[ 45.922514] audit: type=1800 audit(1549178614.156:30): pid=8030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 50.781298] kauditd_printk_skb: 4 callbacks suppressed [ 50.781313] audit: type=1400 audit(1549178619.036:35): avc: denied { map } for pid=8204 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.8' (ECDSA) to the list of known hosts. 2019/02/03 07:23:45 fuzzer started [ 57.655308] audit: type=1400 audit(1549178625.906:36): avc: denied { map } for pid=8213 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/02/03 07:23:48 dialing manager at 10.128.0.26:36167 2019/02/03 07:23:48 syscalls: 1 2019/02/03 07:23:48 code coverage: enabled 2019/02/03 07:23:48 comparison tracing: enabled 2019/02/03 07:23:48 extra coverage: extra coverage is not supported by the kernel 2019/02/03 07:23:48 setuid sandbox: enabled 2019/02/03 07:23:48 namespace sandbox: enabled 2019/02/03 07:23:48 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/03 07:23:48 fault injection: enabled 2019/02/03 07:23:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/03 07:23:48 net packet injection: enabled 2019/02/03 07:23:48 net device setup: enabled 07:27:05 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'nlmon0\x00', 0x8}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000080)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000140)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000340)={0x7, 0xffffffffffffffc1}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x800) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000480)={0x3, 0x0, [0x5, 0x1c0000, 0x4, 0x1, 0xfc00000000000, 0x7ff, 0x5, 0x1000]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000004c0)=[@timestamp, @window={0x3, 0xfffffffffffffff8, 0x34}, @mss={0x2, 0x100000000}, @window={0x3, 0x1ff, 0x2000000000000000}, @mss={0x2, 0x8}], 0x5) r4 = getpgrp(0xffffffffffffffff) get_robust_list(r4, &(0x7f0000000600)=&(0x7f00000005c0)={&(0x7f0000000500), 0x0, &(0x7f0000000580)={&(0x7f0000000540)}}, &(0x7f0000000640)=0x18) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000680)=0xd4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x10000}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) nanosleep(&(0x7f0000000880), 0x0) linkat(r1, &(0x7f00000008c0)='./file0\x00', r1, &(0x7f0000000900)='./file0\x00', 0x1000) timerfd_gettime(r1, &(0x7f0000000940)) connect$rose(r2, &(0x7f0000000980)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7ff) getsockopt$sock_buf(r2, 0x1, 0x0, &(0x7f00000009c0)=""/80, &(0x7f0000000a40)=0x50) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000a80)='%loselfvmnet1^systemcgroupcgroup\x00', 0x21) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000b00)={0x3, 0x7, 0x4, 0x10, {0x77359400}, {0x7, 0x3, 0x80, 0x2, 0xf93, 0x100, "1f5f90d8"}, 0x2, 0x1, @planes=&(0x7f0000000ac0)={0x9, 0x37f, @fd=r1, 0x1}, 0x4}) [ 257.683208] audit: type=1400 audit(1549178825.936:37): avc: denied { map } for pid=8229 comm="syz-executor0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=790 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 257.809302] IPVS: ftp: loaded support on port[0] = 21 07:27:06 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0xc000, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0xfffffffffffff800, &(0x7f0000000080)={0x2}, 0x8) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x10000, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000180)={0x8}) r3 = perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x3, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x6, 0x80, 0x8, 0x800, 0x7, 0x2, 0x636cf58d, 0x80, 0xfffffffffffffff7, 0x1, 0x5, 0xf0, 0x5, 0x0, 0x800, 0x800, 0x5, 0x80000000, 0x0, 0x0, 0x58, 0x2, 0x8, 0x5, 0x2, 0x4a9, 0x7, 0x2, 0x6, 0x20, 0x6, 0x0, 0xffffffffffffffe1, 0x6, @perf_bp={&(0x7f00000001c0), 0x4}, 0x8601, 0x3, 0x7ff, 0x9, 0x100, 0x6, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) write$selinux_create(r0, &(0x7f0000000280)=@objname={'system_u:object_r:initctl_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x6, 0x20, './file0\x00'}, 0x61) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000300)={0x34, 0x24, 0x0, r0}) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000340)) mkdir(&(0x7f0000000380)='./file0\x00', 0x18) r5 = syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0x3, 0x4000) write$P9_RMKNOD(r2, &(0x7f0000000400)={0x14, 0x13, 0x2, {0x84, 0x4, 0x1}}, 0x14) prctl$PR_SET_FPEMU(0xa, 0x1) write(r3, &(0x7f0000000440)="4a6570508a7ac71a67e9171ded89d651114a475c17703dca46a2a73ea207ed0712cfd5690d073949adb56fbf3475c98865d85f46ae72f1808bc73354ab2c1c587194beba796872c637cdb2341ca092d41d717c647a9a66f8797553016230a5f11c1097c2e109d9e19e47c9ffffb46a08235e6a7575f0714218d755a48aec1d053d439eac6e4fc01065435e716925b6b6927e985c6c", 0x95) socket$kcm(0x29, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000500)=0x9) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r1, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r6, 0xb04, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4fdb487f}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f00000006c0)) ioctl$CAPI_GET_SERIAL(r5, 0xc0044308, &(0x7f0000000700)=0x9) prctl$PR_MCE_KILL_GET(0x22) r7 = accept4(r5, &(0x7f0000000740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000007c0)=0x80, 0x80000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000800)) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto(r7, &(0x7f0000000840)="e3c89bbcac1d801aa2c63be7e99b41a556082da3f4b6cf97ebaf46405897a2f41cc526d95ad63cde767d026a560600c83291cdeae29efa6bb8410620b81a22ff5510b767cb2a3e2efa2b7f73cd378d69d48812f6d63f1a0d7f40a638810220821620f94925d482e82387ebcbdfda182f20ba159beb4673af08952221f7f74a1116744610740d6ac85bf32dfa07bc1854d70cb4f5351f1b", 0x97, 0x801, 0x0, 0x0) [ 257.976289] chnl_net:caif_netlink_parms(): no params data found [ 258.062900] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.071019] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.078803] device bridge_slave_0 entered promiscuous mode [ 258.091938] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.099024] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.106698] device bridge_slave_1 entered promiscuous mode 07:27:06 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$RTC_UIE_ON(r0, 0x7003) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e22, 0x3f, @mcast1, 0x7ff}, {0xa, 0x4e20, 0x0, @remote, 0x80000001}, 0xb5f3, [0xfffffffffffffffc, 0x3f, 0x1, 0x70971c83, 0x7, 0x3, 0x3, 0x5000000]}, 0x5c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) r2 = getuid() fsetxattr$security_capability(r0, &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x2, 0x7fa7}, {0x80000000, 0xb15b}], r2}, 0x18, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000200), 0x10) recvmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000240)=@pptp, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/186, 0xba}, {&(0x7f00000004c0)=""/63, 0x3f}], 0x4, &(0x7f0000000540)=""/58, 0x3a}, 0x8}, {{&(0x7f0000000580), 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000680)=""/235, 0xeb}], 0x2, &(0x7f00000007c0)=""/84, 0x54}, 0x2}, {{&(0x7f0000000840)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001e80)=[{&(0x7f00000008c0)=""/252, 0xfc}, {&(0x7f00000009c0)=""/193, 0xc1}, {&(0x7f0000000ac0)=""/206, 0xce}, {&(0x7f0000000bc0)=""/146, 0x92}, {&(0x7f0000000c80)=""/75, 0x4b}, {&(0x7f0000000d00)=""/174, 0xae}, {&(0x7f0000000dc0)=""/168, 0xa8}, {&(0x7f0000000e80)=""/4096, 0x1000}], 0x8, &(0x7f0000001f00)=""/193, 0xc1}, 0x3}], 0x3, 0x100, &(0x7f00000020c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000002180)={0x9, 0x108, 0xfa00, {r3, 0x28, "19a7cf", "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"}}, 0x110) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000022c0)={0x7f, 0x8, [0x5, 0x1]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000002300)=""/4096) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x1) r4 = dup(r1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000003300)={0x8, [0x101, 0x7, 0x8001, 0x3ff, 0x2, 0x8, 0x0, 0x7fffffff]}, 0x14) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000003340)={0x0, 0x5e, "50f73d540ca9e7a279dd45bc6ab265f1f607f70b7e8aa1d1f0a6e0b2b972498b546a9d3a2d66c78624401b949bf8a707290713abd60725a778dd2f3a61d38ad5ed15c252c91aa4a3eb173b5b5913a776141e28806b1c30e4266c32810d84"}, &(0x7f00000033c0)=0x66) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000003400)=@sack_info={r5, 0xff, 0x20}, 0xc) write$P9_RMKDIR(r1, &(0x7f0000003440)={0x14, 0x49, 0x2, {0x24, 0x2, 0x2}}, 0x14) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000003480)={0x252, 0x6}) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000034c0)=0x6) setxattr$security_smack_transmute(&(0x7f0000003500)='./file0\x00', &(0x7f0000003540)='security.SMACK64TRANSMUTE\x00', &(0x7f0000003580)='TRUE', 0x4, 0x1) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000035c0)={0x43, 0x2}, 0x10) ioctl$KVM_NMI(r0, 0xae9a) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000003600)=0xffffffffffffffff, 0x4) fsetxattr$security_smack_entry(r4, &(0x7f0000003640)='security.SMACK64\x00', &(0x7f0000003680)='TRUE', 0x4, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f00000036c0), &(0x7f0000003700)=0x30) [ 258.122172] IPVS: ftp: loaded support on port[0] = 21 [ 258.170731] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 258.194935] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 258.233519] team0: Port device team_slave_0 added [ 258.251639] team0: Port device team_slave_1 added 07:27:06 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x402000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200400a}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x10000, @media='ib\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x800) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000300)) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000340)={'ah\x00'}, &(0x7f0000000380)=0x1e) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000500)={{&(0x7f00000003c0)=""/235, 0xeb}, &(0x7f00000004c0), 0x4}, 0x20) syz_open_dev$rtc(&(0x7f0000000540)='/dev/rtc#\x00', 0xb179cb7, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000580), 0x4) prctl$PR_GET_TSC(0x19, &(0x7f00000005c0)) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000600)={0x2f, "5876ef07b7d075fb88b15c746366677ec15f7af046f88946341b2f1428627d003ca99ca780c380206ee3886016ac166a2cb54a8899f8603f8befe8d4b4a9bf351bbc9f708e2bb4f3f6dd99df0f8271f1ce9615dc44d96fff3f26c7ebf59ec01a8df65dc17a3300a80866caf60fe0ca48bf0f0dabfbc7f1c380eca94e28c6bcca"}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000006c0)={@mcast2}, &(0x7f0000000700)=0x14) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000740)={{0x0, @addr=0x3}, 0x8, 0x1, 0x9}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) socket$inet(0x2, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000780)={0x0, 0x8d, "0139841237e15d0c92d37e8675ced5f39d54057d84767441251f5c3e4aed74c1e0f3f56791235f825e2c5c934ae5a2640c97ddf02a5d03fb5879fde6f67c047a5eec00b7dd14f1e8759291cd7804b9638ebe27b6a8d0a9a07c02bf3cd82825be75d3e920dcca78be4a5ca87f17d77593163e2e16dd831c2eaf7aee0bdff3b597dd4c39ea01f4d2655a3bcca62d"}, &(0x7f0000000840)=0x95) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000880)={r3, 0x1}, &(0x7f00000008c0)=0xc) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r4, 