094e759b7987f690c81fb140651913ddc8e93dc2538038984836cabfc4789c558a21d021e33bd4c869670cacd748c95f16e58a57f191bd366969e232f408f763bbd8e83c47905f09dfebaec1bf0cbe5a5bd0a42ea8802"], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1010, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1}) 03:00:40 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f00000006c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0xb, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x8a42) 03:00:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$vnet(r0, &(0x7f0000000100)={0x1, {&(0x7f0000000580)=""/4096, 0xbb4, &(0x7f0000000380)=""/205}}, 0x2eb) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x1012, r2, 0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 404.258254] audit: type=1804 audit(1545102040.939:78): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/145/bus" dev="sda1" ino=16849 res=1 03:00:41 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f00000006c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0xb, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x8a42) [ 404.399688] audit: type=1804 audit(1545102040.939:79): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/145/bus" dev="sda1" ino=16849 res=1 [ 404.832366] device nr0 entered promiscuous mode [ 404.838792] audit: type=1804 audit(1545102041.519:80): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/145/bus" dev="sda1" ino=16849 res=1 03:00:41 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) write$binfmt_elf64(r7, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x83f) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000a80)=ANY=[@ANYBLOB="a945d4856e0c93889d1a0e538427f40ba41c60f094e759b7987f690c81fb140651913ddc8e93dc2538038984836cabfc4789c558a21d021e33bd4c869670cacd748c95f16e58a57f191bd366969e232f408f763bbd8e83c47905f09dfebaec1bf0cbe5a5bd0a42ea8802"], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1010, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1}) [ 404.910372] audit: type=1804 audit(1545102041.519:81): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/145/bus" dev="sda1" ino=16849 res=1 [ 404.933309] audit: type=1804 audit(1545102041.519:82): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/145/bus" dev="sda1" ino=16849 res=1 03:00:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$vnet(r0, &(0x7f0000000100)={0x1, {&(0x7f0000000580)=""/4096, 0xbb4, &(0x7f0000000380)=""/205}}, 0x2eb) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x1012, r2, 0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:00:41 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000580)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) write$cgroup_int(r0, &(0x7f0000000240), 0x12) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000004c0)) write$cgroup_int(r2, 0x0, 0x0) 03:00:41 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) write$binfmt_elf64(r7, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x83f) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000a80)=ANY=[@ANYBLOB="a945d4856e0c93889d1a0e538427f40ba41c60f094e759b7987f690c81fb140651913ddc8e93dc2538038984836cabfc4789c558a21d021e33bd4c869670cacd748c95f16e58a57f191bd366969e232f408f763bbd8e83c47905f09dfebaec1bf0cbe5a5bd0a42ea8802"], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1010, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1}) [ 405.195963] audit: type=1804 audit(1545102041.879:83): pid=11972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/146/bus" dev="sda1" ino=16785 res=1 [ 405.255225] audit: type=1804 audit(1545102041.909:84): pid=11972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/146/bus" dev="sda1" ino=16785 res=1 03:00:42 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f00000006c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0xb, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x8a42) [ 405.812627] device nr0 entered promiscuous mode 03:00:42 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000580)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) write$cgroup_int(r0, &(0x7f0000000240), 0x12) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000004c0)) write$cgroup_int(r2, 0x0, 0x0) 03:00:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$vnet(r0, &(0x7f0000000100)={0x1, {&(0x7f0000000580)=""/4096, 0xbb4, &(0x7f0000000380)=""/205}}, 0x2eb) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x1012, r2, 0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:00:42 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) write$binfmt_elf64(r7, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x83f) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000a80)=ANY=[@ANYBLOB="a945d4856e0c93889d1a0e538427f40ba41c60f094e759b7987f690c81fb140651913ddc8e93dc2538038984836cabfc4789c558a21d021e33bd4c869670cacd748c95f16e58a57f191bd366969e232f408f763bbd8e83c47905f09dfebaec1bf0cbe5a5bd0a42ea8802"], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1010, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1}) [ 405.993124] audit: type=1804 audit(1545102042.679:85): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/147/bus" dev="sda1" ino=16785 res=1 [ 406.105196] audit: type=1804 audit(1545102042.709:86): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/147/bus" dev="sda1" ino=16785 res=1 03:00:42 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) fstat(0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f00000006c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0xb, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f00000001c0)) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x8a42) 03:00:43 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x3) r2 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x349) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x20000003) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) write$binfmt_elf64(r7, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x83f) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000a80)=ANY=[@ANYBLOB="a945d4856e0c93889d1a0e538427f40ba41c60f094e759b7987f690c81fb140651913ddc8e93dc2538038984836cabfc4789c558a21d021e33bd4c869670cacd748c95f16e58a57f191bd366969e232f408f763bbd8e83c47905f09dfebaec1bf0cbe5a5bd0a42ea8802"], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1010, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1}) 03:00:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$vnet(r0, &(0x7f0000000100)={0x1, {&(0x7f0000000580)=""/4096, 0xbb4, &(0x7f0000000380)=""/205}}, 0x2eb) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x1012, r2, 0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 406.718193] audit: type=1804 audit(1545102043.399:87): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/148/bus" dev="sda1" ino=16785 res=1 03:00:43 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) 03:00:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x280, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x80, 0x0, 0x0, &(0x7f0000000240)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6}, 0x2c) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003840)=[{&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/98, 0x62}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/115, 0x73}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x34000, 0x329]}}, 0x80, &(0x7f0000000340), 0x72, &(0x7f0000000380)}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000038c0)) 03:00:43 executing program 3: r0 = open(&(0x7f0000fedff8)='./file0\x00', 0x141042, 0x0) fstat(r0, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x2000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000000000/0x1000)=nil, &(0x7f00005d6000)) 03:00:44 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000580)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) write$cgroup_int(r0, &(0x7f0000000240), 0x12) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000004c0)) write$cgroup_int(r2, 0x0, 0x0) 03:00:44 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) 03:00:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r1, 0x311}, 0x14}}, 0x0) 03:00:44 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000580)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) write$cgroup_int(r0, &(0x7f0000000240), 0x12) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000004c0)) write$cgroup_int(r2, 0x0, 0x0) 03:00:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100022b0509000100030100ff3ffe58", 0x1f}], 0x1) 03:00:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x2e) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='{'], 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x8408) 03:00:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r1, 0x311}, 0x14}}, 0x0) 03:00:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={&(0x7f00000003c0)={0x10, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x20000549}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0)}, 0x0) [ 407.690905] device nr0 entered promiscuous mode 03:00:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r1, 0x311}, 0x14}}, 0x0) 03:00:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0)='IPVS\x00') perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000000)={0x14, r1, 0x311}, 0x14}}, 0x0) 03:00:44 executing program 1: r0 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d856813000900070014cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0x0) 03:00:44 executing program 3: syz_init_net_socket$llc(0x1a, 0x7ffffff, 0x0) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00`\x9f\xb8\xabt\xb0\xf3\x0e\xf7\x04\x8eG\t)\x88\x9a&\x05\xdc\x92\xff\xa1\x93~\'\xb8K]5\x11\xd2\xe9\\\xcc\xfdfV\xe1\xe42W\xe6@\b1\x98w\x0e]\xab4A\xb5', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x6, 0x1}, 0x14) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000ac0)=""/4096) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r4, r3, 0x0, 0xb, &(0x7f0000000140)='/dev/vsock\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0x200) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7f, 0x4000) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x8100, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0xfffffffffffffffe) r7 = dup2(0xffffffffffffffff, r6) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x1) [ 408.145113] device nr0 entered promiscuous mode 03:00:45 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000580)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000000c0)=0x1) write$cgroup_int(r0, &(0x7f0000000240), 0x12) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000004c0)) write$cgroup_int(r2, 0x0, 0x0) 03:00:45 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x1019f, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev, @local, {[], @dccp={{0x2c03, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 03:00:45 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) 03:00:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x6, 0x0, 0x710000}}) 03:00:45 executing program 5: prctl$PR_GET_TID_ADDRESS(0x34, &(0x7f0000000000)) 03:00:45 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x6, 0x21, &(0x7f0000000040), &(0x7f0000013000)=0x221) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) dup3(r1, r3, 0x0) close(r0) 03:00:45 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x1019f, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev, @local, {[], @dccp={{0x2c03, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 03:00:45 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x7, 0x70, 0x7, 0xceaf, 0x0, 0x7ff, 0x0, 0x0, 0x800, 0x0, 0x1, 0x400, 0x4, 0x2, 0x9, 0x6, 0x4, 0x100000000, 0x9, 0x9, 0x7, 0x1, 0x6, 0x100, 0x6, 0x4, 0x0, 0x80000001, 0x1, 0x1, 0xf77, 0x9, 0x73, 0x0, 0xfffffffeffffffff, 0x415, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x6, 0x3, 0x5, 0x100000001}, 0x0, 0x0, r0, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000100)) fchown(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r4 = gettid() accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f0000000480)=0x10, 0x80000) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x401104000000016) perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000240)=[{0x80000000, 0x80000001, 0x7, 0x7, @tick=0x5, {0xffffffffffffff00, 0x3}, {0x8}, @queue={0x2, {0x0, 0x4}}}, {0xe0, 0x1, 0xffffffffffffffff, 0x100, @time={0x77359400}, {0xb06, 0x4}, {0x7, 0x7fff}, @time=@time}, {0x3ff, 0x5, 0x7f, 0xfffffffffffffffc, @tick=0x100000000, {0x7fff, 0x8}, {}, @raw32={[0x8, 0x80000000]}}], 0x90) 03:00:45 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000100)) ioctl$int_in(r0, 0x80000080045010, &(0x7f0000000080)) 03:00:45 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x1019f, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev, @local, {[], @dccp={{0x2c03, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 03:00:45 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x6, 0x21, &(0x7f0000000040), &(0x7f0000013000)=0x221) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) dup3(r1, r3, 0x0) close(r0) [ 408.907861] device nr0 entered promiscuous mode 03:00:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x500200) 03:00:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r0}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f00000001c0)={'sha384\x00'}, &(0x7f0000000240)}) 03:00:46 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="a3d00c6fc390144fb13296539860415a3a3d2580ccf43f0da4", 0x19}], 0x1) write(r1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r1, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) sendmmsg$alg(r2, &(0x7f0000236fc8)=[{0xc00, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x101d0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") 03:00:46 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc0"], 0x2) sendfile(r0, r2, &(0x7f0000d83ff8), 0x2) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) 03:00:46 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x1019f, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev, @local, {[], @dccp={{0x2c03, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) 03:00:46 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x6, 0x21, &(0x7f0000000040), &(0x7f0000013000)=0x221) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) dup3(r1, r3, 0x0) close(r0) 03:00:46 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$kcm(0xa, 0x400000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0xa, 0x40000000000004, 0x1}, 0x3e1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f00000003c0)}, 0x10) setpriority(0x0, 0x0, 0x80000000) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)) 03:00:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r0}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f00000001c0)={'sha384\x00'}, &(0x7f0000000240)}) 03:00:46 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@ng={0x4, 0x11}, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 03:00:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) 03:00:46 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x6, 0x21, &(0x7f0000000040), &(0x7f0000013000)=0x221) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) dup3(r1, r3, 0x0) close(r0) 03:00:46 executing program 0: r0 = socket$inet(0x15, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000a32000)={&(0x7f0000000000), 0xc, &(0x7f000000e000)={&(0x7f0000000880)={0x20, 0x18, 0x0, 0x0, 0x0, {0x1}, [@typed={0xc, 0x6, @uid}]}, 0x20}}, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x4e22, @loopback}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000024c0), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f00000009c0)=""/93) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f0000000080), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{}], 0x1, &(0x7f0000000340)={0x77359400}) tkill(r1, 0x1000000000016) 03:00:46 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r0}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f00000001c0)={'sha384\x00'}, &(0x7f0000000240)}) 03:00:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{0x0}, {&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5, 0x1f000000}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) [ 409.745202] ima: Can not allocate sm3-256 (reason: -2) [ 409.760096] kauditd_printk_skb: 1 callbacks suppressed [ 409.760109] audit: type=1800 audit(1545102046.439:89): pid=12173 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor1" name="file0" dev="sda1" ino=17019 res=0 [ 409.850639] ima: Can not allocate sm3-256 (reason: -2) [ 409.875439] audit: type=1800 audit(1545102046.559:90): pid=12177 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor1" name="file0" dev="sda1" ino=17019 res=0 03:00:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x50f, 0x10001}, 0x1, 0x3}) 03:00:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 03:00:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x3ff) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000003c0)={r2}) write$FUSE_POLL(r2, &(0x7f0000000080)={0x18}, 0x18) 03:00:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in=@multicast1}}]}, 0x50}}, 0x0) 03:00:49 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r0}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f00000001c0)={'sha384\x00'}, &(0x7f0000000240)}) 03:00:49 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x15, 0x80005, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x3, "02edf0"}, 0x4) 03:00:49 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@setlink={0x48, 0x13, 0x19, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, [{0x8, 0x1, [@nested={0x4}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x48}}, 0x0) 03:00:49 executing program 4: syz_open_dev$dri(0x0, 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00`\x9f\xb8\xabt\xb0\xf3\x0e\xf7\x04\x8eG\t)\x88\x9a&\x05\xdc\x92\xff\xa1\x93~\'\xb8K]5\x11\xd2\xe9\\\xcc\xfdfV\xe1\xe42W\xe6@\b1\x98w\x0e]\xab4A\xb5', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r3, 0x0, 0x800000000001}, 0x14) r6 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000001ac0)=""/4096) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r7, r5, 0x0, 0xb, &(0x7f0000000140)='/dev/vsock\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xffffffffffffffc2, &(0x7f0000000040)='/proc/self/attr/current\x00'}, 0x30) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}) ioctl$TIOCSPGRP(r3, 0x5410, 0x0) 03:00:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x20, 0x10100a) write$evdev(r0, &(0x7f00006f7fe8)=[{{}, 0x1, 0x63, 0x400000002}], 0xd8) 03:00:49 executing program 1: socket$inet6(0xa, 0x0, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) 03:00:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) [ 412.551148] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. 