0x30, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x29b18fd01765ca6}, 0x4040851) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/self/attr/exec\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000a80)='dctcp\x00', 0x6) r5 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x2000000, r5) munlock(&(0x7f0000ff1000/0x3000)=nil, 0x3000) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000b00)=[{{0x77359400}, 0x1f, 0x8, 0x100000001}, {{}, 0x3, 0x2, 0xffffffffffff9e5b}, {{0x0, 0x7530}, 0x14, 0xfffffffffffffffa, 0x1b9c}, {{r6, r7/1000+10000}, 0x13, 0x5, 0x9}], 0x60) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000bc0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b80)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x8, 0x5, "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", 0xa4, 0xfff, 0x8, 0xe1d7, 0x8, 0x62d3, 0x0, 0x1}, r8}}, 0x120) [ 258.359725] device hsr_slave_0 entered promiscuous mode [ 258.397336] device hsr_slave_1 entered promiscuous mode [ 258.521309] IPVS: ftp: loaded support on port[0] = 21 [ 258.524937] IPVS: ftp: loaded support on port[0] = 21 [ 258.537690] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.544169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.551077] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.557480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.599757] chnl_net:caif_netlink_parms(): no params data found 07:27:06 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x100) connect$caif(r0, &(0x7f0000000040)=@util={0x25, "9111f0b4157ecf6dd0e177bfefefddfc"}, 0x18) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x4}, 0x4) epoll_pwait(r0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x100, &(0x7f0000000180)={0xfffffffffffffffa}, 0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={r1}) getpeername$ax25(r0, &(0x7f0000000240)={{}, [@rose, @rose, @remote, @remote, @rose, @remote, @bcast]}, &(0x7f00000002c0)=0x48) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000300)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000340)={0x3, r0}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000380)=0x1) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@null=' \x00', 0xf, 'veth0_to_bridge\x00'}) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000540)={'raw\x00'}, &(0x7f00000005c0)=0x54) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x100, 0x1}, &(0x7f0000000680)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000006c0)={0x7, 0x209, 0x80, 0x6, r4}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000940)={&(0x7f0000000700), 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x17c, r5, 0x400, 0x100000000, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xd8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb09}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x10, "1e267310393586a31c5fc824a2afb3ea3b6c9023e872ac9b55a31471b3b5fe2ad481559c32d0cd3b9cbb470bda0a270a6033cc724430e814927527f7a2a45906", "cb15bb45999e6dd1d2220d06cf3e4353d841eb9f172dee01653e8e52f63e5c32", [0xde4, 0x7]}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000a40)={0x1f, 0x7, 0xfffffffffffffff9}) setxattr(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)=@known='trusted.syz\x00', &(0x7f0000000b00)=',\x00', 0x2, 0x1) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b80)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x80, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r2}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000cc0)) fadvise64(r0, 0x0, 0xf17, 0x4) socket(0xa, 0x80b, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 258.781734] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.790494] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.798940] device bridge_slave_0 entered promiscuous mode [ 258.852173] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.858936] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.866348] device bridge_slave_1 entered promiscuous mode [ 258.877524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.903080] chnl_net:caif_netlink_parms(): no params data found [ 258.919424] IPVS: ftp: loaded support on port[0] = 21 [ 258.935750] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.960713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.972785] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.991777] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.001144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 259.042240] bond0: Enslaving bond_slave_0 as an active interface with an up link 07:27:07 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x8) r1 = dup(r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x48000, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000100)={{0x2, 0x4e24, @loopback}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 'gre0\x00'}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) fsync(r1) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) prctl$PR_GET_SECUREBITS(0x1b) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000240)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @rand_addr=0x2862bf77}, 0x163, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x4618, 0x7, 0x2}) r3 = eventfd2(0x4, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000300)={'bcsf0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @multicast1}, 0x8, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)='rose0\x00', 0xed, 0x4, 0x4}) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000400)={&(0x7f0000ff5000/0x9000)=nil, 0x2, 0x0, 0x94, &(0x7f0000ff5000/0x1000)=nil}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000004c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r4}) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000800)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), r5}}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000840)={0x82, ""/130}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000940)={@mcast1, 0x0}, &(0x7f0000000980)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000009c0)={@rand_addr="cd4951354b1ab98d70ea3275b881022c", 0x42, r7}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000a00)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000a40)={r8, 0x34}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000ac0)={&(0x7f0000000a80)=[0x6], 0x1, 0xfffffffffffffffd, 0x4, 0x7, 0x574, 0x0, {0xffffffff, 0x80000000, 0x7fffffff, 0x3, 0xa9a, 0x8, 0x8, 0xe1a, 0x3a2f, 0x10000, 0x696d39ae, 0x9f29, 0x8362, 0x1, "20a0344a42a8dc08b7e0784d23333ee8f97faf68b8bc1ba2418a0a2250cf6cb1"}}) write$P9_RUNLINKAT(r2, &(0x7f0000000b40)={0x7, 0x4d, 0x2}, 0x7) io_setup(0xffffffffffff0001, &(0x7f0000000b80)=0x0) io_submit(r9, 0x5, &(0x7f0000001080)=[&(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x2, 0x5, r2, &(0x7f0000000bc0)="519740881ed119138bb8b3192b119185b16a9b02867c289e4ecf6ab10abd773731b60bd25b5832267a0d37cd6dfc27ccbe045b405d162a5e56a2de49d3087e26c1cfbc7fd8466726689cd18bd763b6ce2d3b649475e2b817116793714de4d4a91adf69c7cd3d03313c7df8b26da5d1a1cbfef47e6ca33b1c8da7bb01898267b44708e368063a9bbb60384c59ef7a155eac7c0604cc261d427f96cbab83706004f4fa697d1be24b6229935d8b9ff93e891fba3b8f1e2f19530a08a822b4032c43ee4431afdf9add720e025de4b32e39b626202cb729e72f47bcc49c16cadb96242ce0e446bfddb9af2180c4c9", 0xec, 0x7a2, 0x0, 0x1, r2}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x2, 0x8, r6, &(0x7f0000000d00)="732df135ca55941455e67463c6d1cb24287271af9d57d0d297e4e7a7b47cb4ac1942edd49493703cf268a25c3349216e5276c8392b168ff7d1383ed6a495641a06f5ae5d1bf9d80f7aece47b20aab0d4c4321c7dfc4344baefc178fc66b60746ec86a837caff7546776666703c4990e4c0f2756554146222204c8125b29a51729b4077a79b7b3dfdfa2d131988342dc0a1d25c231fa6193b863971fe58429d5b107bf180f4451e", 0xa7, 0x8001, 0x0, 0x2, r2}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x7, 0x10000, r2, &(0x7f0000000e00)="71782eb7db1cd06eb874e9e2761fd1a8d67779593299f2ad8a877d7679af16fb571475320c7b3372b896af10abe139eae9f1f0b1a27984f79814835efabb4765b05e109411b883d6393d3e5cb63d51a7574730bf7c6c624734782a7852cc466f877a382f027c7bd895e0f5eb1447", 0x6e, 0x800000000000, 0x0, 0x3, r2}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x6, 0xdf74, r2, &(0x7f0000000ec0)="ac38af2e1cc2d9a244b8cfb2d73743b4748d322e41a5d142d61dd4bbf6f2acf529caa7e68256d04ae2a89d0f374cc9d55de4e247c398c236848a7335873a8a896a0d1a1838ac64284e7e22bd713ed1f01d6cbad9481f0fd9641ff146be12a1075c5e44c5cdc68aacb819e15cc9e94ac93453c273eb777cfbdef95e4f0483206d52d624c6a240f5953c7efc1c41e7121c70b83835b692a3946125cf3e7b60b96413d725282e1ba1cf4b80eb93faf5f9378c33716d86dc16397c40ff409bd65309384d617e88", 0xc5, 0x6, 0x0, 0x1, r0}, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x3, 0x800, r0, &(0x7f0000001000)="79013167542a71b5e723e34a1a2a0dd9177d", 0x12, 0x10000, 0x0, 0x1, r0}]) [ 259.083022] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 259.120600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.132643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.140562] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.146968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.197378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.205287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.214140] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.220541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.232536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.249323] team0: Port device team_slave_0 added [ 259.257901] chnl_net:caif_netlink_parms(): no params data found [ 259.274368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.283735] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.290179] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.297312] device bridge_slave_0 entered promiscuous mode [ 259.304795] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.311267] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.318736] device bridge_slave_1 entered promiscuous mode [ 259.336412] team0: Port device team_slave_1 added [ 259.343225] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 259.371806] IPVS: ftp: loaded support on port[0] = 21 [ 259.378583] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 259.399016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.409564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.417168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.424718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.432486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.440017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.455520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.467412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.549124] device hsr_slave_0 entered promiscuous mode [ 259.586426] device hsr_slave_1 entered promiscuous mode [ 259.626813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.634177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.641808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.667941] team0: Port device team_slave_0 added [ 259.705774] team0: Port device team_slave_1 added [ 259.768086] chnl_net:caif_netlink_parms(): no params data found [ 259.781464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.789249] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.795620] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.805340] device bridge_slave_0 entered promiscuous mode [ 259.812888] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.819556] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.827181] device bridge_slave_1 entered promiscuous mode [ 259.881963] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.888553] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.895413] device bridge_slave_0 entered promiscuous mode [ 259.930006] audit: type=1400 audit(1549178828.186:38): avc: denied { associate } for pid=8230 comm="syz-executor0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 259.989237] device hsr_slave_0 entered promiscuous mode [ 260.017319] device hsr_slave_1 entered promiscuous mode [ 260.069562] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.075961] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.083362] device bridge_slave_1 entered promiscuous mode [ 260.097592] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 260.150129] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 260.173760] audit: type=1400 audit(1549178828.426:39): avc: denied { create } for pid=8251 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 260.203924] audit: type=1400 audit(1549178828.456:40): avc: denied { write } for pid=8251 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 260.231653] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 260.233433] audit: type=1400 audit(1549178828.456:41): avc: denied { read } for pid=8251 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 260.284380] bond0: Enslaving bond_slave_1 as an active interface with an up link 07:27:08 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) tgkill(r1, r1, 0x36) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000040)={0x0}) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 260.306617] team0: Port device team_slave_0 added [ 260.355712] team0: Port device team_slave_1 added 07:27:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) fcntl$setstatus(r2, 0x4, 0x42803) [ 260.385500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.456554] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.464622] team0: Port device team_slave_0 added [ 260.475974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.483394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.499300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.529619] device hsr_slave_0 entered promiscuous mode [ 260.577451] device hsr_slave_1 entered promiscuous mode 07:27:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r1) unshare(0x40000400) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) [ 260.637471] chnl_net:caif_netlink_parms(): no params data found [ 260.647920] team0: Port device team_slave_1 added [ 260.697735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.709987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.718858] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.725242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.737985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.745725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.750116] hrtimer: interrupt took 34039 ns [ 260.753459] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.763807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.770744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.778683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.786673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.793577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.858058] device hsr_slave_0 entered promiscuous mode [ 260.906385] device hsr_slave_1 entered promiscuous mode [ 260.949930] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.962879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.970740] IPVS: ftp: loaded support on port[0] = 21 [ 261.008561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.016543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.024270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.034838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.042505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.050306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.057886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.095501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.104023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.112000] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.118392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.125206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.132943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.155053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.185322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.192868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.200849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.208670] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.215014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.222579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.257642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.265916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.275199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.285635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.311031] IPVS: ftp: loaded support on port[0] = 21 [ 261.312505] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.323743] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.331583] device bridge_slave_0 entered promiscuous mode [ 261.339374] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.345740] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.353530] device bridge_slave_1 entered promiscuous mode [ 261.375781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.382880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.391146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.399214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.406887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.414338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.422067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.448494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.463820] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 261.495321] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 261.513347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.543132] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.575427] team0: Port device team_slave_0 added 07:27:09 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) [ 261.589236] team0: Port device team_slave_1 added [ 261.595149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.605188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.634797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.664365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.675878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.683904] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.690307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.706639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.779217] device hsr_slave_0 entered promiscuous mode [ 261.817244] device hsr_slave_1 entered promiscuous mode [ 261.857418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.864493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.907546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.915167] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.921825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.932095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.985513] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.018850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.028486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.036954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.046543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.063005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.075094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 07:27:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2}, 0x0) recvmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000140)=""/19, 0x13}], 0x1}}], 0x1, 0x0, 0x0) [ 262.090930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.121041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.141644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.158948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.170916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 07:27:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3302001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() socket(0x2, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x25) wait4(0x0, 0x0, 0x0, 0x0) [ 262.209732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.217535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.229838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.251772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.273083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.293069] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.299478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.316844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.325046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.338208] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.344569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.355537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 07:27:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 262.439074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.451161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.497714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.505579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.522282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.539758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.557937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.565555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.585470] 8021q: adding VLAN 0 to HW filter on device batadv0 07:27:10 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) [ 262.609488] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.621507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.640636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.657049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 07:27:11 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) [ 262.759236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.814820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.853698] 8021q: adding VLAN 0 to HW filter on device team0 07:27:11 executing program 3: [ 262.868395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.879094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.919054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.940485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.004969] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.011409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.068111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.077897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.101376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.134045] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.140513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.175676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 07:27:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1, 0x0, 0x0, 0x10000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) [ 