03:00:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x40}) read(r1, &(0x7f0000000300)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 03:00:49 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) lstat(&(0x7f0000000140)='./file0\x00', 0x0) 03:00:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 03:00:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x3ff) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000003c0)={r2}) write$FUSE_POLL(r2, &(0x7f0000000080)={0x18}, 0x18) 03:00:49 executing program 1: socket$inet6(0xa, 0x0, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) 03:00:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 03:00:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x800001, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0070696462d7eca5"], 0x8) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, 0x7ffffffc, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r3) write(r4, &(0x7f0000000400)="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", 0x200) sendfile(r4, r5, 0x0, 0x10000) sched_setattr(0x0, &(0x7f0000000180)={0x0, 0x100006, 0x0, 0x0, 0x0, 0x10000009917}, 0x0) mmap(&(0x7f0000357000/0x1000)=nil, 0x1000, 0x3000000, 0x8071, r1, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)=0x6) 03:00:49 executing program 4: syz_open_dev$dri(0x0, 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00`\x9f\xb8\xabt\xb0\xf3\x0e\xf7\x04\x8eG\t)\x88\x9a&\x05\xdc\x92\xff\xa1\x93~\'\xb8K]5\x11\xd2\xe9\\\xcc\xfdfV\xe1\xe42W\xe6@\b1\x98w\x0e]\xab4A\xb5', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r3, 0x0, 0x800000000001}, 0x14) r6 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000001ac0)=""/4096) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r7, r5, 0x0, 0xb, &(0x7f0000000140)='/dev/vsock\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xffffffffffffffc2, &(0x7f0000000040)='/proc/self/attr/current\x00'}, 0x30) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}) ioctl$TIOCSPGRP(r3, 0x5410, 0x0) [ 413.421371] audit: type=1800 audit(1545102050.099:91): pid=12289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=17048 res=0 03:00:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getgid() socketpair(0x1d, 0x0, 0x0, &(0x7f00000000c0)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) listen(r0, 0x3f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xeb7}, 0xc) [ 413.473824] audit: type=1804 audit(1545102050.099:92): pid=12289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir632837593/syzkaller.BaP8QF/163/file0" dev="sda1" ino=17048 res=1 03:00:50 executing program 1: socket$inet6(0xa, 0x0, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) [ 413.707445] can: request_module (can-proto-0) failed. [ 413.835987] can: request_module (can-proto-0) failed. 03:00:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getgid() socketpair(0x1d, 0x0, 0x0, &(0x7f00000000c0)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) listen(r0, 0x3f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xeb7}, 0xc) 03:00:50 executing program 4: syz_open_dev$dri(0x0, 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00`\x9f\xb8\xabt\xb0\xf3\x0e\xf7\x04\x8eG\t)\x88\x9a&\x05\xdc\x92\xff\xa1\x93~\'\xb8K]5\x11\xd2\xe9\\\xcc\xfdfV\xe1\xe42W\xe6@\b1\x98w\x0e]\xab4A\xb5', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r3, 0x0, 0x800000000001}, 0x14) r6 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000001ac0)=""/4096) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r7, r5, 0x0, 0xb, &(0x7f0000000140)='/dev/vsock\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xffffffffffffffc2, &(0x7f0000000040)='/proc/self/attr/current\x00'}, 0x30) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}) ioctl$TIOCSPGRP(r3, 0x5410, 0x0) [ 414.166913] audit: type=1804 audit(1545102050.839:93): pid=12293 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir632837593/syzkaller.BaP8QF/163/file0" dev="sda1" ino=17048 res=1 [ 414.433667] can: request_module (can-proto-0) failed. 03:00:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getgid() socketpair(0x1d, 0x0, 0x0, &(0x7f00000000c0)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) listen(r0, 0x3f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xeb7}, 0xc) 03:00:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x3ff) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000003c0)={r2}) write$FUSE_POLL(r2, &(0x7f0000000080)={0x18}, 0x18) 03:00:51 executing program 1: socket$inet6(0xa, 0x0, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) 03:00:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x800001, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0070696462d7eca5"], 0x8) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, 0x7ffffffc, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r3) write(r4, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r4, r5, 0x0, 0x10000) sched_setattr(0x0, &(0x7f0000000180)={0x0, 0x100006, 0x0, 0x0, 0x0, 0x10000009917}, 0x0) mmap(&(0x7f0000357000/0x1000)=nil, 0x1000, 0x3000000, 0x8071, r1, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)=0x6) 03:00:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getgid() socketpair(0x1d, 0x0, 0x0, &(0x7f00000000c0)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) listen(r0, 0x3f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xeb7}, 0xc) [ 414.800177] can: request_module (can-proto-0) failed. [ 414.815826] can: request_module (can-proto-0) failed. [ 414.825180] audit: type=1800 audit(1545102051.509:94): pid=12344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=17048 res=0 03:00:51 executing program 4: syz_open_dev$dri(0x0, 0x96, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00`\x9f\xb8\xabt\xb0\xf3\x0e\xf7\x04\x8eG\t)\x88\x9a&\x05\xdc\x92\xff\xa1\x93~\'\xb8K]5\x11\xd2\xe9\\\xcc\xfdfV\xe1\xe42W\xe6@\b1\x98w\x0e]\xab4A\xb5', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x12) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x20, 0x80000001, 0x0, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r3, 0x0, 0x800000000001}, 0x14) r6 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000001ac0)=""/4096) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r7, r5, 0x0, 0xb, &(0x7f0000000140)='/dev/vsock\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xffffffffffffffc2, &(0x7f0000000040)='/proc/self/attr/current\x00'}, 0x30) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000580)) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}) ioctl$TIOCSPGRP(r3, 0x5410, 0x0) [ 414.899838] audit: type=1804 audit(1545102051.569:95): pid=12344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir632837593/syzkaller.BaP8QF/164/file0" dev="sda1" ino=17048 res=1 03:00:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getgid() socketpair(0x1d, 0x0, 0x0, &(0x7f00000000c0)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) listen(r0, 0x3f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xeb7}, 0xc) 03:00:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getgid() socketpair(0x1d, 0x0, 0x0, &(0x7f00000000c0)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) listen(r0, 0x3f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xeb7}, 0xc) 03:00:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x3ff) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000003c0)={r2}) write$FUSE_POLL(r2, &(0x7f0000000080)={0x18}, 0x18) [ 415.483106] can: request_module (can-proto-0) failed. [ 415.527435] can: request_module (can-proto-0) failed. 03:00:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave_0\x00', &(0x7f0000000180)=@ethtool_cmd={0x1}}) 03:00:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x800001, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0070696462d7eca5"], 0x8) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, 0x7ffffffc, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r3) write(r4, &(0x7f0000000400)="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", 0x200) sendfile(r4, r5, 0x0, 0x10000) sched_setattr(0x0, &(0x7f0000000180)={0x0, 0x100006, 0x0, 0x0, 0x0, 0x10000009917}, 0x0) mmap(&(0x7f0000357000/0x1000)=nil, 0x1000, 0x3000000, 0x8071, r1, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)=0x6) 03:00:52 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000003, r2}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="5000000090780000"], 0x0) 03:00:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getgid() socketpair(0x1d, 0x0, 0x0, &(0x7f00000000c0)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) listen(r0, 0x3f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xeb7}, 0xc) [ 415.841494] can: request_module (can-proto-0) failed. 03:00:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000010000000000000800000000076d4001"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001100)={"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"}) 03:00:52 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') exit(0x0) getdents64(r0, 0x0, 0x0) 03:00:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x8) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x0, 0x408001) write$P9_RLERRORu(r1, &(0x7f0000000040)={0x13, 0x7, 0x0, {{0x6, 'nodev:'}}}, 0x13) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0xdf) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000bca9466087edc45f2813b2906f7fd7"], 0x0, 0x1}, 0x48) socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6(0xa, 0x3, 0x800000000000005) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000440)=0xc) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r4) r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) io_destroy(0x0) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_smack_transmute(r3, 0x0, 0x0, 0x0, 0x3) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl(r2, 0x300000008914, &(0x7f0000000300)="153f8dd25d76") mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x6f, "0288964a3e1b76aff815800816f087442e1b1504264a57bae53132794aa4875b1ec51fcae6897d0ee50b30b6a104361cbcf72cf297faf8600d8d13e4d768661345400f5f7a62e3603e7a94b720186c3dd83a9e61f44fa6dcd24032dbf405c0130aafb88576edcdb1614b68030b32f0"}, 0x0) [ 416.032108] audit: type=1800 audit(1545102052.629:96): pid=12386 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=17031 res=0 [ 416.336913] audit: type=1804 audit(1545102052.649:97): pid=12386 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir632837593/syzkaller.BaP8QF/165/file0" dev="sda1" ino=17031 res=1 03:00:53 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000300)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_cache\x00\xd3\xf4=\xf9\xe5\xcc\xe5\x1c\x95\x92\xead\x1a\xcf\x98G\xfa\x82\xba\xe38\xe7D\xe2\x05\xa7\x99\xe2\xec\n\xb6NUc\xc1\xba\xbaa\xf4\xf1\xd5a\xf4\xbe\x03\xf11/\x01\x00\x01\x00&\xda0\xe4\x12\xa0\xbc\"e\x10\x95Q\x1d\xfc\xa2U\x1b\xc8\x00W\x82\xd8\xff;\'\xf7d\x13\x04\x82\xa9\xc7\xe8\xec\xa9\xeax\x06\xc3|\x11\xf5%\x1f\xc8\x9b&\x8fyUVu\xc4Q\xda\xd9\xfax\x91c\x9f\xcd\r=\xb6?\f\xfb(\xb8\x97,\xbb%R\a\xdb\xfb\xfe\xde9\x8e\x14\x00\x01\x997&u%T\xf5[\x92\x98P\b$\xd30\r\x16#\xca') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 03:00:53 executing program 3: mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x0, 0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) 03:00:53 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 03:00:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x800001, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0070696462d7eca5"], 0x8) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, 0x7ffffffc, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0xe15}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) userfaultfd(0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r3) write(r4, &(0x7f0000000400)="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", 0x200) sendfile(r4, r5, 0x0, 0x10000) sched_setattr(0x0, &(0x7f0000000180)={0x0, 0x100006, 0x0, 0x0, 0x0, 0x10000009917}, 0x0) mmap(&(0x7f0000357000/0x1000)=nil, 0x1000, 0x3000000, 0x8071, r1, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000080)=0x6) 03:00:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x1, 0x14, &(0x7f0000e64ff7)="d7fdaf62070179890fddd5a45d3f32e5", 0x10) 03:00:53 executing program 0: syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1b00dc", 0x6}], 0x0, 0x0) 03:00:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000200)=0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:00:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) userfaultfd(0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 416.967251] audit: type=1800 audit(1545102053.649:98): pid=12430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=17035 res=0 [ 416.986291] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 417.036462] audit: type=1804 audit(1545102053.689:99): pid=12430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir632837593/syzkaller.BaP8QF/166/file0" dev="sda1" ino=17035 res=1 [ 417.044697] BFS-fs: bfs_fill_super(): Superblock is corrupted 03:00:54 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') exit(0x0) getdents64(r0, 0x0, 0x0) 03:00:54 executing program 0: syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1b00dc", 0x6}], 0x0, 0x0) 03:00:54 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='ubi0'], &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, &(0x7f0000000140)='adfs\x00') 03:00:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x8) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x0, 0x408001) write$P9_RLERRORu(r1, &(0x7f0000000040)={0x13, 0x7, 0x0, {{0x6, 'nodev:'}}}, 0x13) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0xdf) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000bca9466087edc45f2813b2906f7fd7"], 0x0, 0x1}, 0x48) socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6(0xa, 0x3, 0x800000000000005) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000440)=0xc) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r4) r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) io_destroy(0x0) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_smack_transmute(r3, 0x0, 0x0, 0x0, 0x3) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl(r2, 0x300000008914, &(0x7f0000000300)="153f8dd25d76") mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x6f, "0288964a3e1b76aff815800816f087442e1b1504264a57bae53132794aa4875b1ec51fcae6897d0ee50b30b6a104361cbcf72cf297faf8600d8d13e4d768661345400f5f7a62e3603e7a94b720186c3dd83a9e61f44fa6dcd24032dbf405c0130aafb88576edcdb1614b68030b32f0"}, 0x0) 03:00:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) [ 417.588149] UBIFS error (pid: 12458): cannot open "ubi0", error -19 [ 417.669421] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 417.689038] BFS-fs: bfs_fill_super(): Superblock is corrupted 03:00:54 executing program 0: syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1b00dc", 0x6}], 0x0, 0x0) 03:00:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) [ 417.932824] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 417.954986] BFS-fs: bfs_fill_super(): Superblock is corrupted 03:00:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) 03:00:54 executing program 0: syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1b00dc", 0x6}], 0x0, 0x0) 03:00:54 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000200)=0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:00:54 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000200)=0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:00:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x8) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x0, 0x408001) write$P9_RLERRORu(r1, &(0x7f0000000040)={0x13, 0x7, 0x0, {{0x6, 'nodev:'}}}, 0x13) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0xdf) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000bca9466087edc45f2813b2906f7fd7"], 0x0, 0x1}, 0x48) socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6(0xa, 0x3, 0x800000000000005) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000440)=0xc) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r4) r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) io_destroy(0x0) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_smack_transmute(r3, 0x0, 0x0, 0x0, 0x3) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl(r2, 0x300000008914, &(0x7f0000000300)="153f8dd25d76") mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x6f, "0288964a3e1b76aff815800816f087442e1b1504264a57bae53132794aa4875b1ec51fcae6897d0ee50b30b6a104361cbcf72cf297faf8600d8d13e4d768661345400f5f7a62e3603e7a94b720186c3dd83a9e61f44fa6dcd24032dbf405c0130aafb88576edcdb1614b68030b32f0"}, 0x0) [ 418.187519] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 418.228861] BFS-fs: bfs_fill_super(): Superblock is corrupted 03:00:54 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') exit(0x0) getdents64(r0, 0x0, 0x0) 03:00:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) 03:00:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300), &(0x7f0000000380)=0x4) 03:00:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x400010000000020, 0x101002) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x0, 0x2710}, 0x1, 0x67, 0x400000002}], 0x191) 03:00:55 executing program 0: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x2, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000072aca06ab0143b20000002500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) keyctl$join(0x1, &(0x7f0000001a00)={'syz'}) 03:00:55 executing program 0: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x2, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000072aca06ab0143b20000002500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) keyctl$join(0x1, &(0x7f0000001a00)={'syz'}) [ 418.692198] print_req_error: 125 callbacks suppressed [ 418.692208] print_req_error: I/O error, dev loop3, sector 0 [ 418.703564] buffer_io_error: 122 callbacks suppressed [ 418.703574] Buffer I/O error on dev loop3, logical block 0, lost async page write [ 418.719278] print_req_error: I/O error, dev loop3, sector 8 [ 418.725149] Buffer I/O error on dev loop3, logical block 1, lost async page write [ 418.733183] print_req_error: I/O error, dev loop3, sector 16 03:00:55 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x809, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}]}, 0x34}}, 0x0) [ 418.739041] Buffer I/O error on dev loop3, logical block 2, lost async page write [ 418.747117] print_req_error: I/O error, dev loop3, sector 24 [ 418.753025] Buffer I/O error on dev loop3, logical block 3, lost async page write [ 418.760712] print_req_error: I/O error, dev loop3, sector 32 [ 418.767448] Buffer I/O error on dev loop3, logical block 4, lost async page write [ 418.775216] print_req_error: I/O error, dev loop3, sector 40 [ 418.781033] Buffer I/O error on dev loop3, logical block 5, lost async page write [ 418.789170] print_req_error: I/O error, dev loop3, sector 48 [ 418.795192] Buffer I/O error on dev loop3, logical block 6, lost async page write [ 418.796343] print_req_error: I/O error, dev loop3, sector 56 [ 418.803248] print_req_error: I/O error, dev loop3, sector 64 [ 418.808920] Buffer I/O error on dev loop3, logical block 7, lost async page write [ 418.808994] print_req_error: I/O error, dev loop3, sector 72 [ 418.814839] Buffer I/O error on dev loop3, logical block 8, lost async page write [ 418.822580] Buffer I/O error on dev loop3, logical block 9, lost async page write 03:00:55 executing program 0: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x2, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000072aca06ab0143b20000002500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) keyctl$join(0x1, &(0x7f0000001a00)={'syz'}) 03:00:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440), 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) 03:00:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000200)=0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:00:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000200)=0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:00:55 executing program 0: openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x2, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000072aca06ab0143b20000002500000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) keyctl$join(0x1, &(0x7f0000001a00)={'syz'}) 03:00:55 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') exit(0x0) getdents64(r0, 0x0, 0x0) 03:00:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x8) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r1, 0x3, 0x0, 0x408001) write$P9_RLERRORu(r1, &(0x7f0000000040)={0x13, 0x7, 0x0, {{0x6, 'nodev:'}}}, 0x13) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0xdf) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000bca9466087edc45f2813b2906f7fd7"], 0x0, 0x1}, 0x48) socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6(0xa, 0x3, 0x800000000000005) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000440)=0xc) io_setup(0x3, &(0x7f0000000200)=0x0) io_destroy(r4) r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) io_destroy(0x0) r6 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) fsetxattr$security_smack_transmute(r3, 0x0, 0x0, 0x0, 0x3) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r5, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) ioctl(r2, 0x300000008914, &(0x7f0000000300)="153f8dd25d76") mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x6f, "0288964a3e1b76aff815800816f087442e1b1504264a57bae53132794aa4875b1ec51fcae6897d0ee50b30b6a104361cbcf72cf297faf8600d8d13e4d768661345400f5f7a62e3603e7a94b720186c3dd83a9e61f44fa6dcd24032dbf405c0130aafb88576edcdb1614b68030b32f0"}, 0x0) 03:00:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000200)=0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:00:56 executing program 0: inotify_init() r0 = socket$inet(0x2, 0x2, 0x0) dup(r0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000), 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'veth1_to_bond\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000013c0)=""/21, 0xfffffea1) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 03:00:56 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = gettid() r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) tkill(r1, 0x7) 03:00:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000200)=0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:00:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440), 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) 03:00:57 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @local, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local}], 0x1c) 03:00:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 03:00:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440), 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) 03:00:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 420.872630] FAULT_FLAG_ALLOW_RETRY missing 70 [ 420.877207] CPU: 0 PID: 12588 Comm: syz-executor4 Not tainted 4.20.0-rc7+ #155 [ 420.884586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.893961] Call Trace: [ 420.896698] dump_stack+0x244/0x39d [ 420.900362] ? dump_stack_print_info.cold.1+0x20/0x20 [ 420.905633] handle_userfault.cold.32+0x47/0x62 [ 420.910345] ? userfaultfd_ioctl+0x55d0/0x55d0 [ 420.915018] ? mark_held_locks+0x130/0x130 [ 420.919339] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 420.924400] ? futex_wait_setup+0x266/0x3e0 [ 420.928756] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.934366] ? check_preemption_disabled+0x48/0x280 [ 420.939410] ? debug_smp_processor_id+0x1c/0x20 [ 420.944105] ? perf_trace_lock_acquire+0x15b/0x800 [ 420.949075] ? print_usage_bug+0xc0/0xc0 [ 420.953158] ? zap_class+0x640/0x640 [ 420.956954] ? find_held_lock+0x36/0x1c0 [ 420.961141] ? __handle_mm_fault+0x4bb0/0x5be0 [ 420.965744] ? lock_downgrade+0x900/0x900 [ 420.969993] ? kasan_check_read+0x11/0x20 [ 420.974165] ? do_raw_spin_unlock+0xa7/0x330 [ 420.978587] ? do_raw_spin_trylock+0x270/0x270 [ 420.978609] ? fault_dirty_shared_page.isra.87+0x320/0x320 [ 420.978640] __handle_mm_fault+0x4bbd/0x5be0 [ 420.978669] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 420.978697] ? perf_trace_lock+0x7a0/0x7a0 [ 421.002369] ? perf_trace_lock+0x7a0/0x7a0 [ 421.006636] ? zap_class+0x640/0x640 [ 421.010375] ? zap_class+0x640/0x640 [ 421.014121] ? find_held_lock+0x36/0x1c0 [ 421.018208] ? handle_mm_fault+0x42a/0xc70 [ 421.022460] ? lock_downgrade+0x900/0x900 [ 421.026632] ? check_preemption_disabled+0x48/0x280 [ 421.031718] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 421.036667] ? kasan_check_read+0x11/0x20 [ 421.036685] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 421.036702] ? rcu_softirq_qs+0x20/0x20 [ 421.036767] ? trace_hardirqs_off_caller+0x310/0x310 [ 421.036793] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 421.055426] ? check_preemption_disabled+0x48/0x280 [ 421.055456] handle_mm_fault+0x54f/0xc70 [ 421.055477] ? __handle_mm_fault+0x5be0/0x5be0 [ 421.055499] ? find_vma+0x34/0x190 [ 421.066176] __do_page_fault+0x5e8/0xe60 [ 421.074710] ? trace_hardirqs_off+0xb8/0x310 [ 421.074740] do_page_fault+0xf2/0x7e0 [ 421.074759] ? vmalloc_sync_all+0x30/0x30 [ 421.074816] ? error_entry+0x70/0xd0 [ 421.098410] ? trace_hardirqs_off_caller+0xbb/0x310 [ 421.103438] ? trace_hardirqs_on_caller+0xc0/0x310 [ 421.108439] ? syscall_return_slowpath+0x5e0/0x5e0 [ 421.108457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.108481] ? trace_hardirqs_on_caller+0x310/0x310 [ 421.123260] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 421.123281] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 421.123401] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 421.123419] ? __switch_to_asm+0x40/0x70 [ 421.123437] ? page_fault+0x8/0x30 [ 421.147884] input: syz1 as /devices/virtual/input/input5 [ 421.148136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.158425] ? page_fault+0x8/0x30 [ 421.158443] page_fault+0x1e/0x30 [ 421.158456] RIP: 0033:0x451090 [ 421.158472] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 421.158486] RSP: 002b:00007f52a3ea97a8 EFLAGS: 00010202 [ 421.187569] RAX: 00007f52a3ea9850 RBX: 0000000000000003 RCX: 000000000000000e [ 421.187580] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007f52a3ea9850 [ 421.187590] RBP: 000000000072bfa0 R08: 00000000000003ff R09: 0000000000000000 [ 421.187600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f52a3eaa6d4 03:00:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440), 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) [ 421.187611] R13: 00000000004c576a R14: 00000000004d9d70 R15: 00000000ffffffff [ 421.382213] input: syz1 as /devices/virtual/input/input6 03:00:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f000082ef0a)=""/246) close(r2) 03:00:58 executing program 3: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x101000) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x10001, r2, &(0x7f0000000a00)="25ce3a5615b95e1f65d6f3422455bed969cfb7ec63aa2a3d74a0fba6a2ad2615dee37377ab91ba5d49a098fea32bdb26a0324376e543cd22c4f7941f7014ad2be00e8953b93d3dac8637a61aab585c699e780bc2febe64de27f6010cfc9a6a8a6020cd8ab4367b9a0e7c1638362856c6a50eacece8da9bdeeb5502213b227a2ba81a106ffb59c15270f2d6ef72c20af3426aa72accebb33862b236b35dd06bdb711189541e9273078e43074a143f9a900f31053d4cd24e25f99b4b1d2ab82cda", 0xc0, 0x6, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x1}, 0x90) io_setup(0x101, &(0x7f0000000040)=0x0) write(r2, &(0x7f0000000380)="32ba929d2422936964ffec5b58a489c90bd484dbdca260fee0530847b71be5de248f3a02", 0x24) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x81, {{0x2, 0x4e20, @multicast1}}}, 0x88) r6 = msgget(0x1, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000080)=""/61) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2000000003000000, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 03:00:58 executing program 0: inotify_init() r0 = socket$inet(0x2, 0x2, 0x0) dup(r0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000), 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'veth1_to_bond\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000013c0)=""/21, 0xfffffea1) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 03:00:58 executing program 2: r0 = socket$inet(0x2, 0x840000000003, 0x2) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x7}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r4, @in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x9, 0x2, 0x61acfe4e, 0x81}, 0x98) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x48000, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) setresuid(0x0, r3, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x7) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) process_vm_readv(r6, &(0x7f0000000380)=[{&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000340)=""/61, 0x3d}], 0x2, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) 03:00:58 executing program 3: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x101000) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x10001, r2, &(0x7f0000000a00)="25ce3a5615b95e1f65d6f3422455bed969cfb7ec63aa2a3d74a0fba6a2ad2615dee37377ab91ba5d49a098fea32bdb26a0324376e543cd22c4f7941f7014ad2be00e8953b93d3dac8637a61aab585c699e780bc2febe64de27f6010cfc9a6a8a6020cd8ab4367b9a0e7c1638362856c6a50eacece8da9bdeeb5502213b227a2ba81a106ffb59c15270f2d6ef72c20af3426aa72accebb33862b236b35dd06bdb711189541e9273078e43074a143f9a900f31053d4cd24e25f99b4b1d2ab82cda", 0xc0, 0x6, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x1}, 0x90) io_setup(0x101, &(0x7f0000000040)=0x0) write(r2, &(0x7f0000000380)="32ba929d2422936964ffec5b58a489c90bd484dbdca260fee0530847b71be5de248f3a02", 0x24) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x81, {{0x2, 0x4e20, @multicast1}}}, 0x88) r6 = msgget(0x1, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000080)=""/61) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2000000003000000, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 03:00:58 executing program 4: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x101000) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x10001, r2, &(0x7f0000000a00)="25ce3a5615b95e1f65d6f3422455bed969cfb7ec63aa2a3d74a0fba6a2ad2615dee37377ab91ba5d49a098fea32bdb26a0324376e543cd22c4f7941f7014ad2be00e8953b93d3dac8637a61aab585c699e780bc2febe64de27f6010cfc9a6a8a6020cd8ab4367b9a0e7c1638362856c6a50eacece8da9bdeeb5502213b227a2ba81a106ffb59c15270f2d6ef72c20af3426aa72accebb33862b236b35dd06bdb711189541e9273078e43074a143f9a900f31053d4cd24e25f99b4b1d2ab82cda", 0xc0, 0x6, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x1}, 0x90) io_setup(0x101, &(0x7f0000000040)=0x0) write(r2, &(0x7f0000000380)="32ba929d2422936964ffec5b58a489c90bd484dbdca260fee0530847b71be5de248f3a02", 0x24) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x81, {{0x2, 0x4e20, @multicast1}}}, 0x88) r6 = msgget(0x1, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000080)=""/61) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2000000003000000, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 03:00:58 executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x101000) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x10001, r2, &(0x7f0000000a00)="25ce3a5615b95e1f65d6f3422455bed969cfb7ec63aa2a3d74a0fba6a2ad2615dee37377ab91ba5d49a098fea32bdb26a0324376e543cd22c4f7941f7014ad2be00e8953b93d3dac8637a61aab585c699e780bc2febe64de27f6010cfc9a6a8a6020cd8ab4367b9a0e7c1638362856c6a50eacece8da9bdeeb5502213b227a2ba81a106ffb59c15270f2d6ef72c20af3426aa72accebb33862b236b35dd06bdb711189541e9273078e43074a143f9a900f31053d4cd24e25f99b4b1d2ab82cda", 0xc0, 0x6, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x1}, 0x90) io_setup(0x101, &(0x7f0000000040)=0x0) write(r2, &(0x7f0000000380)="32ba929d2422936964ffec5b58a489c90bd484dbdca260fee0530847b71be5de248f3a02", 0x24) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x81, {{0x2, 0x4e20, @multicast1}}}, 0x88) r6 = msgget(0x1, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000080)=""/61) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2000000003000000, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 03:00:59 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_mount_image$hfsplus(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4d500000, 0x0) 03:00:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f000082ef0a)=""/246) close(r2) 03:00:59 executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x101000) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x10001, r2, &(0x7f0000000a00)="25ce3a5615b95e1f65d6f3422455bed969cfb7ec63aa2a3d74a0fba6a2ad2615dee37377ab91ba5d49a098fea32bdb26a0324376e543cd22c4f7941f7014ad2be00e8953b93d3dac8637a61aab585c699e780bc2febe64de27f6010cfc9a6a8a6020cd8ab4367b9a0e7c1638362856c6a50eacece8da9bdeeb5502213b227a2ba81a106ffb59c15270f2d6ef72c20af3426aa72accebb33862b236b35dd06bdb711189541e9273078e43074a143f9a900f31053d4cd24e25f99b4b1d2ab82cda", 0xc0, 0x6, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x1}, 0x90) io_setup(0x101, &(0x7f0000000040)=0x0) write(r2, &(0x7f0000000380)="32ba929d2422936964ffec5b58a489c90bd484dbdca260fee0530847b71be5de248f3a02", 0x24) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x81, {{0x2, 0x4e20, @multicast1}}}, 0x88) r6 = msgget(0x1, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000080)=""/61) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2000000003000000, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 03:00:59 executing program 4: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x101000) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x10001, r2, &(0x7f0000000a00)="25ce3a5615b95e1f65d6f3422455bed969cfb7ec63aa2a3d74a0fba6a2ad2615dee37377ab91ba5d49a098fea32bdb26a0324376e543cd22c4f7941f7014ad2be00e8953b93d3dac8637a61aab585c699e780bc2febe64de27f6010cfc9a6a8a6020cd8ab4367b9a0e7c1638362856c6a50eacece8da9bdeeb5502213b227a2ba81a106ffb59c15270f2d6ef72c20af3426aa72accebb33862b236b35dd06bdb711189541e9273078e43074a143f9a900f31053d4cd24e25f99b4b1d2ab82cda", 0xc0, 0x6, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x1}, 0x90) io_setup(0x101, &(0x7f0000000040)=0x0) write(r2, &(0x7f0000000380)="32ba929d2422936964ffec5b58a489c90bd484dbdca260fee0530847b71be5de248f3a02", 0x24) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x81, {{0x2, 0x4e20, @multicast1}}}, 0x88) r6 = msgget(0x1, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000080)=""/61) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2000000003000000, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 03:00:59 executing program 4: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x101000) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x10001, r2, &(0x7f0000000a00)="25ce3a5615b95e1f65d6f3422455bed969cfb7ec63aa2a3d74a0fba6a2ad2615dee37377ab91ba5d49a098fea32bdb26a0324376e543cd22c4f7941f7014ad2be00e8953b93d3dac8637a61aab585c699e780bc2febe64de27f6010cfc9a6a8a6020cd8ab4367b9a0e7c1638362856c6a50eacece8da9bdeeb5502213b227a2ba81a106ffb59c15270f2d6ef72c20af3426aa72accebb33862b236b35dd06bdb711189541e9273078e43074a143f9a900f31053d4cd24e25f99b4b1d2ab82cda", 0xc0, 0x6, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x1}, 0x90) io_setup(0x101, &(0x7f0000000040)=0x0) write(r2, &(0x7f0000000380)="32ba929d2422936964ffec5b58a489c90bd484dbdca260fee0530847b71be5de248f3a02", 0x24) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x81, {{0x2, 0x4e20, @multicast1}}}, 0x88) r6 = msgget(0x1, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000080)=""/61) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2000000003000000, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 03:00:59 executing program 3: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x101000) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x10001, r2, &(0x7f0000000a00)="25ce3a5615b95e1f65d6f3422455bed969cfb7ec63aa2a3d74a0fba6a2ad2615dee37377ab91ba5d49a098fea32bdb26a0324376e543cd22c4f7941f7014ad2be00e8953b93d3dac8637a61aab585c699e780bc2febe64de27f6010cfc9a6a8a6020cd8ab4367b9a0e7c1638362856c6a50eacece8da9bdeeb5502213b227a2ba81a106ffb59c15270f2d6ef72c20af3426aa72accebb33862b236b35dd06bdb711189541e9273078e43074a143f9a900f31053d4cd24e25f99b4b1d2ab82cda", 0xc0, 0x6, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x1}, 0x90) io_setup(0x101, &(0x7f0000000040)=0x0) write(r2, &(0x7f0000000380)="32ba929d2422936964ffec5b58a489c90bd484dbdca260fee0530847b71be5de248f3a02", 0x24) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x81, {{0x2, 0x4e20, @multicast1}}}, 0x88) r6 = msgget(0x1, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000080)=""/61) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2000000003000000, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 03:01:00 executing program 3: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x101000) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x10001, r2, &(0x7f0000000a00)="25ce3a5615b95e1f65d6f3422455bed969cfb7ec63aa2a3d74a0fba6a2ad2615dee37377ab91ba5d49a098fea32bdb26a0324376e543cd22c4f7941f7014ad2be00e8953b93d3dac8637a61aab585c699e780bc2febe64de27f6010cfc9a6a8a6020cd8ab4367b9a0e7c1638362856c6a50eacece8da9bdeeb5502213b227a2ba81a106ffb59c15270f2d6ef72c20af3426aa72accebb33862b236b35dd06bdb711189541e9273078e43074a143f9a900f31053d4cd24e25f99b4b1d2ab82cda", 0xc0, 0x6, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x1}, 0x90) io_setup(0x101, &(0x7f0000000040)=0x0) write(r2, &(0x7f0000000380)="32ba929d2422936964ffec5b58a489c90bd484dbdca260fee0530847b71be5de248f3a02", 0x24) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x81, {{0x2, 0x4e20, @multicast1}}}, 0x88) r6 = msgget(0x1, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000080)=""/61) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2000000003000000, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 03:01:00 executing program 0: inotify_init() r0 = socket$inet(0x2, 0x2, 0x0) dup(r0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000), 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'veth1_to_bond\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000013c0)=""/21, 0xfffffea1) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 03:01:00 executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x101000) ioctl$PPPIOCGCHAN(r3, 0x80047437, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r1, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) io_cancel(0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0xf, 0x10001, r2, &(0x7f0000000a00)="25ce3a5615b95e1f65d6f3422455bed969cfb7ec63aa2a3d74a0fba6a2ad2615dee37377ab91ba5d49a098fea32bdb26a0324376e543cd22c4f7941f7014ad2be00e8953b93d3dac8637a61aab585c699e780bc2febe64de27f6010cfc9a6a8a6020cd8ab4367b9a0e7c1638362856c6a50eacece8da9bdeeb5502213b227a2ba81a106ffb59c15270f2d6ef72c20af3426aa72accebb33862b236b35dd06bdb711189541e9273078e43074a143f9a900f31053d4cd24e25f99b4b1d2ab82cda", 0xc0, 0x6, 0x0, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x1}, 0x90) io_setup(0x101, &(0x7f0000000040)=0x0) write(r2, &(0x7f0000000380)="32ba929d2422936964ffec5b58a489c90bd484dbdca260fee0530847b71be5de248f3a02", 0x24) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x81, {{0x2, 0x4e20, @multicast1}}}, 0x88) r6 = msgget(0x1, 0x0) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000080)=""/61) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2000000003000000, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 03:01:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101801) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffded, 0xfa00, {0x0, 0x0}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xa7}) 03:01:00 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/../file0\x00', 0x800002000000, 0x19c) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x10) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000001c0)={'bcsf0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e21, 0xe7d, @ipv4, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x7}, 0x8, [0x0, 0x40000000, 0x0, 0x0, 0x1000, 0xfffffffffffffffc, 0x6, 0x4]}, 0x5c) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000100)=0x6, 0x4) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000380)=""/148) lsetxattr$security_ima(&(0x7f0000000200)='./bus\x00', &(0x7f0000000480)='security.ima\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0411fb2e12f10728f15a5f95f553b47b1bd4df2955372d635e7bc7e6363b3d82453209dc5034d33a5c2608171eafc8c9234b62d581b1bd179022033ce718cd333dc13b83f615cc34da988db7a1a912b70ff301892625bea36b7dafbc7a7fffffffb8e5118e20a97205cb7890418d40be7ebd2ba609a931ffff792f1e072b3153e7a0650500000000000000a641bf4851c7a10729541e05dc67bb82f9f6842760dce1b30f5d000000000000000000"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x10000000000000, r2) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000440)=@fragment={0x3f, 0x0, 0x5, 0x10001, 0x0, 0x800000000, 0x67}, 0x8) mkdirat(r3, &(0x7f0000000340)='./file0/../file0\x00', 0x20) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000500)=0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$VT_RELDISP(r4, 0x5605) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(&(0x7f00000004c0)='\x00', 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x32, r5, 0x0) ftruncate(r5, 0x7fff) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) [ 423.821157] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:01:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f000082ef0a)=""/246) close(r2) 03:01:00 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="bf160000000000006961000000000000616200000000000085100000010000009500000000000000bf100000000000003c200000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:01:00 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 03:01:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_vs\x00') sendfile(r0, r1, 0x0, 0x800009) 03:01:00 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = creat(0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xd}}, 0x20) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000001640)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001680)={0x0, 0x8}, 0x8) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)=0x80000002) process_vm_writev(0x0, &(0x7f0000001580)=[{0x0}], 0x1, &(0x7f0000001700), 0x0, 0x0) write$P9_ROPEN(r1, &(0x7f0000001600)={0x18, 0x71, 0x1, {{0x81, 0x4, 0x4}, 0x8f4f}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x100000000000000}, 0xfffffefd) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x5}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:01:00 executing program 3: r0 = socket(0x81000100000010, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="1f0000001a0007f1fff57f020802003f0000010053d6445f89390836be381b", 0x1f) 03:01:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_vs\x00') sendfile(r0, r1, 0x0, 0x800009) 03:01:01 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000180)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "65a0178f2fde4db3"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000012f80)={0x1, 0xfffffffffffffffc, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}}, 0x0) 03:01:01 executing program 0: inotify_init() r0 = socket$inet(0x2, 0x2, 0x0) dup(r0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000788000), 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'veth1_to_bond\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000013c0)=""/21, 0xfffffea1) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 03:01:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_vs\x00') sendfile(r0, r1, 0x0, 0x800009) 03:01:01 executing program 3: r0 = socket(0x81000100000010, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="1f0000001a0007f1fff57f020802003f0000010053d6445f89390836be381b", 0x1f) 03:01:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000001dc0)="2400000021002551071c0165ff0ffc020202030000100f000ee1000c0800100000000000bc0000008f3943793a5ea67658cb22b79489bbdd14f6fd59b97dc8f8b550e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464e0c05df670d851f785ea2b85d32b3583d87124da3bb0b9e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c483daabb7e919e204853d48a5a6bd525801d5cae983cf4544a9c4c396f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3da31a110af1acb78ce510c7e060f433314f5a171b182deb7904", 0xe0) 03:01:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f000082ef0a)=""/246) close(r2) 03:01:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_vs\x00') sendfile(r0, r1, 0x0, 0x800009) 03:01:01 executing program 3: r0 = socket(0x81000100000010, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="1f0000001a0007f1fff57f020802003f0000010053d6445f89390836be381b", 0x1f) 03:01:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 03:01:01 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r2, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x30000) 03:01:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 03:01:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 03:01:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 03:01:02 executing program 4: io_cancel(0x0, 0xfffffffffffffffe, &(0x7f0000000100)) 03:01:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x148) 03:01:02 executing program 3: r0 = socket(0x81000100000010, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000040)="1f0000001a0007f1fff57f020802003f0000010053d6445f89390836be381b", 0x1f) 03:01:02 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:01:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:01:02 executing program 1: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000100)=""/194, 0xc2}], 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 03:01:03 executing program 4: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'ip6_vti0\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100)=0x200000, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000}, 0x1c) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2, 0x182) r4 = memfd_create(&(0x7f0000000440)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000480)=0x30) ioctl$LOOP_CLR_FD(r3, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) sendmsg(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)}, 0x20004000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r1}, 0x14) [ 426.316021] device nr0 entered promiscuous mode 03:01:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000002, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ptrace$cont(0x1f, r0, 0x1, 0x4) [ 426.402506] rpcbind: RPC call returned error 22 [ 426.445392] rpcbind: RPC call returned error 22 03:01:03 executing program 1: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000100)=""/194, 0xc2}], 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 03:01:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x1) 03:01:03 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001001, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000100)='{\x00', &(0x7f0000000180)='bpf\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='lokeyring.{\x00', &(0x7f0000000280)=':\x00', &(0x7f00000002c0)='bpf\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='bpf\x00'], &(0x7f0000000540)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='bpf\x00', &(0x7f0000000440)='bpf\x00', &(0x7f0000000480)='\x00', &(0x7f0000000500)=':-:']) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x5890, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x10c000, 0x0) 03:01:03 executing program 0: r0 = socket$inet(0x10, 0x2, 0xc) pipe2(0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="24000000010707121dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:01:03 executing program 1: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000100)=""/194, 0xc2}], 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) [ 427.094875] print_req_error: 250 callbacks suppressed [ 427.094893] print_req_error: I/O error, dev loop2, sector 0 [ 427.106630] buffer_io_error: 250 callbacks suppressed [ 427.106639] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 427.120551] print_req_error: I/O error, dev loop2, sector 8 [ 427.126514] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 427.134584] print_req_error: I/O error, dev loop2, sector 16 [ 427.140563] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 427.148651] print_req_error: I/O error, dev loop2, sector 24 [ 427.153192] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 427.154596] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 427.171676] print_req_error: I/O error, dev loop2, sector 32 [ 427.177675] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 427.185793] print_req_error: I/O error, dev loop2, sector 40 [ 427.191729] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 427.199834] print_req_error: I/O error, dev loop2, sector 48 [ 427.206027] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 427.214127] print_req_error: I/O error, dev loop2, sector 56 [ 427.220040] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 427.223131] print_req_error: I/O error, dev loop2, sector 64 [ 427.227880] print_req_error: I/O error, dev loop2, sector 72 [ 427.233574] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 427.233647] Buffer I/O error on dev loop2, logical block 10, lost async page write 03:01:04 executing program 1: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000100)=""/194, 0xc2}], 0x1, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 03:01:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x148) 03:01:04 executing program 0: r0 = socket$inet(0x10, 0x2, 0xc) pipe2(0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="24000000010707121dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:01:04 executing program 4: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'ip6_vti0\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100)=0x200000, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000}, 0x1c) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2, 0x182) r4 = memfd_create(&(0x7f0000000440)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000480)=0x30) ioctl$LOOP_CLR_FD(r3, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) sendmsg(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)}, 0x20004000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r1}, 0x14) [ 427.380618] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 03:01:04 executing program 0: r0 = socket$inet(0x10, 0x2, 0xc) pipe2(0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="24000000010707121dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 427.503758] device nr0 entered promiscuous mode 03:01:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) getgid() mount$9p_rdma(&(0x7f00000002c0)='127.0.0.1\x00', 0x0, 0x0, 0x0, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r3, 0x0, 0x0) dup3(r2, r1, 0x0) [ 427.631037] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 03:01:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000002, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ptrace$cont(0x1f, r0, 0x1, 0x4) 03:01:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$vnet(r0, &(0x7f0000000480)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, 0x0}}, 0x68) fcntl$setstatus(r0, 0x4, 0x40044000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x80000000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:01:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) getgid() mount$9p_rdma(&(0x7f00000002c0)='127.0.0.1\x00', 0x0, 0x0, 0x0, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r3, 0x0, 0x0) dup3(r2, r1, 0x0) 03:01:06 executing program 0: r0 = socket$inet(0x10, 0x2, 0xc) pipe2(0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="24000000010707121dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:01:06 executing program 4: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'ip6_vti0\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100)=0x200000, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000}, 0x1c) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2, 0x182) r4 = memfd_create(&(0x7f0000000440)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000480)=0x30) ioctl$LOOP_CLR_FD(r3, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) sendmsg(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)}, 