263.224223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.248342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.274972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.293446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.320510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.331046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.350039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.365046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.384098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.400051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.413063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.443520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.462863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.500157] 8021q: adding VLAN 0 to HW filter on device batadv0 07:27:11 executing program 5: socket$inet(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x9d, 0x80000201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) 07:27:11 executing program 3: 07:27:11 executing program 2: 07:27:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) write$UHID_INPUT(r2, &(0x7f00000006c0)={0x8, "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", 0x1000}, 0x1006) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r0, r1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='syscall\x00') pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shmctl$IPC_RMID(0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={0xffffffffffffffff}) close(r2) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)) 07:27:11 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r2, r0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 07:27:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x840000000000006) ioctl(r2, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r2, 0x0, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r3, 0x0) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x20000004, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r4 = socket(0x9, 0x0, 0x7) recvmsg$kcm(r4, &(0x7f0000001780)={&(0x7f0000000500)=@nfc_llcp, 0x80, &(0x7f0000001680)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/185, 0xb9}, {&(0x7f0000001640)=""/59, 0x3b}], 0x3, &(0x7f00000016c0)=""/146, 0x92}, 0x2100) write(r0, &(0x7f00000001c0)="e39decdb9a7036601ab660c13e629e3eaf0706f6f6402d914c82fbf38c8233e663618d4e60eb9988fdf17050086c9c3019fa3b555c9020c257d9405e2dcf4321a5adf8db449b344c41fedfeefa34599fa7502465f394db517de2520f92999df85047b651426fd15edd32bb11aa6c7c3dbee5a9a4731fa51b6b7fc5ee7cfb5b280b785fd926ba599d9d157423516a2c8fb18d5b272a820de11e9b262d98cef054580b9c", 0xa3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r3}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000380)="252b648588dc2bb64346c7bbe6cf3990", 0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000017c0)={r3, r1, 0x1, 0x9, &(0x7f0000000440)="6b5614b9b80e502cec", 0x80000001, 0xa9, 0x8870, 0x2, 0x3, 0x3, 0x100, 'syz0\x00'}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0xc, 0x100132, r0, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) 07:27:12 executing program 2: [ 263.755448] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:27:12 executing program 3: [ 263.786691] audit: type=1400 audit(1549178832.036:42): avc: denied { map } for pid=8345 comm="syz-executor0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29816 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 07:27:12 executing program 2: 07:27:12 executing program 0: 07:27:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x89e5, 0x0) [ 263.984111] audit: type=1400 audit(1549178832.156:43): avc: denied { prog_load } for pid=8352 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 07:27:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa8a37962a294f86dd60110c1100302100fe8000000000000000000000000000ffff020000000000000000000000000001010090780600000061cb155d00000000ff020000000000000000000000000001fe800000000000000000000000fd0000"], 0x0) 07:27:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000000, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x800000000002, 0x0, &(0x7f0000001c00)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x3dc, 0x0) 07:27:12 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000200)={0x0, 0x0, 0x825}) close(r0) 07:27:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x248, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140), 0x4) close(r0) [ 264.142158] audit: type=1400 audit(1549178832.206:44): avc: denied { ioctl } for pid=8352 comm="syz-executor4" path="socket:[29565]" dev="sockfs" ino=29565 ioctlcmd=0x89e2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=sock_file permissive=1 07:27:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x1, 0x0, 0x369e5d84) getdents64(r0, &(0x7f0000000b40)=""/107, 0x6b) [ 264.349797] audit: type=1400 audit(1549178832.296:45): avc: denied { prog_run } for pid=8352 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 07:27:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="0a5c2d023c1262857180") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000000)={0x1, 0x3, 0xffffffffffffff92}) ioctl$KVM_RUN(r2, 0xae80, 0x0) request_key(&(0x7f00000000c0)='logo\xee\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x100000000, 0x5b03, 0x0, 0x0, 0x0, 0x0, 0x7}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:27:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x89e5, 0x0) 07:27:12 executing program 0: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000002740)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000002680)) r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x9, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 264.603555] binder: 8417:8418 ioctl 401054d5 0 returned -22 07:27:12 executing program 4: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000002740)) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000002680)) r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) clock_gettime(0x9, &(0x7f0000000400)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 264.650901] audit: type=1804 audit(1549178832.896:46): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir698467954/syzkaller.6tx2Wf/3/file0/file0" dev="sda1" ino=16532 res=1 [ 264.680100] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 07:27:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x89e5, 0x0) 07:27:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) [ 264.826779] binder: 8427:8430 ioctl 8904 0 returned -22 [ 264.833931] audit: type=1804 audit(1549178832.956:47): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir698467954/syzkaller.6tx2Wf/3/file0/file0" dev="sda1" ino=16532 res=1 07:27:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x89e5, 0x0) 07:27:13 executing program 5: syz_emit_ethernet(0x425, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x3, 0x8}}}}}}, 0x0) [ 265.208573] dccp_v4_rcv: dropped packet with invalid checksum [ 265.247010] dccp_v4_rcv: dropped packet with invalid checksum [ 265.398817] binder: 8417:8423 ioctl 401054d5 0 returned -22 07:27:13 executing program 2: 07:27:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, 0x0}, 0x0) 07:27:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:27:13 executing program 5: 07:27:13 executing program 5: 07:27:13 executing program 0: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000002740)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000002680)) r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x9, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 07:27:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:13 executing program 4: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000002740)) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000002680)) r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) clock_gettime(0x9, &(0x7f0000000400)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 07:27:13 executing program 1: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000002740)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000002680)) r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x9, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 07:27:13 executing program 2: 07:27:13 executing program 5: [ 265.742828] binder: 8469:8470 ioctl 401054d5 0 returned -22 07:27:14 executing program 5: [ 265.786746] binder: 8476:8477 ioctl 401054d5 0 returned -22 07:27:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:14 executing program 2: [ 265.871792] binder: 8481:8487 ioctl 8904 0 returned -22 07:27:14 executing program 5: 07:27:14 executing program 2: 07:27:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:15 executing program 0: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000002740)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000002680)) r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x9, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 07:27:15 executing program 5: 07:27:15 executing program 2: 07:27:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:15 executing program 1: 07:27:15 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 07:27:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="b93c56e86046d1080000f4ef3600cce115", 0x11) 07:27:15 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/11, 0xb) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)) syz_execute_func(&(0x7f0000000200)="3666440f9bf56664400f9f3241c3c4e2c9975842c481c27d794e00000f11581010198c7f7fcd04af6e0f01db") 07:27:15 executing program 5: [ 266.877358] binder: 8517:8518 ioctl 401054d5 0 returned -22 07:27:15 executing program 5: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000002740)) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 07:27:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:15 executing program 0: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000002740)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000002680)) r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x9, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 07:27:15 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)=""/229, 0xac}], 0x1, &(0x7f0000000800)=""/136, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000240), &(0x7f0000000080)='syzkaller\x00', 0x0, 0xf9, &(0x7f0000000380)=""/249, 0x0, 0x0, [], r2}, 0x48) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x4, 0x880) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000100)={0x1, 0x1, [0x4, 0x8, 0xe1, 0x9, 0x4, 0x7fffffff, 0x9, 0x3]}) 07:27:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000040)) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4), 0x1c) dup2(r1, r0) socket(0x8000000000000010, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 07:27:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:15 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") getpeername$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) r1 = getpgrp(0xffffffffffffffff) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x4, 0x30b6, 0x7, 0xfff, 0x0, 0x5, 0x2000, 0x3, 0x2, 0x4, 0x2, 0x20, 0x5, 0xfcd, 0x8, 0xe3, 0x0, 0x2, 0x4a1f, 0xaa5a, 0x100000001, 0x81, 0xfff, 0x9, 0x840, 0xbb1, 0xfffffffffffff85e, 0xd9, 0x8, 0x5, 0x400, 0x3, 0x9, 0x6, 0x7, 0x9, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0xa}, 0x804, 0x3, 0x2, 0x6, 0x5, 0x5, 0x2}, r1, 0x7, r2, 0xa) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000140), 0x10) setsockopt(r0, 