0x20004000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r1}, 0x14) 03:01:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x148) [ 429.434790] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 429.474947] audit: type=1804 audit(1545102066.159:100): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/178/bus" dev="sda1" ino=16849 res=1 [ 429.623919] device nr0 entered promiscuous mode 03:01:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)="bf", 0x1}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @mcast2}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000300)}}], 0x4000000000001fe, 0x0) [ 429.729586] audit: type=1804 audit(1545102066.409:101): pid=12923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/178/bus" dev="sda1" ino=16849 res=1 [ 429.902387] audit: type=1804 audit(1545102066.439:102): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/178/bus" dev="sda1" ino=16849 res=1 03:01:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$vnet(r0, &(0x7f0000000480)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, 0x0}}, 0x68) fcntl$setstatus(r0, 0x4, 0x40044000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x80000000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:01:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) getgid() mount$9p_rdma(&(0x7f00000002c0)='127.0.0.1\x00', 0x0, 0x0, 0x0, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r3, 0x0, 0x0) dup3(r2, r1, 0x0) [ 430.126174] audit: type=1804 audit(1545102066.799:103): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/179/bus" dev="sda1" ino=16754 res=1 03:01:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) getgid() mount$9p_rdma(&(0x7f00000002c0)='127.0.0.1\x00', 0x0, 0x0, 0x0, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup2(r0, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r3, 0x0, 0x0) dup3(r2, r1, 0x0) 03:01:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000580)) r0 = socket$inet6(0xa, 0x3, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 03:01:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x148) [ 430.623883] device nr0 entered promiscuous mode 03:01:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000002, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ptrace$cont(0x1f, r0, 0x1, 0x4) 03:01:09 executing program 4: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, &(0x7f0000000280)) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'ip6_vti0\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100)=0x200000, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000}, 0x1c) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x2, 0x182) r4 = memfd_create(&(0x7f0000000440)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000480)=0x30) ioctl$LOOP_CLR_FD(r3, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) sendmsg(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)}, 0x20004000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r1}, 0x14) 03:01:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$vnet(r0, &(0x7f0000000480)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, 0x0}}, 0x68) fcntl$setstatus(r0, 0x4, 0x40044000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x80000000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:01:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000003b40)=""/5, 0x5) 03:01:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000380)='io.bfq.weight\x00e\xe8,\xe8\xaab\xcc\x83\xe6\xac>\xaaD\xb1\xefw\xb8=\xa4T-\xde\"y\xb5\xbc\xc4\xf0\xec.\x1b\xc2\xbb\xe6\x9ca\x066\x12V\xc5> \x8bt\x1c\xe8\x95(&\xb8Y\xac\x1d2XpZ\x95\x8eS\xe4\x1e\x8f?\xe7\xd5!\xbf\x16-\xa6\xe2*na%\xc6\xa8B}.\xffE/p<\x94C`\x85\xceiEG\xd4?\xc5\x9e\xc38\xe9\xd7H\xa9\xceZ\nE43\xd4^\xe5\xc2\x82\xf3W\\Q\xfc\xde\xba\xa3\xe9\xa1\xa7\x8f \x84\xbco\xcf\b\xfc/`|\vh\xa5\"\xbf\x17\x19\xe1\xfa\xa3\xf5\x1e\xe9\x9ae\x13\xd1U\xca\x7f\xf5\xdf{\xbaw-x $#$p\x17\xcdN\t\x1d\xa5)\x9d\xda\x10\xb9a\a?0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_LOG_BASE(r1, 0x4004af07, &(0x7f00000000c0)=&(0x7f0000000140)) rt_sigsuspend(0x0, 0x0) [ 432.509929] audit: type=1804 audit(1545102069.189:104): pid=12962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/180/bus" dev="sda1" ino=16785 res=1 03:01:09 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x2, 0x3, 0x0, 0x0, '\x00', 0x6}, 0x3, 0x0, 0x0, r2, 0x0, 0x4, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x9, 0x3]}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) futimesat(r4, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x0, 0x7, 0x401}, 0x0, 0x3, 0x3f, r3, 0x3, 0x8, 'syz1\x00', &(0x7f0000000140)=['overlay\x00', 'vmnet1^\'cgroup%posix_acl_access\\{\x84\x00', '/dev/ptmx\x00'], 0x35, [], [0x0, 0x0, 0xffffffffffff7fff, 0x1]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)={[{@flushoncommit='flushoncommit'}, {@ssd_spread='ssd_spread'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<'}}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725074b96c09fe25bf1"]) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getegid() getuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001080)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001180)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000800)='hfsplus\x00', &(0x7f0000000840)='./file1\x00', 0xfff, 0x1, &(0x7f0000000fc0)=[{0x0, 0x0, 0x4}], 0x400, 0x0) fcntl$getown(r1, 0x9) 03:01:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r1 = socket(0xa, 0x1, 0x0) socket$inet6(0xa, 0xf, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=@known='user.syz\x00', &(0x7f0000000540), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)={'nat\x00'}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xfaed293963fd6cc5) pipe(&(0x7f0000000340)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x200000000004, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000480)) sendto$inet(r2, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0xfffffd72) add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffc) geteuid() request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='filter\x00', 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000680)) syz_extract_tcp_res$synack(&(0x7f00000006c0), 0x1, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000500), &(0x7f0000000880)="7ed4b1363d7f4712aa67ae3d70d1a77af337e3e04d2fc5dfaa33a9ec8bda33d8b25195f96e472be3f32926f00c33ecf01be70f88d169a43553289f011c5bbd28d7300fcc2f1232d1379c82d9feac4970c0719272cd23f2a987728116b89110576ec8da6ce17ffbc84955869cd2bf04d4141304454ba2e370f0ecc2353daf678b97854687f9d3edce047e35ffee9eea911fb621f9345077140c7f54c439918245064699a4592c7ee2cfdea8f55c5f9c57ed76a4e29cfd2b4d04c53b9c6d8e4e141c0f6b112cd59600000000000000", 0xce, 0x0) clock_gettime(0xfffffffffffffff8, &(0x7f0000000780)) select(0x40, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000640)) geteuid() r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r2, r3, &(0x7f0000000080), 0x80000003) sendfile(r1, r0, &(0x7f0000000040)=0x12c, 0x7fffffff) 03:01:09 executing program 2: getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_LOG_BASE(r1, 0x4004af07, &(0x7f00000000c0)=&(0x7f0000000140)) rt_sigsuspend(0x0, 0x0) [ 432.828462] print_req_error: 162 callbacks suppressed [ 432.828474] print_req_error: I/O error, dev loop2, sector 256 [ 432.910076] print_req_error: I/O error, dev loop2, sector 0 [ 432.916245] buffer_io_error: 162 callbacks suppressed [ 432.916258] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 432.929237] print_req_error: I/O error, dev loop2, sector 8 [ 432.935034] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 432.942795] print_req_error: I/O error, dev loop2, sector 16 [ 432.948639] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 432.956425] print_req_error: I/O error, dev loop2, sector 24 [ 432.962283] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 432.969977] print_req_error: I/O error, dev loop2, sector 32 [ 432.975847] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 432.983623] print_req_error: I/O error, dev loop2, sector 40 [ 432.989439] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 432.997189] print_req_error: I/O error, dev loop2, sector 48 [ 433.003105] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 433.010840] print_req_error: I/O error, dev loop2, sector 56 [ 433.016746] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 433.024513] print_req_error: I/O error, dev loop2, sector 64 [ 433.030331] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 433.038121] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 433.093120] ntfs: (device loop5): parse_options(): Unrecognized mount option cpuacct.stat. 03:01:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$vnet(r0, &(0x7f0000000480)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, 0x0}}, 0x68) fcntl$setstatus(r0, 0x4, 0x40044000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x80000000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:01:09 executing program 2: getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_LOG_BASE(r1, 0x4004af07, &(0x7f00000000c0)=&(0x7f0000000140)) rt_sigsuspend(0x0, 0x0) 03:01:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000002, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ptrace$cont(0x1f, r0, 0x1, 0x4) [ 433.420666] audit: type=1804 audit(1545102070.099:105): pid=13007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir331349640/syzkaller.XtrbXD/181/bus" dev="sda1" ino=17112 res=1 03:01:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551b, &(0x7f0000001000)) 03:01:10 executing program 2: getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_LOG_BASE(r1, 0x4004af07, &(0x7f00000000c0)=&(0x7f0000000140)) rt_sigsuspend(0x0, 0x0) 03:01:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) move_pages(0x0, 0x12, &(0x7f0000000080)=[&(0x7f000001b000/0x2000)=nil, &(0x7f000001a000/0x1000)=nil], &(0x7f0000001380), &(0x7f0000000140), 0x0) [ 433.711962] hfsplus: unable to find HFS+ superblock 03:01:10 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x11, 0x40000001, r0, 0x0) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 03:01:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r1 = socket(0xa, 0x1, 0x0) socket$inet6(0xa, 0xf, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=@known='user.syz\x00', &(0x7f0000000540), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)={'nat\x00'}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xfaed293963fd6cc5) pipe(&(0x7f0000000340)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x200000000004, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000480)) sendto$inet(r2, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0xfffffd72) add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffc) geteuid() request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='filter\x00', 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000680)) syz_extract_tcp_res$synack(&(0x7f00000006c0), 0x1, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000500), &(0x7f0000000880)="7ed4b1363d7f4712aa67ae3d70d1a77af337e3e04d2fc5dfaa33a9ec8bda33d8b25195f96e472be3f32926f00c33ecf01be70f88d169a43553289f011c5bbd28d7300fcc2f1232d1379c82d9feac4970c0719272cd23f2a987728116b89110576ec8da6ce17ffbc84955869cd2bf04d4141304454ba2e370f0ecc2353daf678b97854687f9d3edce047e35ffee9eea911fb621f9345077140c7f54c439918245064699a4592c7ee2cfdea8f55c5f9c57ed76a4e29cfd2b4d04c53b9c6d8e4e141c0f6b112cd59600000000000000", 0xce, 0x0) clock_gettime(0xfffffffffffffff8, &(0x7f0000000780)) select(0x40, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000640)) geteuid() r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r2, r3, &(0x7f0000000080), 0x80000003) sendfile(r1, r0, &(0x7f0000000040)=0x12c, 0x7fffffff) 03:01:10 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000080)) setsockopt$inet6_int(r0, 0x3a, 0x0, &(0x7f0000000040), 0x1d9) [ 433.884874] overlayfs: './file0' not a directory [ 433.989927] ntfs: (device loop5): parse_options(): Unrecognized mount option cpuacct.stat. 03:01:10 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x2, 0x3, 0x0, 0x0, '\x00', 0x6}, 0x3, 0x0, 0x0, r2, 0x0, 0x4, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x9, 0x3]}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) futimesat(r4, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x0, 0x7, 0x401}, 0x0, 0x3, 0x3f, r3, 0x3, 0x8, 'syz1\x00', &(0x7f0000000140)=['overlay\x00', 'vmnet1^\'cgroup%posix_acl_access\\{\x84\x00', '/dev/ptmx\x00'], 0x35, [], [0x0, 0x0, 0xffffffffffff7fff, 0x1]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)={[{@flushoncommit='flushoncommit'}, {@ssd_spread='ssd_spread'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<'}}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725074b96c09fe25bf1"]) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getegid() getuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001080)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001180)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000800)='hfsplus\x00', &(0x7f0000000840)='./file1\x00', 0xfff, 0x1, &(0x7f0000000fc0)=[{0x0, 0x0, 0x4}], 0x400, 0x0) fcntl$getown(r1, 0x9) 03:01:10 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000107000/0x8000)=nil, 0x8000, 0x0, 0x31, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x3f00) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000)}, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x20, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f00000004c0)={0x0, 0x989680}, 0x0, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000140), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) 03:01:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0xffffffffffffff7c, &(0x7f00000008c0)={&(0x7f00000007c0)=@bridge_getlink={0x34, 0x12, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\xc0'}]}, 0x34}}, 0x0) 03:01:10 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x2, 0x3, 0x0, 0x0, '\x00', 0x6}, 0x3, 0x0, 0x0, r2, 0x0, 0x4, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x9, 0x3]}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) futimesat(r4, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x0, 0x7, 0x401}, 0x0, 0x3, 0x3f, r3, 0x3, 0x8, 'syz1\x00', &(0x7f0000000140)=['overlay\x00', 'vmnet1^\'cgroup%posix_acl_access\\{\x84\x00', '/dev/ptmx\x00'], 0x35, [], [0x0, 0x0, 0xffffffffffff7fff, 0x1]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)={[{@flushoncommit='flushoncommit'}, {@ssd_spread='ssd_spread'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<'}}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725074b96c09fe25bf1"]) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getegid() getuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001080)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001180)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000800)='hfsplus\x00', &(0x7f0000000840)='./file1\x00', 0xfff, 0x1, &(0x7f0000000fc0)=[{0x0, 0x0, 0x4}], 0x400, 0x0) fcntl$getown(r1, 0x9) 03:01:10 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x11, 0x40000001, r0, 0x0) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) [ 434.285732] ntfs: (device loop5): parse_options(): Unrecognized mount option cpuacct.stat. [ 434.524158] ntfs: (device loop4): parse_options(): Unrecognized mount option cpuacct.stat. [ 434.610942] hfsplus: unable to find HFS+ superblock [ 434.841941] hfsplus: unable to find HFS+ superblock 03:01:13 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x2, 0x3, 0x0, 0x0, '\x00', 0x6}, 0x3, 0x0, 0x0, r2, 0x0, 0x4, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x9, 0x3]}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) futimesat(r4, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x0, 0x7, 0x401}, 0x0, 0x3, 0x3f, r3, 0x3, 0x8, 'syz1\x00', &(0x7f0000000140)=['overlay\x00', 'vmnet1^\'cgroup%posix_acl_access\\{\x84\x00', '/dev/ptmx\x00'], 0x35, [], [0x0, 0x0, 0xffffffffffff7fff, 0x1]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)={[{@flushoncommit='flushoncommit'}, {@ssd_spread='ssd_spread'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<'}}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725074b96c09fe25bf1"]) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getegid() getuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001080)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001180)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000800)='hfsplus\x00', &(0x7f0000000840)='./file1\x00', 0xfff, 0x1, &(0x7f0000000fc0)=[{0x0, 0x0, 0x4}], 0x400, 0x0) fcntl$getown(r1, 0x9) 03:01:13 executing program 1: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x2, 0x3, 0x0, 0x0, '\x00', 0x6}, 0x3, 0x0, 0x0, r2, 0x0, 0x4, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x9, 0x3]}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) futimesat(r4, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x0, 0x7, 0x401}, 0x0, 0x3, 0x3f, r3, 0x3, 0x8, 'syz1\x00', &(0x7f0000000140)=['overlay\x00', 'vmnet1^\'cgroup%posix_acl_access\\{\x84\x00', '/dev/ptmx\x00'], 0x35, [], [0x0, 0x0, 0xffffffffffff7fff, 0x1]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)={[{@flushoncommit='flushoncommit'}, {@ssd_spread='ssd_spread'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<'}}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725074b96c09fe25bf1"]) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getegid() getuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001080)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001180)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000800)='hfsplus\x00', &(0x7f0000000840)='./file1\x00', 0xfff, 0x1, &(0x7f0000000fc0)=[{0x0, 0x0, 