0xff, 0x3, 0x0, 0xda) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getpeername$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) 07:27:16 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x7, 0x200) ioctl$UI_DEV_CREATE(r0, 0x5501) clone(0x8800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='vmnet0wlan1ppp0(@ppp1\x00', 0x0) keyctl$reject(0x13, r2, 0x0, 0x1, r3) r4 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x80, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000002c0)={{0x8}, 'port0\x00', 0x8, 0x80002, 0x8, 0x1, 0x7ff, 0x5, 0xfff, 0x0, 0x2, 0x8eae}) write$binfmt_misc(r4, &(0x7f0000001780)={'syz0', "d0ca86d8004878ab"}, 0xc) r5 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x102) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000540)="8682a7efd2e30afa1112e3c13ee37fcab6f03e30f786b6a88af954b1244b15ffeb4248fbef07761f72fb0ff5ae2e545940146c42823aeb0837", 0x39}, {&(0x7f0000000580)="b4e66607b1f3771a19f028fed3dd0b0ef6ef3f071700d7e772ed33fd4d03789a7d7e69b77fe72b209b9a3b8e317d6bbffb3aa22bc18657d11f655e5df56d575a6d4ba8b59d547b531a62be5dd6173c25428bc6b5a8a3843672c148d36ba33804f2390dfc056cca1f5391c5782742148aa804b5df3435da8bef749e249666aa5db294", 0x82}, {&(0x7f0000000780)="24cafe10ae89e054d2de5d8511ea242dc40981adedfce95790aa386fe37278ee0a4b57f28959e7e91915833eaf33756a3a5bda4a4bfe8c5744b6304b8d561a844d29bb73e6061a34ca9ec5d1bcbbabd7137bdbd271a0d14009fb7b1f4c1d72670543669d0389d9a6fb8065f7205d014676117661357d1ca2c072b9c7fd4539b89ea5b91b5fb3a98bb56c995f273101c50584b5ce0bd497ecdf4c57a2115fefedb0556981565153f728ebe539ff6641a974d66a6529404cbb89312e5b137496dfe9e5926716e4c4914ce30ec6497c285f81e002a79024a592a5f31ee609fc8e0b8df6ef534f150326319ece4b23cd29484bf0353a27ada7f89fcb9f253ea31a3f0e0a2ed2d722fb07e2692daa74046579bc26d8e662d0abe85af957bb9aea0fcff1881aad7a3daee4f0353b073c5d69c3706397727dcfc5b872ef88c0432f89a18610e2d1240eda0542bd865e3bb7f6e18be7d7182b389f3899984988e834b1a9452b6bb58984b9b51900728065683e9227a7060585794b04df7cf470b1498d7ad76da6a32047a4d79dba36abaeda2c1b92cfb99ed805c724bc528b4ddf61b8846cf55799d805e5aad0a08b3b21dc16e02ce04cf037fedc4d4cd910304efe5284f16fc671db48b248ca7ee05caf6db4ab4c2c68cd531f1c9191ce98f52c512e1cd79bfaf2d08ef8829db4e90e2611138fe37469dd864d62069fcc1c4cb5db4c11736b8cd076b6df25635ec6dac76a65a096df2994303417685f3dd678522aa1baf510403ba4bfa7c324803ce2814f93b35427fadcf64da8521df52875143862d68d8fb62838f5f608cdfd978c762364bf7b12ff567048a440b0a0701a6941dd1bac8af885a20c8c7116f61e5b730d6176b2c7d958b273db495f516f56f2de5748dd7e9a8f5e6c62641962baa3a427b4c7d6b2b7f1a1ad9ee98dcd06c401c85e7a444d43a0a4f33a91c2812348088a38cbff47c8c839a946eea54bc0d75893441b24937e4f7a11a5d8ceb1d1308e4f45c89668d1fbeff8ea73ba8446dea2e82553500547c880fdabd2fd2b2dbf262e1634a08d6905c6687bd7cef556fb6e15ffc4e44cf6bf2fd9458af284051cb3f685c0e8ded1b510c271685791b9da4e5e494f8629474079f4c6644c6e031ff57a8a229bf7b8d1604a524cb7436646de105b21a9447a4af1f973daf1eb404b423e80adc6c3caded6e0ed95d46c22d630906272c9aae4d7796b5086a9dd4ae51ecfba9a4184705a564ef5e76b6eb1b84583dc52fecd7453966157cb7e9b58abb35ba1c7ab74f1175e2425d553a123fed32ec83ad8b883dcff7bb3e0a6132c417bf7aaea611c666fd8432bd32a0c0a0b7cba347ef76bfd524df25f5fee17cb254096256bc32a9803c9c5158454c222837a1bca1c353c0bf24393cf882ef12ff5b8cf04b7230aa420cd4821672489780c21deb2822af726420bac124b785a3077d785f52ba4313d2dbd0c27916402b5541a057b7730ae4fadfec30b3ce737ee69470309967beff69b6095865832e4633070249661be95ea895f58ccf000a0528c57f2a03e9612210198530013a60d37f5278e4ff41952934095b50551f49b47ea409531f852f33e150c90d4afc47f569c0fc08ab0aa82c0151afd111967a7513308d936307af9a96ba03fb374c1a6106de415312e56629c290d542df2d3eb2e992138ee444cd80ff324a3bc6480162e96825912567459a1087c65b541ca49677e18dd30e746d0c4b0c5283bbfb15e6dbe0397df03ea5eb9f7702b292fe70f66c6aa2ee3a1cfed2eada0e17c5d5634b530be1749480467aa481307d9e3e947d180975aaab2caf2c05feb529ab8973831880b1ba119be2381b73e62e4f542353344a45fcd11e002aa3ea5e936c6c02e1591526c575a9cc3b776980b67848360a48a5e875837ef289ab1f2da2f9be5579cc0a256b7858b8cd251dbdddef298ac29ebecad4f38d2ea08a403061e5ce3ad7596488ae4b8219a34b809d3f4201dc79f4b179ae325a86253205f6c4ac85dceee304463fae074f5439b641419a46001f252ab64c3f8f121417309fbea015ff6c15e2a83aab7ef31b0885f752a6542cbfc4d663df354dbe5b4f856714c20b07c02ac01f5302fb5bb235a111df4ba5a090a201aa45e8b77db76181c95017dd10a0d3af57369bb5952c92e2953c22271837531286801aa646ad6828c3edb04eff3524d3accd9a11dc8440d524ab189cf635d711f3087644457274a7c54e639b764b8ad5f6f7c034eebf5edd2747264b7ef23ce6056237b6440e384beba728c0dfb6dc568110a822f156aa65d0426a7f516ce734698825bb6c8b98f5e026e42f54d0144f0672480e6229707670e420594d116bc99522060a71735944d902b270481f7106faefca2ba92ecb3782c5d4b69af5b4523e5a290f396f7dbee6527c0b298f61ae1fb58dc4b8561d6280e4cde9ca6e002f35b7cfdab2e46bc183324eee598670c0ef0ed9ed79cfacef6688bb4c801b00a863826ab285f26c499c592b5616a77ee364cd3b5ee1405836d4a88d46800a32e72e3b8b6936846eed1e5b843399f19f88a3bbf7504067353e84180a64d57726b2b6bb31f71e17809368e0a62e73d216109ff3472c2fe4e9876a684cd481e2b63dc43104bf17c9995ce4ed1c8996c20e1e5a99e28e20f88f78c989e5cd3de7c051f13c3d475ef7556f8f8bdbde0279fda8fe7b2407f3880f8f243f8b1782891a6a4be79048290613df09ed40233a9636829f1adbd235f8ece9fb514ae88a80b5697c8e6ebcb5543de8da8c742a20570fe9cda6a2e1cc5e8d2b9cc58bf6ddc83e3c730332bc7532964dd466b2f8c123c298dd8149e97dfe650900d5342b685e37fa6f21595012abd5a3b4031e883b632f56e80199ba16cfa8ad9b36af2b753bd2253f944c5d62f870e7e574ce7ca2a5ecdb21c9aa7e743f1a663fc4bfa0e36ec7f367e8f9a5bb9fec9c435613122500373615c9a69da953c89272a48646cf25e3c06688aab4e39166b2e772455d8565820d745fe699ebbaac3e99171424b0f9e484ae6540393b9921536689d8d4f262cb7d1f8b4e19db9fdc7a1a9818d213e98bf0b164bf698a783fd4cd97cb01631d6f11521c1c7f0787d33b162038cf25777c3be4d6c11fd07e44d88124122aaf56d7367a24a150035fba1e3b450bc597179b6961e3621f7d65546d4280f4d0d6f20744aebb11a4e5f5b9173204cff01a2cfd67cae38bcb6cc7334e0bb3558c3ad95532ea394cf28eddd3586988c9b98dffb55da11110c329848e8f001741c8aad6e9e1eacd58f4a3806b01dca35e98dab2d52292f1a46d62e000ad988eb31927642fb6f241c66375587f5324fe92932d35b8aac8707c3c8005ad64fb9e0a9cfe3e09488d91d78c053bc83b5b64c8d567b84ca038ffb92d2e5a97ca9a1d4abe265082883095c5909060c7a56b70eebe4c2925822851726c315c33356ab0c69ca429fa2be3f890ef4e73ff9a4d0a7c5ce4294b235256db3438a0d4c81832b9cf812385d6c5d754f2186ff70e6266e150126fb8d872b77bf04768cf39aa07130e4f84c099d495fb55977ce478accda88769f15c532c4f033aaaf9c4b2f482280a9640bf8c8296b5c1b449a13e9f56abd00ce042d1b148e5f256ccb6bde4ddb2fa008dd982f443f2ed11b6a01b548c1e1f80e9135cf51d79de3749de3f788fac1fbcad4ba2b3dcdb125bc7e90172dcba2b676f6e9ed85ba1e91f4afc33563386de065c8ca0bc523a92fc28b3389b9ac97fd8c06338dcc9ff4a848623bdb019d17b7b44937e79e37e3d6c48b0d78f49ce2e1cfe43ea713a4b71208d0d0afb8e8313be835f3b4bdeef1bcff9fea5e9e0f795b297ea50a49ead7480b526d71c8267f1b26636bf8338f0b6eee4df7def3c577ab975b8243c1600808b39b35d883b4be3c2eddcc863c0c1479013e2d9d1b2e936e7cb7571fe93ff75cdc751b20067cf0b94d912ae6f48be0ab28e24eae32d415d72127ca45343b6864ff9223252b1714b36e426bcf66298f95200dae1f2e0a34a01abe74b66565360526623f29c596ce501982db21806b25fc3e0510034388fb64caa1516863f9837e98f05f4c4d868e4f4bc9248c8155e20c6f2a365bc2fed04cdcbaa3db1cd1564177ab7b34fed536456c2a24df635cea2daff87f0610ea2bc2e507736601e40d11d7ce659664252f5924ca5462c47adb0d9afd022099e21b049673e27bbc80b7f216d6eea43e48df5c3cbd077f28c2ab2b048f0823be557dfba0f066fbf4c662f1176af699b29ea8dcb3bfdf8ba01a6a0f142df2ede76e9980ce8600529d62cf2a3c3594d8aa85f9d50d1f7696a9f834de9cd619ecc7cb4b334dffc64f53a7cf6ab97564d1d9cfcd270f7e9428bb845cee637079499441193baefcc99646252e062114a74f915eee2dec235cbd151bbfaed46eec0c034d0c6e65deb49f11b316d4998a355926c3316070c2697ad4c015c819acda55b70a875d5379e5381be17a4fd7da088336f19fd92a74eae71b4ba371ac7961c3f5dfce45d6a1f976b700405eca92ef0800d2e6f697a032b133b30aca9067e6936106dca54f0eb7da1de20ccfbd5d33665906c280cd607ea79e66b0797d495fa750d6456b63704ad31e1d6bf38d406a09c1d50d3144d7d70532d79c267d25e3eb35958077c1f267f22f582c72dfe5ddaad518aa82b6c13bbd418f1fcfca279332e823e12254b329bf81804040310947e11346e77196b9f7fadf5f16bdb8b1535797507b648292c25589c48c0f8a9848fcfd527d47187b8205a35b9f30444eb1c37d24cc6be5444346fd0d789b23ef8ef289f40759ff90c5a92bf25f3fb7e739672e3c9b52883b089eb53c24145b3cd1066dcbbdf59fbf494b62ab769b5d86fa368e6b92b9989f2a4f4d5250c9d3eba22659c430e8c7b2c379e2ddfd7e64db963390fc37b097e80996abb732a3bbf0b43319f056286f739a392f00ee7bf9f3b8f5652a539e3a703c9b79f4a72825f97e5e7d871cb2958850ae30094a1aec0c467bf4ed98f239b83dd9e93fe973f5e2bb481164eea44115552b6d0b65c770e106768df11d40f5993cf83ef88235a5b8ccd17bc7801ddf5c3352822cac45cf392d053790428762fcb4ecc041512d28ae4a06f63f2d2f24611d6270f3d3a13d7c85306b96d34bcd18cd20687385dc65d8275c4976fada8a5bdaec3e31eb14713ddc56bed4275459c6e01951fb5d19b41bb81237fb63aad01c63c322112b8784d486664886066bf26956907190b198af05d68c957c987eddf45d406b0c002438bff7a674663296c77c52d52df9b296099935bdf7c15da8730162dd57c07f4b4f95456b3da04daaa154acb61ba94fc6560277efe604037e12245857e61c6554a186bd733d4bccf2538fff07ae706715acdb14474edae430936c69718cf3097adbdb751c4eed0a3db2f9f0720e79db2324a3485f7d4f71eba17340db5eee72ff7f05601ca8c133e38d2a30526fed2039853a42efdb44c2875f3a02e6c35c68ce520b9a809b76b6ee218b544dba9c65b2861b275b4815198a0d09d60eb087424f04f80b107f2a984f8eb41b5c6d7f721c1eb91eef9da645be0e51c0bf7967b815cb08734f63b260e63c9272ed87ae21b520cdd184b8c6cd1fe7746ff9eb10c0f5e761c953b162e87dc3203b5a4de4a82414c6b2809b7bc032268c257dc78d38697e420163f99213e5e37c9f18197bd5da88219cb237fb96ed6aeb9f0e619244ac4d5139055a78be9b1e3d74a5a936e6393f44ad17386e3494a51709e1e5acef", 0x1000}, {&(0x7f0000000640)="0fa444868b7b189c021428be96c46a900e8f0da51579b14d321f72fcf5d416dd98ad8ad1edac5cdd0ebacf061697f9fd63dea4c473c96cddd8605bba070c45ccb637dc", 0x43}], 0x4) write$P9_RREADDIR(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="87000000290100050000004000000000070000000000000002000000000000000007002e2f66696c653001030000000100000000000000f8ff7fffffffffff0107002e2f66696c65318001000000010000000000004ad68ba12623a16d000507002e3f66721e011f0e53abe48a1bf70476b7c259206420074d3701051100000000000000002c57b3c29b170000"], 0x87) lsetxattr$trusted_overlay_redirect(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.redirect\x00', &(0x7f0000000500)='./file0\x00', 0x8, 0x2) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='0'], 0x1, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r6 = gettid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000700)={{0x0, 0x0, r7}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, r6}) [ 267.792753] binder: 8559:8561 ioctl 401054d5 0 returned -22 07:27:16 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x2302, 0x0, [0xfffffffe]}) close(r1) 07:27:16 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:16 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000004c0)='trusted.overlay.nlink\x00', &(0x7f0000000500)={'U+', 0x1c9c}, 0x28, 0x2) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0xc, 0x5, 0x11, 0x0, [{}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000480)={0x4, 0x0, 0x1, 0x7fff, 0xf, 0x1ff, 0x100000001, 0x3, 0xbd, 0x3}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) fallocate(r1, 0x0, 0x0, 0x10000) fallocate(r0, 0x0, 0x0, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x0, 0xd00, 0xff010000}) fstat(r2, &(0x7f0000000180)) 07:27:16 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000080)={0x3, 0x3}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r2 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r2, 0x0, 0x0, 