0x4}], 0x400, 0x0) fcntl$getown(r1, 0x9) 03:01:13 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x11, 0x40000001, r0, 0x0) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 03:01:13 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x2, 0x3, 0x0, 0x0, '\x00', 0x6}, 0x3, 0x0, 0x0, r2, 0x0, 0x4, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x9, 0x3]}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) futimesat(r4, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x0, 0x7, 0x401}, 0x0, 0x3, 0x3f, r3, 0x3, 0x8, 'syz1\x00', &(0x7f0000000140)=['overlay\x00', 'vmnet1^\'cgroup%posix_acl_access\\{\x84\x00', '/dev/ptmx\x00'], 0x35, [], [0x0, 0x0, 0xffffffffffff7fff, 0x1]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)={[{@flushoncommit='flushoncommit'}, {@ssd_spread='ssd_spread'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<'}}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725074b96c09fe25bf1"]) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getegid() getuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001080)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001180)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000800)='hfsplus\x00', &(0x7f0000000840)='./file1\x00', 0xfff, 0x1, &(0x7f0000000fc0)=[{0x0, 0x0, 0x4}], 0x400, 0x0) fcntl$getown(r1, 0x9) 03:01:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r1 = socket(0xa, 0x1, 0x0) socket$inet6(0xa, 0xf, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=@known='user.syz\x00', &(0x7f0000000540), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)={'nat\x00'}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xfaed293963fd6cc5) pipe(&(0x7f0000000340)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x200000000004, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000480)) sendto$inet(r2, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0xfffffd72) add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffc) geteuid() request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='filter\x00', 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000680)) syz_extract_tcp_res$synack(&(0x7f00000006c0), 0x1, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000500), &(0x7f0000000880)="7ed4b1363d7f4712aa67ae3d70d1a77af337e3e04d2fc5dfaa33a9ec8bda33d8b25195f96e472be3f32926f00c33ecf01be70f88d169a43553289f011c5bbd28d7300fcc2f1232d1379c82d9feac4970c0719272cd23f2a987728116b89110576ec8da6ce17ffbc84955869cd2bf04d4141304454ba2e370f0ecc2353daf678b97854687f9d3edce047e35ffee9eea911fb621f9345077140c7f54c439918245064699a4592c7ee2cfdea8f55c5f9c57ed76a4e29cfd2b4d04c53b9c6d8e4e141c0f6b112cd59600000000000000", 0xce, 0x0) clock_gettime(0xfffffffffffffff8, &(0x7f0000000780)) select(0x40, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000640)) geteuid() r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r2, r3, &(0x7f0000000080), 0x80000003) sendfile(r1, r0, &(0x7f0000000040)=0x12c, 0x7fffffff) 03:01:13 executing program 3: unshare(0x24000000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r0, 0x0) 03:01:13 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x11, 0x40000001, r0, 0x0) mkdir(&(0x7f00000001c0)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) [ 436.521647] overlayfs: failed to resolve './file1': -2 [ 436.540273] ntfs: (device loop5): parse_options(): Unrecognized mount option cpuacct.stat. 03:01:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4000000000008004, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) dup3(r0, r2, 0x0) [ 436.603920] ntfs: (device loop4): parse_options(): Unrecognized mount option cpuacct.stat. 03:01:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) write$cgroup_int(r2, &(0x7f0000000000), 0x17b) 03:01:13 executing program 1: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x2, 0x3, 0x0, 0x0, '\x00', 0x6}, 0x3, 0x0, 0x0, r2, 0x0, 0x4, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x9, 0x3]}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) futimesat(r4, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x0, 0x7, 0x401}, 0x0, 0x3, 0x3f, r3, 0x3, 0x8, 'syz1\x00', &(0x7f0000000140)=['overlay\x00', 'vmnet1^\'cgroup%posix_acl_access\\{\x84\x00', '/dev/ptmx\x00'], 0x35, [], [0x0, 0x0, 0xffffffffffff7fff, 0x1]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)={[{@flushoncommit='flushoncommit'}, {@ssd_spread='ssd_spread'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<'}}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725074b96c09fe25bf1"]) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getegid() getuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001080)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001180)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000800)='hfsplus\x00', &(0x7f0000000840)='./file1\x00', 0xfff, 0x1, &(0x7f0000000fc0)=[{0x0, 0x0, 0x4}], 0x400, 0x0) fcntl$getown(r1, 0x9) 03:01:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r3 = dup2(r2, r1) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000070000070073656c696e75cf874044acba89b049a6b971e640d57800"], 0x20) recvmmsg(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1}}], 0x1, 0x0, 0x0) [ 437.020723] device nr0 entered promiscuous mode [ 437.103250] hfsplus: unable to find HFS+ superblock 03:01:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r1 = socket(0xa, 0x1, 0x0) socket$inet6(0xa, 0xf, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=@known='user.syz\x00', &(0x7f0000000540), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)={'nat\x00'}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0xfaed293963fd6cc5) pipe(&(0x7f0000000340)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getitimer(0x200000000004, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000480)) sendto$inet(r2, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0xfffffd72) add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffc) geteuid() request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='filter\x00', 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000680)) syz_extract_tcp_res$synack(&(0x7f00000006c0), 0x1, 0x0) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000500), &(0x7f0000000880)="7ed4b1363d7f4712aa67ae3d70d1a77af337e3e04d2fc5dfaa33a9ec8bda33d8b25195f96e472be3f32926f00c33ecf01be70f88d169a43553289f011c5bbd28d7300fcc2f1232d1379c82d9feac4970c0719272cd23f2a987728116b89110576ec8da6ce17ffbc84955869cd2bf04d4141304454ba2e370f0ecc2353daf678b97854687f9d3edce047e35ffee9eea911fb621f9345077140c7f54c439918245064699a4592c7ee2cfdea8f55c5f9c57ed76a4e29cfd2b4d04c53b9c6d8e4e141c0f6b112cd59600000000000000", 0xce, 0x0) clock_gettime(0xfffffffffffffff8, &(0x7f0000000780)) select(0x40, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000640)) geteuid() r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r2, r3, &(0x7f0000000080), 0x80000003) sendfile(r1, r0, &(0x7f0000000040)=0x12c, 0x7fffffff) [ 437.220137] overlayfs: failed to resolve './file1': -2 [ 437.366143] hfsplus: unable to find HFS+ superblock 03:01:14 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x2, 0x3, 0x0, 0x0, '\x00', 0x6}, 0x3, 0x0, 0x0, r2, 0x0, 0x4, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x9, 0x3]}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) futimesat(r4, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x0, 0x7, 0x401}, 0x0, 0x3, 0x3f, r3, 0x3, 0x8, 'syz1\x00', &(0x7f0000000140)=['overlay\x00', 'vmnet1^\'cgroup%posix_acl_access\\{\x84\x00', '/dev/ptmx\x00'], 0x35, [], [0x0, 0x0, 0xffffffffffff7fff, 0x1]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)={[{@flushoncommit='flushoncommit'}, {@ssd_spread='ssd_spread'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<'}}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725074b96c09fe25bf1"]) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getegid() getuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001080)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001180)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000800)='hfsplus\x00', &(0x7f0000000840)='./file1\x00', 0xfff, 0x1, &(0x7f0000000fc0)=[{0x0, 0x0, 0x4}], 0x400, 0x0) fcntl$getown(r1, 0x9) 03:01:14 executing program 2: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b54c007110000f30501100b000200000013000200cf", 0x1f) 03:01:14 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x2, 0x3, 0x0, 0x0, '\x00', 0x6}, 0x3, 0x0, 0x0, r2, 0x0, 0x4, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x9, 0x3]}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) futimesat(r4, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x0, 0x7, 0x401}, 0x0, 0x3, 0x3f, r3, 0x3, 0x8, 'syz1\x00', &(0x7f0000000140)=['overlay\x00', 'vmnet1^\'cgroup%posix_acl_access\\{\x84\x00', '/dev/ptmx\x00'], 0x35, [], [0x0, 0x0, 0xffffffffffff7fff, 0x1]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)={[{@flushoncommit='flushoncommit'}, {@ssd_spread='ssd_spread'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<'}}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725074b96c09fe25bf1"]) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getegid() getuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001080)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001180)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000800)='hfsplus\x00', &(0x7f0000000840)='./file1\x00', 0xfff, 0x1, &(0x7f0000000fc0)=[{0x0, 0x0, 0x4}], 0x400, 0x0) fcntl$getown(r1, 0x9) 03:01:14 executing program 1: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{0x2, 0x3, 0x0, 0x0, '\x00', 0x6}, 0x3, 0x0, 0x0, r2, 0x0, 0x4, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x9, 0x3]}) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000040)) r4 = openat$cgroup_ro(r1, &(0x7f0000000880)='cpuacct.stat\x00', 0x0, 0x0) futimesat(r4, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000440)={{0x0, 0x7, 0x401}, 0x0, 0x3, 0x3f, r3, 0x3, 0x8, 'syz1\x00', &(0x7f0000000140)=['overlay\x00', 'vmnet1^\'cgroup%posix_acl_access\\{\x84\x00', '/dev/ptmx\x00'], 0x35, [], [0x0, 0x0, 0xffffffffffff7fff, 0x1]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000b40)={[{@flushoncommit='flushoncommit'}, {@ssd_spread='ssd_spread'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<'}}]}) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725074b96c09fe25bf1"]) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getegid() getuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001080)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001180)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000800)='hfsplus\x00', &(0x7f0000000840)='./file1\x00', 0xfff, 0x1, &(0x7f0000000fc0)=[{0x0, 0x0, 0x4}], 0x400, 0x0) fcntl$getown(r1, 0x9) [ 437.548399] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 437.705765] ntfs: (device loop5): parse_options(): Unrecognized mount option cpuacct.stat. [ 437.762825] overlayfs: failed to resolve './file1': -2 [ 437.865984] overlayfs: failed to resolve './file1': -2 03:01:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c561084470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 437.914313] ntfs: (device loop4): parse_options(): Unrecognized mount option cpuacct.stat. [ 438.047944] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 03:01:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000080)) [ 438.100111] hfsplus: unable to find HFS+ superblock 03:01:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) write$cgroup_int(r2, &(0x7f0000000000), 0x17b) 03:01:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000c03000)=[@in], 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000b9c000/0x3000)=nil, 0x3000, 0xf) vmsplice(0xffffffffffffffff, &(0x7f00005a1000)=[{&(0x7f0000a62000)='=', 0x1}], 0x1, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 03:01:14 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x10, 0x3c, 0x0, @dev, @local, {[], @dccp={{0x0, 0x2904, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, 0x0) 03:01:15 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='\rqO\xeb_\x80\x00', 0x4) ftruncate(r0, 0x1000000) lseek(r0, 0x0, 0x3) [ 438.345176] device nr0 entered promiscuous mode 03:01:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xdb14, 0x6002) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000002c0)=""/213) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) prctl$PR_CAPBSET_READ(0x17, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfdfdffff}}) 03:01:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:01:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"55c990aa4964e82a3ec457f4c7d69681319b32c4fe546fdaa52a7f1ee7a27d5f71fb895c4bf21bf0301d2a160f646d230ecc224077896302fd1e64ad393ef24145492c44f164e53100dc89f52d25895dcd4320f649fc784145767a5224088c492511d0a5d7bb0c0176706c238dfeee9caae8811ba9d2ec92a4a340c091647ae36123d290d72c375af37957c01aa945bdb6a7a6870069350c7c2ac6b9c032e80d8150743be19fbaf9447badcc1908d174e06fd466e64e24e3c892ee52a4b31338ad67030baeffa5bfa701c1e7bfbd8fd016d87018d05ab11f9e813877bd9cdf0884cbaabe09190f95550884f8a1e6510f6bbe96f86859597bf89741aea068e55b938ebee9d9bff58478513c4b72edbf79f75431b54743ab05d3980b30b2127cf13bf94beba0828a4bb1848bc1f862fac00698e4bd2f4bde3bb35107056c4147c0ed8d7d588ba03c37b82ea384d1db706a8b46ee351812ad747d1045540a48b542996812548270c5af5d27ff72920bebd8371348c7f55a953e236ac13fe737a81bd9b61e30a5e9c526cf61862f5a0a90963c73febe3b66ab29f17b6da74b7647bcc4e527356d57fa1fe3f3dffab39df7b353eda6b839decb4484939f4fc0c84bda1c964941ccf4db1ca0d2c152fd356ac66441c8b68755d533b416d9f7999678227c7a69db08e997252dd6a38fc458d93fac9f1f14f49b7ca4a0b0c8b538d2f30c34503a0975506ae9004b3e5c3d2469cf4e03d9b79dc1499647b5b680a02bdc56c18782c48120dee663918288f068c49d85355d114cfe0c5d1405cf5e37b181f296fa7dc9af116fbe220121fe139739226eefce468f27f5d21ab51ef0e26134c5341cf13799003ceb38d4050c2ba1c9e6decc2d11a8f14a6adadd45e615106b5dd4c07093ba114ac55b4e80d1a3545ab6e8fbf796b908ecc244340fc06e4d4bd6e069b7f0232198ab067a709bcdd4d41500e5dc7032e5993f965d4603033fe61cc523937d7345df42b4f1b62c4daf64f6c29eb2f214b88680bfe19252b67719ccea37d19fe3bfb0c8ad0bd6f4a1df532ec9220269453df5144ff48f63c2ad655b8f20db01b3af95c11f4e7de2bd0a47d47b08b620589a33327bef9ee310505c1736510e88b74281f098099c753d30fcf32f31a0521e32407d689b093f24d07049682ff4662b5b94616699fd704589c0edb02cf3e622088c685564b0c166f9f3cdb12dd8a70684ac6e24570191dda2db2b1965d2397a45060f834405b81fa79204e029b7cd93333dfbef669f3e480fd071f5b87e9fdf984dfe176353ed12ea15484366548336f540a5f1e8b9e19bdeb8d71dce9ecf03d09515bc4bcf7be382176e7e12395ee0f795f76695d0d90eee181d300deb89d7098403ac76309e63f6ca3eade1ce57dcd9de56e24610ed5c470d5540e9f50d068ee8a1431bb3216ae99b18"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:01:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x0, @broadcast, 0x0, 0x0, 'lblc\x00'}, 0x2c) 03:01:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5432, 0x0) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(r1, 0x540a, 0x0) [ 438.703586] kvm [13258]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000035 data 0x0 03:01:15 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) [ 438.767479] kvm [13258]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000031 data 0x0 [ 438.795995] kvm: pic: non byte read [ 438.808585] kvm: pic: non byte read 03:01:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x53, 0x0, 0x6, 0xfff, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="f503f84b2ff2", 0x0, 0x0, 0x10000, 0x0, &(0x7f0000001180)}) [ 438.833403] kvm: pic: non byte read [ 438.845479] kvm [13258]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000016 data 0x0 [ 438.862630] kvm [13258]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000003a data 0x0 [ 438.907442] kvm [13258]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000003a data 0x0 [ 438.949667] kvm [13258]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000000d data 0x0 [ 438.976951] kvm [13258]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000006 data 0x0 03:01:15 executing program 0: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$llc(r0, &(0x7f00000000c0)={0x1e, 0x302}, 0x10) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") close(r0) close(r1) 03:01:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) write$cgroup_int(r2, &(0x7f0000000000), 0x17b) 03:01:15 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xffff, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000240)={0x98f907, 0x2, @value}) 03:01:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5432, 0x0) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(r1, 0x540a, 0x0) 03:01:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5432, 0x0) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(r1, 0x540a, 0x0) 03:01:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) fstat(r0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000100)='./file0\x00', 0x6000, 0x4, &(0x7f0000000200)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000380)={0x0, 0x6, 0x40}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$rds(r1, &(0x7f0000000840)={&(0x7f00000003c0), 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x8010}, 0x800) ioctl$KDMKTONE(r3, 0x4b30, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1, 0x0) [ 439.510269] device nr0 entered promiscuous mode 03:01:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5432, 0x0) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(r1, 0x540a, 0x0) 03:01:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5432, 0x0) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(r1, 0x540a, 0x0) 03:01:16 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) 03:01:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) fstat(r0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000100)='./file0\x00', 0x6000, 