0x201) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000140)={0x7, 0x3, 0x1, 0x5}) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454e2, &(0x7f0000000180)=r1) 07:27:16 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4001, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80200, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x13, 0x2, 0x4, 0x3fd, 0x10, r0}, 0xd1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x18) 07:27:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r3 = dup3(r1, r1, 0x80000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r4, @ANYBLOB="000425bd7000fbdbdf250a0000001800070008000200ad0000000c0003001f00000000000000300007000c00040003000000000000000c000300ce0f0000000000000c00030009000000000000000800020001000000340009000800020001010000080002003f0000000800010006000000080002000900000008000100010000000800010000040000100005000c000200080004000080000008000100ffffffff080001000500000008000100ac000000100007000c00030007000000000000000c0009000800010000000000"], 0xe0}, 0x1, 0x0, 0x0, 0xc8c0}, 0x20008805) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) 07:27:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{}, {}, {}]}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000002c0)={0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x501000, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x6, 0x90800) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000240)={r1, 0x2}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000001c0)=0xffffffffffffff1e) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0x950, 0x2000000, 0x1, 0x2, 0x5, 0x0, 0x3, 0x401, 0xb2, 0x7f, 0x4, 0x260, 0xfffffffffffffff7, 0xfb31, 0x4, 0x1}}) 07:27:16 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000080), 0x8) mkdir(&(0x7f0000000340)='./file0\x00', 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'team0\x00', {0x2, 0x4e20, @multicast2}}) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1&', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472ff00000000000000706f72743d30783030303030303087ba529501653411302c7665724b6f6e3d3970323030302e4c2c00"]) 07:27:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000400)) r2 = semget$private(0x0, 0x3, 0x2) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000380)={0x1, [0x0]}) semop(r2, &(0x7f0000000340)=[{0x1, 0x8}, {0x2, 0x0, 0x800}, {0x3, 0x0, 0x800}, {0x6, 0x3, 0x800}, {0x2, 0x401, 0x1800}, {0x4, 0x17, 0x1800}], 0x6) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8, 0x400) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000003c0)=0xb) setsockopt$packet_int(r3, 0x107, 0x19, &(0x7f0000000300)=0x3b110294, 0x4) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000100)=""/142, 0x8e}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f0000000080)=""/13, 0xd}], 0x4) 07:27:17 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)) [ 268.681070] audit: type=1400 audit(1549178836.936:48): avc: denied { map } for pid=8607 comm="syz-executor1" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=30295 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 268.710146] device nr0 entered promiscuous mode [ 268.717161] 9pnet_virtio: no channels available for device 127.0.0.1& 07:27:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) pkey_alloc(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, 0x0) r3 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mlock(&(0x7f0000ff1000/0x2000)=nil, 0x2000) r4 = semget(0x1, 0x4, 0x29) getsockopt$inet6_int(r3, 0x29, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) semctl$SETVAL(r4, 0x1, 0x10, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x4}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) [ 268.772679] audit: type=1400 audit(1549178836.936:49): avc: denied { map_create } for pid=8619 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 07:27:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:17 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="23b10026cda7d3b3aaad75e3eb267e49143d013babbbe6532b619ea499477f9d15749a6f100868f2cb454c8d5f520141aed3a68146b330447a61ff3e3fd0be8f48206bf0"], 0x1) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x800) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x200004, 0x0) 07:27:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:17 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'rose0\x00', 0x0}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000200)={r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000010000095000000000000009500000000000000460dd67a5a01465234161ea50fc3455eafc0f01dda203d3c63fbcb27f4f97af9ff5517d280e0"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xb2, &(0x7f00000000c0)=""/178, 0x40f00, 0x1, [], r1, 0xf}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8012, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="9500000000000000434f7000081800001859180004000000"], &(0x7f0000f6bffb)='GPL\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0xa}, 0x48) 07:27:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x17) ioctl$TCSETSW(r1, 0x8924, &(0x7f00000000c0)) 07:27:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:17 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2000, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0x8f9, 0x100000001}) r1 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000600)=0xe8) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f00000007c0)=0xe8) r8 = geteuid() fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000009c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xee01]) r13 = getgid() setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x1}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}, {0x2, 0x2, r3}, {0x2, 0x5, r4}, {0x2, 0x3, r5}, {0x2, 0x3, r6}, {0x2, 0x0, r7}, {0x2, 0x1, r8}], {0x4, 0x1}, [{0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x4, r11}, {0x8, 0x4, r12}, {0x8, 0x1, r13}], {0x10, 0x6}, {0x20, 0x2}}, 0x8c, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r15, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff014}, {0x80000006}]}, 0x10) [ 269.503896] 9pnet_virtio: no channels available for device 127.0.0.1& 07:27:17 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r1) setxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000600)='y\x00', 0x2, 0x2) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r4 = open(0x0, 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @initdev}}, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0x11, 0x3, @scatter={0x3, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000640)=""/179, 0xb3}]}, &(0x7f00000001c0)="a158880a4bae5571e2b59760f9e7ec163b", &(0x7f0000000300)=""/34, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}) 07:27:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x400, 0x0, 0x8, 0x8, 0x6, 0x7e7, 0x2, {0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x101, 0x5, 0x80000001, 0x800, 0x5}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x20}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000480)={r2, 0x7, 0xffffffffffffffe0, 0x200, 0x594, 0x8000, 0x7, 0x6, {r3, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x0, 0x61ba, 0x100, 0xad}}, &(0x7f0000000540)=0xb0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="040000009340ab065d4efdc6ba66205f0811", @ANYRES32=0x0], &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x75, "b4c31401c03b6789fa9a7987117a1d9493d5aa839306f7623248c648baa26d6b66df0d6e109d119226f770296e3d465adf2cbe6f9afccbcda90f5e055dde614dca33c08fc1f7f7ff588b9c3cbc666bbd375e76f5923c47b63848af68791c23135bc231095a66118976e1f16aadd5911ef4671a102b"}, &(0x7f0000000140)=0x7d) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6d, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e22, 0xffffffffffffffb0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}}}, &(0x7f0000000040)=0xffffffffffffffde) 07:27:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:17 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a407a8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000340)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x400) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) capset(&(0x7f00000001c0)={0x399f1336, r3}, &(0x7f0000000280)={0x8000000000000, 0x9, 0x5, 0xa3cd, 0xffffffffffffffff, 0xfffffffffffffffd}) capset(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x7, 0x7ff, 0x8000, 0x8, 0xc7, 0xa5}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x3, r2}) 07:27:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) [ 269.786643] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) 07:27:18 executing program 5: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000400)='v', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) getuid() r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}, 0x0, 0x2}) 07:27:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x3, 0xfff, 0x4}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040f000000001dceae04f08b1e4db0ad1ba28bbe8c58e1e04bb261fa3c6d4ae7bc1a1d43930dd457248eb81b72ea4094e7a187fb2f4c7161604e3e16cc95b99a3ea74c6bd580dcac33c482e84baea4a95536381c3bc57ac30e3fe5d931c213686a37c2741ae07a29947b6727c36971747ee150e8b2eeaab126d98d5668ad0ba131741008e549154246edebae3c7dd69e02ef3fb23b7f57f38a1e53feaa3907"], 0x1) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 07:27:18 executing program 0: clone(0xfffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) tkill(r1, 0x3) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0x9f}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = dup(r0) openat$cgroup_ro(r2, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r2, r0, 0xf, 0x1}, 0x10) ptrace$cont(0x9, r1, 0x0, 0x0) 07:27:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x4, 0x1, @thr={&(0x7f0000000000)="b0b37b27ff3876581c04cee8d25d5067ceb08a72da1acae44953bec3f7fcda2da22c0d378832ce", &(0x7f00000000c0)="db002f60fbf8d315190ff149c6d12c80f7c43e40e1863a352b8ba9fe654af54ec27f48c5346d572d17d6e3bcaa7ec03f62db2de20242e3d6f65b7ddebcfd523bce8f502a4122d849416d10a184a9b768a2d4d1c63b204e214fe38662d086120a85f9b432f89c799c72e66446d1777bdd75d83cd3fe3b704f3baa0e010365aa351c504f6d897caa7a3d11aa174c06bd8d3dfeaf3c61b95291788d51980845135a754dbf09d72b4830f54e5c6f4a8e474ae8f60e82afb7867e9cc24574a3dde5a7864efa7115681d2eb6e7ac9b2c22e3729cd03713090e7062"}}, &(0x7f0000000240)=0x0) timer_delete(r2) 07:27:18 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r0) 07:27:18 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r0) 07:27:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:18 executing program 0: capset(&(0x7f0000000180)={0x19980330}, &(0x7f0000032fe8)) bpf$PROG_LOAD(0x5, &(0x7f00000089c0)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000a5000100000000e01ea00000000000009500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x9d84, 0x3e9, &(0x7f0000000140)=""/195, 0x0, 0x0, [0x1b515f]}, 0x48) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000580)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000080)=""/51, 0x33}], 0x4, &(0x7f0000000500)=""/128, 0x80}, 0x2040) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000005c0), 0x28c) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000740)) r1 = msgget(0x1, 0x20) getpeername$llc(r0, &(0x7f00000006c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000700)=0x10) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000600)=""/134) 