0x4, &(0x7f0000000200)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000380)={0x0, 0x6, 0x40}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$rds(r1, &(0x7f0000000840)={&(0x7f00000003c0), 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x8010}, 0x800) ioctl$KDMKTONE(r3, 0x4b30, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1, 0x0) 03:01:16 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) fstat(r0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000100)='./file0\x00', 0x6000, 0x4, &(0x7f0000000200)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000380)={0x0, 0x6, 0x40}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$rds(r1, &(0x7f0000000840)={&(0x7f00000003c0), 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x8010}, 0x800) ioctl$KDMKTONE(r3, 0x4b30, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1, 0x0) 03:01:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) fstat(r0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000100)='./file0\x00', 0x6000, 0x4, &(0x7f0000000200)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000380)={0x0, 0x6, 0x40}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$rds(r1, &(0x7f0000000840)={&(0x7f00000003c0), 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x8010}, 0x800) ioctl$KDMKTONE(r3, 0x4b30, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1, 0x0) 03:01:16 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) fstat(r0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000100)='./file0\x00', 0x6000, 0x4, &(0x7f0000000200)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000380)={0x0, 0x6, 0x40}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$rds(r1, &(0x7f0000000840)={&(0x7f00000003c0), 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x8010}, 0x800) ioctl$KDMKTONE(r3, 0x4b30, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1, 0x0) 03:01:16 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) write$cgroup_int(r2, &(0x7f0000000000), 0x17b) 03:01:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5432, 0x0) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(r1, 0x540a, 0x0) 03:01:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) read(r0, &(0x7f00000000c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5432, 0x0) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCXONC(r1, 0x540a, 0x0) 03:01:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) fstat(r0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000100)='./file0\x00', 0x6000, 0x4, &(0x7f0000000200)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000380)={0x0, 0x6, 0x40}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$rds(r1, &(0x7f0000000840)={&(0x7f00000003c0), 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x8010}, 0x800) ioctl$KDMKTONE(r3, 0x4b30, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1, 0x0) 03:01:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) fstat(r0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000100)='./file0\x00', 0x6000, 0x4, &(0x7f0000000200)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000380)={0x0, 0x6, 0x40}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$rds(r1, &(0x7f0000000840)={&(0x7f00000003c0), 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/164, 0xa4}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/64, 0x40}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x6, 0x0, 0x0, 0x8010}, 0x800) ioctl$KDMKTONE(r3, 0x4b30, 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1, 0x0) [ 440.516140] device nr0 entered promiscuous mode 03:01:17 executing program 0: clock_adjtime(0xa, &(0x7f0000000240)) 03:01:17 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) 03:01:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x20, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000b00)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00>b\xd9\xb0\xb6:m\x05\x0e\xee\x026<%\xa3\xae\xdc\x9d\xfbs\xfe\xaa\xd1i\xba\x91\x06\xf7a[u\xe6\x89\x85\x91\xcat\x06\x13\x91\xc0j\xa5\x18\x13\xf8\xf9\x8b\nl3L\x90\x15q\xbf\xbf\xd3,%\xea\xf0$B\xda\xfa\x8c\x85B}\xe4+=\xe3\xf8e\xce\xb8\x9e\xda&\xad\xa4\xf6\xb9\xd8\xe1\x01\x9a]\x80\x11\x10+M\xc9\xe1\xa5T\x85\xcb\xce\xf8F\x97H\x1a\xebMVd~^[\xacE\x19\v\x87\xb9\x9a\xc05\xc3\xaf\xcc\xcf\"N62\x8c(r\xe7\xc5\x02px\\\xe3\x7f\xeb\xe8<\x13\xe1})Lrh\x9d\bD\xcb\x94x\xfdg\xb6\xf2\xc9\xdbC\x11V\xaf\xb7\xedz \xc4\xed\xaa\xc0V\xdb\x98\xe1\xb2gd;\xebX$>\xec\xf2\'\x8f\x0f\x81\xbe\xc0\xb4F\x8f/px\xee\xe9\xf8\xeb\vD\x1e|b\xeei\xe3\x81\xe9g\xaf\xb7\x86') ioctl$FS_IOC_FSGETXATTR(r3, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc00000000000000}) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080), 0x4) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0x4e2) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0) socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x6, 0x3, [0xfffffffffffffc01, 0x2c78, 0xa7]}, &(0x7f0000000440)=0xe) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000500)={r4, @in={{0x2, 0x4e22, @multicast1}}, 0x5, 0x0, 0x9, 0x8000}, 0x0) mlock2(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r1, 0xffffff45) read(r1, &(0x7f0000000600)=""/234, 0xea) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000240)=""/45, &(0x7f00000005c0)=0x2d) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r1]) 03:01:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@fat=@discard='discard'}, {@fat=@nfs='nfs'}]}) 03:01:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}]}, 0x50}}, 0x0) 03:01:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x60000000080ffff, [0xc0010058, 0x1], [0xc2]}) 03:01:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ddbc"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 440.857982] FAT-fs (loop4): bogus number of reserved sectors [ 440.889294] FAT-fs (loop4): Can't find a valid FAT filesystem [ 440.973401] kvm [13397]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x1 [ 441.356727] FAT-fs (loop4): bogus number of reserved sectors [ 441.386690] FAT-fs (loop4): Can't find a valid FAT filesystem 03:01:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x2c}}, 0x0) 03:01:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) renameat(r1, &(0x7f00000003c0)='./bus\x00', r1, &(0x7f0000000580)='./file0\x00') write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000200)=0x53e, 0x8080fffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 03:01:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x60000000080ffff, [0xc0010058, 0x1], [0xc2]}) 03:01:18 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000070100010024000000007a3041131f4256b2831ed990359e73808fc5e22e84b04f7ec7a5c1"], 0x29) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='$', 0xffffffffffffffff}, 0x30) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) sendfile(r1, r1, &(0x7f0000000140)=0x3000, 0x8800000) 03:01:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@fat=@discard='discard'}, {@fat=@nfs='nfs'}]}) 03:01:18 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) 03:01:18 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000400)=""/19, 0x13}, {&(0x7f00000004c0)=""/249, 0xf9}], 0x4, &(0x7f00000005c0)=""/127, 0x7f}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@l2, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000000500)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x4, 0x8100, 0x5, @dev}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) [ 441.602831] kvm [13420]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x1 [ 441.675330] FAT-fs (loop4): bogus number of reserved sectors 03:01:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x60000000080ffff, [0xc0010058, 0x1], [0xc2]}) [ 441.725490] FAT-fs (loop4): Can't find a valid FAT filesystem 03:01:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000140)=0x1f, 0x4) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 03:01:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@fat=@discard='discard'}, {@fat=@nfs='nfs'}]}) [ 441.973327] FAT-fs (loop4): bogus number of reserved sectors [ 441.977245] kvm [13448]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x1 [ 441.984981] FAT-fs (loop4): Can't find a valid FAT filesystem [ 442.038350] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:01:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x60000000080ffff, [0xc0010058, 0x1], [0xc2]}) 03:01:18 executing program 2: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200400000114, 0x2000000002718, 0x0, &(0x7f0000000080)) 03:01:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@fat=@discard='discard'}, {@fat=@nfs='nfs'}]}) 03:01:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005bc0)={&(0x7f0000000780)=@newlink={0x3c, 0x11, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_LINKMODE={0x8}]}, 0x3c}}, 0x0) 03:01:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x100000006, &(0x7f0000000140)=0x1, 0x148) 03:01:19 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)={0x1, 0x0, [0x0]}) [ 442.474329] kvm [13464]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x1 [ 442.489477] FAT-fs (loop4): bogus number of reserved sectors [ 442.508119] FAT-fs (loop4): Can't find a valid FAT filesystem 03:01:19 executing program 0: r0 = socket$inet6(0xa, 0x10000000003, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r1, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000640), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r2}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) recvmmsg(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 03:01:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x7, 0xa0ffffff, 0x1be809}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x265, &(0x7f000000cf3d)=""/195}, 0x48) 03:01:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x40000000000073, 0x0, [0x40000002, 0x8]}) [ 442.766287] netlink: 'syz-executor5': attribute type 17 has an invalid length. 03:01:19 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000200)=""/1, 0x1}], 0x2, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 03:01:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 03:01:19 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = getpid() capset(&(0x7f00000003c0)={0x0, r1}, &(0x7f0000000400)) uname(&(0x7f0000000600)=""/84) fstatfs(r0, &(0x7f0000000440)=""/100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000000000, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x7b, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2000}) r5 = request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='IPVS\x00', 0xfffffffffffffffc) request_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000280), &(0x7f0000000740)=0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) close(r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000006c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') personality(0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000580)={0x1, 0x0, 0x2}) bind$bt_rfcomm(r4, &(0x7f0000000380)={0x1f, {0x7fc000000000000, 0x0, 0x0, 0x3f2, 0x0, 0x542}, 0x80000001}, 0xa) socket(0x0, 0x0, 0x0) eventfd2(0x101, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 03:01:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "f98c402d7c164d87c987addd9d9a6567"}) 03:01:19 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x200000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000000600)=ANY=[]}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r5, 0x80}, {r5, 0x80}, {r5, 0x1210}, {r1, 0x4}], 0x4, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={0x9}, 0x8) 03:01:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) [ 443.752567] team0: Port device team_slave_1 removed 03:01:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005bc0)={&(0x7f0000000780)=@newlink={0x3c, 0x11, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_LINKMODE={0x8}]}, 0x3c}}, 0x0) 03:01:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r0, 0x0, 0x5, &(0x7f0000000300)='user\x00'}, 0x30) fcntl$getown(r2, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) sched_setscheduler(r3, 0x400000000000002, &(0x7f0000000200)=0x80) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4000000203, &(0x7f0000000240)=0x0) io_cancel(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r6 = add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000140)=0x2c7) dup2(0xffffffffffffffff, 0xffffffffffffffff) fdatasync(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) 03:01:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00905e9f0200000000fffffffe0006002300000000000000e0e515320000000002008801260001000000640000000001", 0x30, 0x1a0}]) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) stat(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) request_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='GPL\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, 0x0, 0x0) getgid() getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f0000000680)) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 03:01:20 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = getpid() capset(&(0x7f00000003c0)={0x0, r1}, &(0x7f0000000400)) uname(&(0x7f0000000600)=""/84) fstatfs(r0, &(0x7f0000000440)=""/100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000000000, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x7b, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2000}) r5 = request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='IPVS\x00', 0xfffffffffffffffc) request_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000280), &(0x7f0000000740)=0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) close(r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000006c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') personality(0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000580)={0x1, 0x0, 0x2}) bind$bt_rfcomm(r4, &(0x7f0000000380)={0x1f, {0x7fc000000000000, 0x0, 0x0, 0x3f2, 0x0, 0x542}, 0x80000001}, 0xa) socket(0x0, 0x0, 0x0) eventfd2(0x101, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 03:01:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x200000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000000600)=ANY=[]}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r5, 0x80}, {r5, 0x80}, {r5, 0x1210}, {r1, 0x4}], 0x4, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={0x9}, 0x8) 03:01:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 03:01:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\x89\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\x1e\x18\xf0\xc7o\xbb#*\aBJ\xe1\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xe0q\xfb53\x1c\xe3\x9cZ\x00\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) [ 443.901555] netlink: 'syz-executor5': attribute type 17 has an invalid length. [ 443.936867] loop3: [POWERTEC] 03:01:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005bc0)={&(0x7f0000000780)=@newlink={0x3c, 0x11, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_LINKMODE={0x8}]}, 0x3c}}, 0x0) 03:01:20 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = getpid() capset(&(0x7f00000003c0)={0x0, r1}, &(0x7f0000000400)) uname(&(0x7f0000000600)=""/84) fstatfs(r0, &(0x7f0000000440)=""/100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000000000, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x7b, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2000}) r5 = request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='IPVS\x00', 0xfffffffffffffffc) request_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000280), &(0x7f0000000740)=0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) close(r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000006c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') personality(0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000580)={0x1, 0x0, 0x2}) bind$bt_rfcomm(r4, &(0x7f0000000380)={0x1f, {0x7fc000000000000, 0x0, 0x0, 0x3f2, 0x0, 0x542}, 0x80000001}, 0xa) socket(0x0, 0x0, 0x0) eventfd2(0x101, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 03:01:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="e59bc053050000007bb51f597ea6feb27c6371100ca6f5c53ded1a2f0fd1c92c1f8082d61217feadb3af", 0x2a}], 0x1) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0, 0x0) 03:01:21 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x200000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000000600)=ANY=[]}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r5, 0x80}, {r5, 0x80}, {r5, 0x1210}, {r1, 0x4}], 0x4, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={0x9}, 0x8) [ 444.311151] netlink: 'syz-executor5': attribute type 17 has an invalid length. 03:01:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005bc0)={&(0x7f0000000780)=@newlink={0x3c, 0x11, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_LINKMODE={0x8}]}, 0x3c}}, 0x0) 03:01:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00905e9f0200000000fffffffe0006002300000000000000e0e515320000000002008801260001000000640000000001", 0x30, 0x1a0}]) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) stat(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) request_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='GPL\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, 0x0, 0x0) getgid() getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f0000000680)) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 03:01:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r0, 0x0, 0x5, &(0x7f0000000300)='user\x00'}, 0x30) fcntl$getown(r2, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) sched_setscheduler(r3, 0x400000000000002, &(0x7f0000000200)=0x80) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4000000203, &(0x7f0000000240)=0x0) io_cancel(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r6 = add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000140)=0x2c7) dup2(0xffffffffffffffff, 0xffffffffffffffff) fdatasync(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) [ 444.706203] netlink: 'syz-executor5': attribute type 17 has an invalid length. 03:01:21 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = getpid() capset(&(0x7f00000003c0)={0x0, r1}, &(0x7f0000000400)) uname(&(0x7f0000000600)=""/84) fstatfs(r0, &(0x7f0000000440)=""/100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000000000, 0x0) r3 = epoll_create1(0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x7b, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2000}) r5 = request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='IPVS\x00', 0xfffffffffffffffc) request_key(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000280), &(0x7f0000000740)=0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) close(r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000006c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') personality(0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000580)={0x1, 0x0, 0x2}) bind$bt_rfcomm(r4, &(0x7f0000000380)={0x1f, {0x7fc000000000000, 0x0, 0x0, 0x3f2, 0x0, 0x542}, 0x80000001}, 0xa) socket(0x0, 0x0, 0x0) eventfd2(0x101, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000008c0), &(0x7f0000000900)=0x4) [ 444.917177] loop3: [POWERTEC] 03:01:21 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_vif\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001ed, 0x6c) 03:01:21 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x100000003) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000009200)={&(0x7f0000001b80)={0x1d, r2}, 0x10, &(0x7f0000008d00)={&(0x7f0000009180)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f2cdc2b64a289968"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000004000)={0x1d, r2}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000180)={0x1, 0xffffffffffffffff, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a702ca9c1a8d1dc1e4e29ed4d2927b5e8155ac02a25334d332f97653d9d90256b4da4ec6f2b44831a3b878ada2f3e5883f2f7c806fb61c1993cc4f19a22c61e4"}}, 0x80}}, 0x0) 03:01:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) chroot(&(0x7f0000baf000)='./file0\x00') 03:01:22 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x200000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000000600)=ANY=[]}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r5, 0x80}, {r5, 0x80}, {r5, 0x1210}, {r1, 0x4}], 0x4, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={0x9}, 0x8) 03:01:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r0, 0x0, 0x5, &(0x7f0000000300)='user\x00'}, 0x30) fcntl$getown(r2, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) sched_setscheduler(r3, 0x400000000000002, &(0x7f0000000200)=0x80) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4000000203, &(0x7f0000000240)=0x0) io_cancel(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r6 = add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000140)=0x2c7) dup2(0xffffffffffffffff, 0xffffffffffffffff) fdatasync(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) 03:01:22 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x62, &(0x7f0000000040)=""/30, &(0x7f0000d23000)=0x1e) 03:01:22 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0/../file0\x00', 0x2000000, 0x19c) mkdirat(r0, &(0x7f00000004c0)='./file0/../file0\x00', 0x10) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x381400) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000001c0)={'bcsf0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x0, 0x0, @ipv4}, {0xa, 0x0, 0x0, @remote, 0x7}, 0x8, [0x0, 0xfffffffffffffffc, 0x4, 0x34798395, 0xffffffffffff8001, 0x81, 0x6, 0x4]}, 0x5c) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x61) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000380)=""/148) lsetxattr$security_ima(&(0x7f0000000200)='./bus\x00', &(0x7f0000000480)='security.ima\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0411fb2e12f10728f15a5f95f553b47b1bd4df295537415df0a20b68290d462d635e7bc7e6363b3d82453209dc5034d33a5c2608171eafc8c9234b62d581b1bd179022033ce718cd333dc13b83f615cc34da988db7a1a912b70ff301892621bea36b7dafbc7a6fa725b2b8e5118e20a97205cb7890418d40be7ebd2ba609a931aefcef4e5114cbc01cad73c86b792f1e072b3153e7a065335221bb5d8513f9a641bf4851c7a10729541e05fc67bb82f9f6842760dce1b30f5d"], 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r4, 0x0, r4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000440)=@fragment={0x3f, 0x0, 0x5, 0x10001, 0x0, 0x800000000, 0x67}, 0x8) mkdirat(0xffffffffffffffff, &(0x7f0000000640)='./bus\x00', 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000500)=0x2) ioctl$VT_RELDISP(r0, 0x5605) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(&(0x7f0000000600)='\x00', 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000005, 0x32, r5, 0x0) ftruncate(r5, 0x7fff) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 03:01:22 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 03:01:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00905e9f0200000000fffffffe0006002300000000000000e0e515320000000002008801260001000000640000000001", 0x30, 0x1a0}]) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) stat(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) request_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='GPL\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, 0x0, 0x0) getgid() getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f0000000680)) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 03:01:22 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x62, &(0x7f0000000040)=""/30, &(0x7f0000d23000)=0x1e) 03:01:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000680)=0x38, 0x80000c) [ 445.841687] loop3: [POWERTEC] 03:01:22 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x62, &(0x7f0000000040)=""/30, &(0x7f0000d23000)=0x1e) 03:01:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000081, 0x0, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r0, 0x0, 0x5, &(0x7f0000000300)='user\x00'}, 0x30) fcntl$getown(r2, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) sched_setscheduler(r3, 0x400000000000002, &(0x7f0000000200)=0x80) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4000000203, &(0x7f0000000240)=0x0) io_cancel(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f0000000340)="df5d65e0b3f5f79d3c7041c8cb7dbdf7e969d7a849a7743f1772992e845518f3abfa8d5c74626bf466af954b249513e90fca7a4db987183faf27e1fbb469de8ac6a87ef19060ca42121ce7dde3d763eaf838a2bfa616d2dab82a712f22032c401c985b96f065329ded83c2f37865da857277c52d", 0x74, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) r6 = add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe9653824b2a8a9dceed203d10ba3d991192c9fe9135f23e9caa900c617cbcfe040f3d52ff6aeb96", 0x59, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000680)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a01f5ea1306d0dcc61dbf4e680787d6ab9bf1cfdbb592ded2ccd7fa3bda4654a", 0x75) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x53e4, 0x5, 0x7f, 0x3}, 0x8) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000140)=0x2c7) dup2(0xffffffffffffffff, 0xffffffffffffffff) fdatasync(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) 03:01:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x98f904, 0x0, [], @p_u32=0x0}}) 03:01:22 executing program 5: seccomp(0x200000001, 0x2, &(0x7f0000016000)={0x1, &(0x7f00001e0fe8)=[{0x6, 0x0, 0x0, 0x7ffff7ff00000}]}) [ 446.187132] audit: type=1326 audit(1545102082.869:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13670 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0x7ff00000 [ 446.276526] audit: type=1326 audit(1545102082.899:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13670 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=1 compat=0 ip=0x411061 code=0x7ff00000 [ 446.449945] audit: type=1326 audit(1545102082.899:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13670 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=1 compat=0 ip=0x411061 code=0x7ff00000 03:01:23 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x62, &(0x7f0000000040)=""/30, &(0x7f0000d23000)=0x1e) 03:01:23 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="eb280a1a75511eb82753cf3edb473d6a", 0x10) listen(r0, 0x0) close(r0) 03:01:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe01f0300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00905e9f0200000000fffffffe0006002300000000000000e0e515320000000002008801260001000000640000000001", 0x30, 0x1a0}]) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) stat(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) request_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='GPL\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000140)=@hci, 0x0, 0x0) getgid() getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f0000000680)) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 446.495086] audit: type=1326 audit(1545102082.899:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13670 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=231 compat=0 ip=0x457669 code=0x7ff00000 [ 446.593755] kasan: CONFIG_KASAN_INLINE enabled 03:01:23 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) [ 446.618668] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 446.674569] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 446.680873] CPU: 1 PID: 2937 Comm: kworker/1:2 Not tainted 4.20.0-rc7+ #155 [ 446.688595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.698538] Workqueue: events smc_tcp_listen_work [ 446.703456] RIP: 0010:kernel_accept+0x5a/0x310 [ 446.708050] Code: 48 c1 ea 03 80 3c 02 00 0f 85 4a 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 20 48 8d bb 50 03 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 14 02 00 00 48 8d 7b 10 0f b6 [ 446.726975] RSP: 0018:ffff8881cb60f5b0 EFLAGS: 00010206 [ 446.732346] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff110396bf561 [ 446.739620] RDX: 000000000000006a RSI: ffffffff8623e7bf RDI: 0000000000000350 [ 446.746896] RBP: ffff8881cb60f5e0 R08: ffff8881cb5fab08 R09: 0000000000000006 [ 446.754171] R10: 0000000000000000 R11: ffff8881cb5fa240 R12: ffff8881cb60f690 [ 446.761437] R13: ffff8881b512e600 R14: 0000000000000000 R15: ffff8881d36ad878 03:01:23 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) [ 446.768740] FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 [ 446.776964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.782851] CR2: 0000000000625208 CR3: 00000001b32db000 CR4: 00000000001426e0 [ 446.790134] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.797402] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.804664] Call Trace: [ 446.807265] smc_tcp_listen_work+0x218/0x11c0 [ 446.811773] ? smc_ioctl+0x1270/0x1270 [ 446.815664] ? __lock_is_held+0xb5/0x140 [ 446.819808] process_one_work+0xc90/0x1c40 [ 446.824047] ? mark_held_locks+0x130/0x130 [ 446.828305] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 446.832979] ? __switch_to_asm+0x40/0x70 [ 446.837081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.842631] ? check_preemption_disabled+0x48/0x280 [ 446.847644] ? __switch_to_asm+0x34/0x70 [ 446.851710] ? debug_smp_processor_id+0x1c/0x20 [ 446.856386] ? perf_trace_lock_acquire+0x15b/0x800 [ 446.861311] ? __switch_to_asm+0x34/0x70 [ 446.865376] ? zap_class+0x640/0x640 [ 446.869099] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 446.873693] ? lock_acquire+0x1ed/0x520 [ 446.877663] ? worker_thread+0x3e0/0x1390 [ 446.881814] ? kasan_check_read+0x11/0x20 [ 446.885957] ? do_raw_spin_lock+0x14f/0x350 [ 446.890273] ? kasan_check_read+0x11/0x20 [ 446.894416] ? rwlock_bug.part.2+0x90/0x90 [ 446.898653] ? trace_hardirqs_on+0x310/0x310 [ 446.903084] worker_thread+0x17f/0x1390 [ 446.907066] ? __switch_to_asm+0x34/0x70 [ 446.911397] ? process_one_work+0x1c40/0x1c40 [ 446.915933] ? __sched_text_start+0x8/0x8 [ 446.920105] ? __kthread_parkme+0xce/0x1a0 [ 446.924339] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 446.929440] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 446.934552] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 446.939137] ? trace_hardirqs_on+0xbd/0x310 [ 446.943460] ? kasan_check_read+0x11/0x20 [ 446.947610] ? __kthread_parkme+0xce/0x1a0 [ 446.951841] ? trace_hardirqs_off_caller+0x310/0x310 [ 446.956946] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 446.962043] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.967594] ? __kthread_parkme+0xfb/0x1a0 03:01:23 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) 03:01:23 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) 03:01:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20000000005}}, 0x14}}, 0x0) [ 446.971830] ? process_one_work+0x1c40/0x1c40 [ 446.976339] kthread+0x35a/0x440 [ 446.979714] ? kthread_stop+0x900/0x900 [ 446.983693] ret_from_fork+0x3a/0x50 [ 446.987408] Modules linked in: [ 446.991290] kobject: 'loop0' (00000000bdb91154): kobject_uevent_env [ 447.008140] kobject: 'loop0' (00000000bdb91154): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 447.018503] loop3: [POWERTEC] [ 447.021832] kobject: 'loop3' (000000009cfbe648): kobject_uevent_env [ 447.033715] kobject: 'loop4' (00000000d7c54618): kobject_uevent_env [ 447.041117] audit: type=1326 audit(1545102083.719:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13670 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45a4ca code=0x7ff00000 [ 447.052511] kobject: 'loop3' (000000009cfbe648): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 447.080474] kobject: 'loop4' (00000000d7c54618): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 447.110820] kobject: 'loop2' (000000001db09f4f): kobject_uevent_env 03:01:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x2}, 0x10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x19b) sendto$inet(r1, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="a5fe9e7be7060850100792f46b647308d3e2a67328969288734cc698158a84b40408261762639ee5e5881d4fb471fcb9639d30513ab42a04f920d8c1fa0c6ed49b0028fda44d1e69121bd2ff68125d42c7beccab2998e3392614583dd729cd341292ded369a34c4c75e12e8e0f519531fc8f11e74b74f2e5ad24cd0ab65395a2307394f48438306edcbb2ad2261f7535abea9833df32f75d92d392390b4fef75c9923a1745b53c", 0xa7, 0x8801, 0x0, 0x0) 03:01:23 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) 03:01:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20000000005}}, 0x14}}, 0x0) 03:01:23 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) 03:01:23 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) [ 447.149295] audit: type=1326 audit(1545102083.719:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13670 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=1 compat=0 ip=0x411061 code=0x7ff00000 [ 447.165270] kobject: 'loop2' (000000001db09f4f): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 447.230826] audit: type=1326 audit(1545102083.719:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13670 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=1 compat=0 ip=0x411061 code=0x7ff00000 [ 447.242753] kobject: 'loop1' (00000000624c5ea0): kobject_uevent_env 03:01:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x20000000005}}, 0x14}}, 0x0) [ 447.267930] audit: type=1326 audit(1545102083.719:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13670 comm="syz-executor5" exe="/root/syz-executor5" sig=0 arch=c000003e syscall=231 compat=0 ip=0x457669 code=0x7ff00000 [ 447.274678] kobject: 'loop1' (00000000624c5ea0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 447.317229] kobject: 'loop5' (000000009417fc3c): kobject_uevent_env [ 447.323739] kobject: 'loop5' (000000009417fc3c): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 447.334332] kobject: 'loop1' (00000000624c5ea0): kobject_uevent_env [ 447.340940] kobject: 'loop1' (00000000624c5ea0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 447.350924] kobject: 'loop2' (000000001db09f4f): kobject_uevent_env [ 447.357572] kobject: 'loop2' (000000001db09f4f): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 447.367671] kobject: 'loop0' (00000000bdb91154): kobject_uevent_env [ 447.374429] kobject: 'loop0' (00000000bdb91154): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 447.498406] ---[ end trace 435ae55b33caf64f ]--- [ 447.503492] RIP: 0010:kernel_accept+0x5a/0x310 [ 447.508077] Code: 48 c1 ea 03 80 3c 02 00 0f 85 4a 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 20 48 8d bb 50 03 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 14 02 00 00 48 8d 7b 10 0f b6 [ 447.526468] kobject: 'loop2' (000000001db09f4f): kobject_uevent_env [ 447.527465] RSP: 0018:ffff8881cb60f5b0 EFLAGS: 00010206 [ 447.533999] kobject: 'loop2' (000000001db09f4f): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 447.538779] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff110396bf561 [ 447.538789] RDX: 000000000000006a RSI: ffffffff8623e7bf RDI: 0000000000000350 [ 447.538799] RBP: ffff8881cb60f5e0 R08: ffff8881cb5fab08 R09: 0000000000000006 [ 447.538808] R10: 0000000000000000 R11: ffff8881cb5fa240 R12: ffff8881cb60f690 [ 447.538824] R13: ffff8881b512e600 R14: 0000000000000000 R15: ffff8881d36ad878 [ 447.585107] FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 [ 447.593362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.599244] CR2: 000000000073d7d0 CR3: 000000000946a000 CR4: 00000000001426e0 [ 447.606620] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 447.613928] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 447.621198] Kernel panic - not syncing: Fatal exception [ 447.624819] kobject: 'loop4' (00000000d7c54618): kobject_uevent_env [ 447.633975] Kernel Offset: disabled [ 447.637599] Rebooting in 86400 seconds..