07:27:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xffffffe9, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b0a9e8400fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)={0x0, 0x2, [0x0, 0xad4]}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)) 07:27:18 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x6) fdatasync(r0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r6 = accept(r4, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="3cf5048e7163ea27da961b58abc6fdd726a3e3c95cad1de31c363355c8e1713e51fe7f59651cc3ac45abe4d057f5137c675ed1994a77351dee893cd34df281c9a23f002a9478039ed67f7b156245f27916f826813ec250d85c0192c16f21dd81efe95b0b969ce99dbf198ee2555098027269016440658583e3662d46fe23e2f3d45c0bc9e61731c225d30af8b12b7608313d88f7a0bdcc6fbdb3c103d6c7ecb56197a96d2c5bdeb8105bab16f495a2016c4eac846d256f43ecfe3604edd6e6c3166a78125ac00878f6e74eebf28e9f31e2eea3ae45c16456ddee6203708bad5a11d90a06dad500942c3c7de6c7e2e6ea754ffce452d745214d4e010f4be714a9ece73e14d28ed7cf52fcebaf48deff2638488d1eddcbdc9aea0d5750bc0b88a8ee86f08747e8817fd62d0c5dccd4006c529949725bbfcca2686601f5d220eb6312ee9b5a4550ad2b7e635cc741cf3981965a252825924fd94f0f0f187653512e74217df2d079465950ab782c00861fd93814a32b59cb33213e2e12f790a331a8cc402208b9da2079efa3e880f69c2836b713245e3c4d0aa7c241469ae701e88c3db83f24a7fe1af322f8821fb3fec1497fb9c6f1ea1c0732d8d9f7c6e1e671a7f4eecc4391bb1d4cbaed353d3e56d6ffd2f21b8bc5368bb85ec382ce13f92aa9f1b242a19db0ce84c822a246a949156187fe0176c3d58f8e012aa17fa0988cbcd85e8d928a3f491e81e2f943f2dad5c1f5c9a7890bf05d78a2be476c52aa75569f28c1144a7bac3465cba51b81b034fca3a9034c64ded7615e8a3a0712c45e0eb0f936ea6bbe35deae994ca8a5e48d74520900e295e55af7c5f893249a230a76779ae8978b10ba296f6a68bbdf732b77d258ebda9fed5d628f8401400e72c471d8b76e08471c7778cc22ff69eca42099069eda6d80eff70e032c7735727866ca75b83db9d740ece0263d56a9dfda7bff84643a7de6f7d677f5b5baf1409080b132dac45d8dd4b9c64b66bc4d177ae8e311f6520ca8173e01b3e8343461214aaa5cddbc01a3f6f9b18c68bb33f98a025ce67aaae25e69208b378925780d96fe76f8306b2dd1a28ea0eaad4095144399f80a85e2fbb8f982361cb7e7e61ad89deb2c6ddc014a14685360f1aa39fbf2dc574543d606d6afd18922c8cf16a62e0a45d6adafde216473039edc7001e9f8aed45eaddd89c2b1df832dafa9988fba8e795c911ed2706db4adf3b1a7db02994a43be04b9c66268aba436c6ba24c6671b19fec3e032c2216d33909ce1cd140fde160a222acac813bfdfdecd18d289d8073287a2f920bd2e1a75725ff4b805acf9fc249be0634c26193bf03555ccfc3008ef2001570bf72d5127236de2bb776069b9c5d6051e28c0f5f7f55d5e4cf04822b52434ff0ce7c9912ea49b692bd1895701be813cf94fad9dbbf3d303a234e2164014259e51e1795d4383baa8d977cfe07e2fbf215549d9d4667ae273227b85ea8de7d7c874b6d5463d2451f4253df0d86fde47f8a138d6cdc616e2bfbd32269bcd0a87e473b7a4349aacc40e795fbc909143d72472b4b1f3742e3f5b119a75b48632eb3f67c90bcf606526f39b72647c8343031b29c2cde6576c3a1dfa8677efea6c7f1904410f9c1170dce23bd4fb64bec2010f44109a83cbbdcaa3f391731e8e0f410c9588fef26e792b76beb6174d5a3b87848f051825e06d06838edc102271970d326c74065089a658f0354027a8da470bdcf7f9548fe1ab24adf12d3bd1427134de4c3aa039c11af4c74bf111e12953ffa17ffbded8945b1cd1dba33753cdb9fc3a14393b8ec4f8497ce27cafe19ba44fa38549b8f052f83dace969f7801358f41caf2a02a01fcd362f8a9c6469fb843ae4718cf5d7f92558865546879b344d9a489c983187592fd116b94835828247b46a43ddd8306c23d23c1b0f5e3388c1af04f5144252dd216fd56f54336ebf0c15e6f7614c42eb184c0d0e741050a8f01f05663e2b214649167419ec62cf342d4286f0b31398bfd93ff2896ade403a6b72e031a9839d21a82ecc8cec3f477c3cedcacf466881201d22c305794491a9ec595af5fcbac6189114e285282753e17651d395d51fab8750607db79c5b41a69d273d9f186688207e8cf1c2000b52db649bfea760fa80178f33c65123f84369cb4c1f5ead16544af44fd5d7889d347868995f873b53777ff94e167813859f019cfb5a9bb29bdf14bfdbf82349d2b146e95e1245701ffa957d2b8320d3bf198e2f8346cb3a1d237c958f8357df9e8859b68a94974a36ed7b2c32744b9b5e7597a7e5064bbd3a1bb326ccabb4ebefdd6348e3054dcfe9a8ccbf959151f43fc15697d4899dcda889663d0d724afe4c802ff0e9c13d3c0bf2372909d4a640882fd9bc12b63d94e7ad4583e8b95245fa7084118fe594e39cf8cb61033f6602a1c679687b5594db16c9e74611be366af5c8d4ad07831dc3e2123253af0f68fd1711bf608f5515a471301b64329c51b2011a03a8ad6c4e399b3245eb218083351e9a621d713187a65368f94205f17d6870527ff14fdc2577d2f6c15077deb2e7ab0ecc869a05d48d8cdc1dd7ea8456a0bb60e70d78f253ef417d8a386dcc255f1b14227ac7ab4de5a9e0158945767431b5e86c8dd00342aa12b27f98676a278f326b4256f19ecdd3d8fae6c4a815f1fb7df919e74b6a5003ae8d14f1d2b614ac6b02355765922f506f097602ee202eb55e3b45907b461692a4a1afbec463b9d19a81cdc93885596ec465220840c21cdbc30a778e26569416c454d117c003c8b0788332341685fad7357a1a3a3672949a7161d28f4f73b7e01d01e133541f3246bb9eb8f4b26dc149e4295b49c7c8fbcacd4c3e02e77f08283d310a5b56bc0630f33b857589de15d2d6bdda73b7ae6dc37d9bd64fe84178f02873861b060b6ac2f91a3ed84c44d8e03deb87d632fd06d93b8c841d5a2fdaf338142d7e54a120b2e162fe0e4b170bb97762fb172a30cc31b1f679be796f0b4865c0704850969a6c741eb3b9ad2fb059fe5da6cf6d3ef3c4c4aad4dbb578da214a57f334db2128769a7f961542e61cece3c24cefe9f6ffe75db1ec936aaa034e4a0486a1850ff4edceed6ac9d6468033b620373e421b42575af337585ed0d08f5b3f91557c8b5e7b515bb15c957213ce31787a9ec274eeb88ddbcc15396355e37f0239b0cc8867d35bc7f8a719ec415f69833feea59e1d7ec6ea8ea2b5efaacd3b1b53651e6e0983faa60950b92514f0d582b4f214a80101a0784d155b1dc2b2cba21fddb31eb10e8af70352a47c1c8eb90fba97d93d75608acdc8465c6907bbf36f3f36e59bfb1eeafbed14726fd34c2354785f1aa65422cce50bac7a9a51a7ecbd4d1d97ae65ebcc1414eaf000165fb15e037539cdfe0bbff3100395d2a6834fbfae1dad1f269ed290316ee18a0666fe682fdeb832c2e4d7818c0f0896d55e696dfababb0f561afc802cb43fb88fac2f5f8ecc18fa40a9d53b7a3bcc19f193e535b89ea96aab74c39c4928f72ba3a88941043a6a6e87db746b42fcc7e575c25c45694d54d6205abbc33331a869b4c4ecf50528d0fa3dc50ea15873ed2f7ee500194203525f70b70094b4c7280e5e6e325d2493273b4acc8d71352fa64d3bd944a79975f5dd597a85d2ad639b55f5f72ce6dd554f48b9236f5d8652c65b5c3a909b420eb60b8330fe43c17ab31eb2ebe54fb906ffe166c86b29fed4947a97117d2eafce1b20d6485d525b948a906c2864c63005cc0571e386a263fc2b68f03ed2377a0a81a48ff726fecc5c476eb3e36fd796e11bb4f8612b57ad8b9ebc7d3e7a2be68380d9e4a447d590d82713504dc0658525ea88400811753fa6234a01f46d9fa7df62b266b5c889f5286b7c72eff18b0425dd9c2e6f1f9778ffa1d14ceeff7d76e05c93e5215a0b8084e2e4d25984a835534453bd7e0ca7579edbabb8fec973978b37c4e70cb2796a2fba6e6235063857851f94b7cbab38ec1297f89dbaaec4b3a11f86b69b273fcecaa1ba1c6c52bf455be9e495e75651e8e6c7f03874f96596a9deb61c14eb68049f3f07bac5becf8ae8add48a4a1b8ce5776a5debee0738b4d7750865606e747ab7f9a86b6d933220c4771d2277c1ab68b6b24d4238ca83a3e4247d13fcda8af5087848f7aa4d8ccf5347f7041ac5ee4429c64f2aa653ae0e7b7c16d2e35d186b20fa7109a193f38a002ad5fbb18a52810b7278ba3c0a0d831dd350730c1c255f2fa639aab2537115e1ac60be26a9d88c8bfa1100c2ae9fa9b245033b010050065a89a7384a572f5b2f121e77bca3e71a881ab8433bc77f63f0629a6eb9ff395b96576a57e75e583fb085786ebd482db53648ab02486abfd600efca097a68f561e43d3ba027fcb2fe1d0fa6612b066a3c95b0177c78b2bb0c99310a3f51ab8a8290507bb5256afe8e67a31b7c2bb643dbf2cfbeedbbde00d3dc481d8c8bdfcf540e85c9cc1d4c2bccdb13bfd5f3d2a4a320043582af152ca716a1d097a7496e0e040ba7446e1ea8d9f22cdda1835960ddbc64d4828745909b865fcb28025d8769f847783b10f50db50e5de2de3e0c5bedff9b928387cf43c1a621001d5903e5e60c9bdfa01f023b134f224533faaf7f218b9797787ceacd7b96853c58e4247634d4faadf56f9a4480c4673d656758aedca41707e6b3753db3db09f7c3be9233bf429c6a0603a14ca44d78a3a3802e3edf7fe1595fc5870637a262eb2e36473e5520b3ba9af4d46fe5b49d1e3a2812e1f502b58a2aa0a472925ab1f4c8bc3687ef1f7a82700021e70f50edef894bf902285e3c087a7f980289c62c8b282fa52072966131f3f3f33686f270ffe938c3cce1eb0623837ae1ffcceb62c95bfc33a06e45db21a2d46e5a8891fa37b8edf93255d6f4441c3ed4b551b7a949f28cec5e001cc31f9a4057cf79485bea15438f42fed35633674249a9e52b17c2434db28612e7a8060016baef0739c34478df046c9c9959de176ba3a52037cc36410d84a5889ad48e42c509ba21c38d8a561ed2689ffa232554491ea9c0fddb3920c37fc4ced61621a879a6003eddb104a84d11143e31ba57a611112469789eecb0bfa58e6d86b98b0cb2369de8e4032112d70ed3c95032b37d49947d222ab8d91f3a79183c7ea9edd581cf00a2a57928b06ba3511009d8bdbe378084d871eb5ca88885559980c994f0d8d8d8b20f3f9a49705d5a56ba42647a5db3ca3775bc7979512d24b01f27a74a7f2de01ddc92c4f562676f361f5c579954907bf4b99c3a8963777cc2a551aa69873d631cf5d32674a8cfc751cfdab1da79412aacc166e776f512e350849c2250b36e1585f8eaecb515f156a7171c2ab615436105a9095becc24e1370a7409e4c35137c984c146dba9a6e6261ec6e56168756a440818eb58db3a53b60e7735f354956d4b71ee0b9782d1e6dc36a6999a877bc67a75fdecf5eab32f721da105a76a94c24738bbdd2e6603fc71a051e3108f680b2346e215b05364e43a8c4fe2723178e154289681e4078e955bd53858fa04bbe82dcab9c3ce7439f6293ad74dec15f8425d251158edcd7c664d47ad9285978df107a15fb6dd090aeb37a0975dd584ecd987ed494f7a28c32222765aa5147eef2c03bced05a802ce9568fb0a1cd58ba3c9fcce1a925868265a0daffaecb2a0289c7294881fc5519c8425eb201cda5ceafc81c1cc04f2039c1f3cf57a7209d32b23a01e7c146e9e8b6609b8238beff2470cbf300e1c249e5f4a3e965ec5cdd21ea6434429606faa6f96e7e", 0x1000}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) r7 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) r8 = fcntl$getown(r1, 0x9) getgid() getpgid(r8) lstat(0x0, &(0x7f0000002240)) fcntl$getownex(r2, 0x10, &(0x7f0000000840)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000022c0)=0xc) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000002300)) fstat(r5, &(0x7f0000002340)) fcntl$getown(r2, 0x9) getgroups(0x3, &(0x7f00000023c0)=[0xee00, 0xee00, 0xffffffffffffffff]) getpgrp(0xffffffffffffffff) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)) fcntl$getownex(r2, 0x10, &(0x7f00000024c0)) getegid() ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000002500)) sendmmsg(r5, &(0x7f00000054c0)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x2, 0x1, {0xa, 0x4e20, 0xff, @ipv4={[], [], @broadcast}, 0x6}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000380)="0b3cec038cb35f4a56c09ea9ddb2ba129e93bc00f214575ea6a8009ab5e1c2f146625a9a2819d956ecd7fdd26c7f442118b9991d2e98d4f9c494bdcb8e4f6e882f4109757f17ccf613c3c270717077357650b65641fda4fe01493cfe006c308531029c1f5c25f73ba07575bd9aa45f5a1abad9ee08db455e751c4ce0d94e14d27367", 0x82}], 0x1, 0x0, 0x0, 0x10}, 0x101}, {{&(0x7f0000004f00)=@ax25, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x3}], 0x2, 0x8800) sendfile(r6, r3, &(0x7f0000000180), 0x10000014e) 07:27:18 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80080, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x10) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)) 07:27:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:19 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x141000, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000280)=0x6, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 07:27:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7fff, 0x208000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000140)={{0x2, 0xbef}, {0x8, 0x200}, 0x8, 0x4}) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r2, r3}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'streebog256-generic\x00'}}) syz_open_dev$usb(0x0, 0xb29, 0x0) [ 270.842379] audit: type=1400 audit(1549178839.097:50): avc: denied { name_bind } for pid=8747 comm="syz-executor1" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 07:27:19 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) chdir(&(0x7f00000000c0)='./file0\x00') write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000180)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) [ 270.986212] audit: type=1400 audit(1549178839.097:51): avc: denied { node_bind } for pid=8747 comm="syz-executor1" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 271.009081] BUG: please report to dccp@vger.kernel.org => prev = 0, last = 0 at net/dccp/ccids/lib/packet_history.c:422/tfrc_rx_hist_sample_rtt() [ 271.022433] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.0.0-rc4+ #58 [ 271.029180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.038523] Call Trace: [ 271.041109] dump_stack+0x172/0x1f0 [ 271.044742] tfrc_rx_hist_sample_rtt.cold+0x56/0x61 [ 271.049785] ccid3_hc_rx_packet_recv+0x5c6/0xeb0 [ 271.054541] ? dccp_parse_options+0x40a/0x12b0 [ 271.059129] ? ccid3_hc_tx_send_packet+0x880/0x880 [ 271.064062] dccp_deliver_input_to_ccids+0xee/0x280 [ 271.069081] dccp_rcv_established+0x83/0xb0 [ 271.073405] dccp_v4_do_rcv+0x139/0x190 [ 271.077384] __sk_receive_skb+0x341/0xbf0 [ 271.081531] ? sk_free+0x50/0x50 [ 271.084903] dccp_v4_rcv+0xeaa/0x1bf1 [ 271.088719] ip_protocol_deliver_rcu+0x60/0x8e0 [ 271.093385] ? kasan_check_read+0x11/0x20 [ 271.097532] ? rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 271.102724] ip_local_deliver_finish+0x23b/0x390 [ 271.107483] ip_local_deliver+0x1e9/0x520 [ 271.111629] ? ip_local_deliver_finish+0x390/0x390 [ 271.116558] ? ip_rcv+0x275/0x3f0 [ 271.120010] ? ip_protocol_deliver_rcu+0x8e0/0x8e0 [ 271.124936] ? ip_rcv_finish_core.isra.0+0x82c/0x1b80 [ 271.130131] ip_rcv_finish+0x1f4/0x2f0 [ 271.134018] ip_rcv+0xe8/0x3f0 [ 271.137236] ? ip_local_deliver+0x520/0x520 [ 271.141564] ? ip_rcv_finish_core.isra.0+0x1b80/0x1b80 [ 271.146839] ? process_backlog+0x44e/0x750 [ 271.151070] ? find_held_lock+0x35/0x130 [ 271.155143] ? ip_local_deliver+0x520/0x520 [ 271.159477] __netif_receive_skb_one_core+0x115/0x1a0 [ 271.164661] ? __netif_receive_skb_core+0x3010/0x3010 [ 271.169848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.175384] ? check_preemption_disabled+0x48/0x290 [ 271.180408] ? lock_acquire+0x16f/0x3f0 [ 271.184382] __netif_receive_skb+0x2c/0x1c0 [ 271.188701] process_backlog+0x206/0x750 [ 271.192756] ? net_rx_action+0x27b/0x1070 [ 271.196903] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 271.201487] net_rx_action+0x4fa/0x1070 [ 271.205463] ? napi_complete_done+0x4b0/0x4b0 [ 271.209991] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 271.215443] __do_softirq+0x266/0x95a [ 271.219240] ? pci_mmcfg_check_reserved+0x170/0x170 [ 271.224306] ? takeover_tasklets+0x7b0/0x7b0 [ 271.228717] run_ksoftirqd+0x8e/0x110 [ 271.232517] smpboot_thread_fn+0x6ab/0xa10 07:27:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xffffffe9, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b0a9e8400fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)={0x0, 0x2, [0x0, 0xad4]}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)) 07:27:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) [ 271.236751] ? sort_range+0x30/0x30 [ 271.240396] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 271.245933] ? __kthread_parkme+0xfb/0x1b0 [ 271.250170] kthread+0x357/0x430 [ 271.253535] ? sort_range+0x30/0x30 [ 271.257157] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 271.262694] ret_from_fork+0x3a/0x50 [ 271.337278] audit: type=1400 audit(1549178839.097:52): avc: denied { name_connect } for pid=8747 comm="syz-executor1" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 07:27:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xffffffe9, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b0a9e8400fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)={0x0, 0x2, [0x0, 0xad4]}) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)) 07:27:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, 'A::2:e:'}}, {@nfs_export_on='nfs_export=on'}]}) [ 271.684225] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 271.781049] overlayfs: failed to resolve 'A': -2 [ 271.805647] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 271.835811] overlayfs: failed to resolve 'A': -2 [ 271.853130] dccp_close: ABORT with 260 bytes unread 07:27:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000000)="999aa1d85eb00f0ff274de5b48142a5f23ca96e2499cfddfcd3b92cb8b5e5ab0fa7aef6f150153777f641cc5c410959577729b88b5cefdfe1eeac4cdee3ea9a90113a5119e90f03c1097e8dfb782517b9d3845", 0x53, 0x42, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@routing={0x0, 0x4, 0x1, 0x1, 0x0, [@empty, @remote]}, 0x28) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000080)=0xffffffffffffff68) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) 07:27:20 executing program 4: set_thread_area(&(0x7f0000000000)={0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de56b5000000000800000000080008000100000008000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00b6fc663019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) set_thread_area(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x9}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lookup_dcookie(0x2000000101c, &(0x7f0000000140), 0x64dffd948b98d28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:27:20 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x141000, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000280)=0x6, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 07:27:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000003c0)={0x142, @tick=0x40, 0x1, {0x3ff, 0x7e788c94}, 0x6, 0x3, 0x5}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000200)={0x2000000021, @time}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)) r1 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x1, 0x2) bind$unix(r1, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0xfffffffffffffe42) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = syz_open_dev$dmmidi(0x0, 0x0, 0x9000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000080)={0x9, 0x6, 0x0, 0x9, 'syz0\x00', 0x8}) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r4, 0x0, &(0x7f0000000180)='vboxnet0\x00') ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x0, @remote}}) connect$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x1}}, 0x10) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', 0x0, 0xa99, 0x0, 0x0, 0x4000000000, 0x0) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x3f91ec95a41273e8) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x3f}, 0x28, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x2000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x0, @time}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:27:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7fff, 0x208000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000140)={{0x2, 0xbef}, {0x8, 0x200}, 0x8, 0x4}) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r2, r3}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'streebog256-generic\x00'}}) syz_open_dev$usb(0x0, 0xb29, 0x0) 07:27:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c12") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c12") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB]) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000280)) mq_open(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)="8f7debf6fb197bbf9110cb973711c91b3502eef7adf479e25c92110ae65ab41b07607323b2eef024f5da3934beed3187d6c66c0a004190b165984d63e84d3c42943f39aa3a7876d48820e4f210debf1621ff6bedecdb74fe2db6c032c8d7fc6ea0733ea7276254a207241e82d8ee20ba0ac0e418d552280e5f2b4f34da158b306644d8dee6d3a76f04521bb746f6a1d4efaeaa0c0ef98ba4f921530f336bbf43928ea1b296c4f8a473290d2ecc47d8e9acc40bc32a1e22b3b14253bd0644f5f08caa7f6056b91052d994973834ecc9229a13bfb74a08a5c46894d9ec034fe4a76346cbf2810e5dfd4ea4bc16566c51920b", 0xf1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 07:27:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c12") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) [ 272.426756] audit: type=1400 audit(1549178840.677:53): avc: denied { map } for pid=8810 comm="syz-executor1" path="/dev/bus/usb/004/001" dev="devtmpfs" ino=16967 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file permissive=1 07:27:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port0\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000003c0)={0x142, @tick=0x40, 0x1, {0x3ff, 0x7e788c94}, 0x6, 0x3, 0x5}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000200)={0x2000000021, @time}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)) r1 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x1, 0x2) bind$unix(r1, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0xfffffffffffffe42) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r3 = syz_open_dev$dmmidi(0x0, 0x0, 0x9000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000080)={0x9, 0x6, 0x0, 0x9, 'syz0\x00', 0x8}) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r4, 0x0, &(0x7f0000000180)='vboxnet0\x00') ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x0, @remote}}) connect$tipc(r3, &(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x1}}, 0x10) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', 0x0, 0xa99, 0x0, 0x0, 0x4000000000, 0x0) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x3f91ec95a41273e8) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x3f}, 0x28, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x2000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x0, @time}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:27:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:21 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="52c830170f87b19103d6713edab901"], 0x1) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0x4) pselect6(0x40, &(0x7f0000000140)={0x3}, 0x0, &(0x7f0000000380)={0x7f}, 0x0, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 07:27:21 executing program 2: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000500)={0x6, {{0x2, 0x4e21, @multicast2}}}, 0x77) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00004aaffc)=0x2, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x3afd, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@', 0x20, 0x3, 0x2e0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]}, 0x34d) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000200)) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_NAME(0xf, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x200000, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x50, &(0x7f0000000380)}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$inet(0x10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 07:27:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) [ 273.027248] kernel msg: ebtables bug: please report to author: Wrong len argument [ 273.046658] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 273.145065] kernel msg: ebtables bug: please report to author: Wrong len argument 07:27:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB]) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000280)) mq_open(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)="8f7debf6fb197bbf9110cb973711c91b3502eef7adf479e25c92110ae65ab41b07607323b2eef024f5da3934beed3187d6c66c0a004190b165984d63e84d3c42943f39aa3a7876d48820e4f210debf1621ff6bedecdb74fe2db6c032c8d7fc6ea0733ea7276254a207241e82d8ee20ba0ac0e418d552280e5f2b4f34da158b306644d8dee6d3a76f04521bb746f6a1d4efaeaa0c0ef98ba4f921530f336bbf43928ea1b296c4f8a473290d2ecc47d8e9acc40bc32a1e22b3b14253bd0644f5f08caa7f6056b91052d994973834ecc9229a13bfb74a08a5c46894d9ec034fe4a76346cbf2810e5dfd4ea4bc16566c51920b", 0xf1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 07:27:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fchmod(r0, 0x28d2dcf98c9af82d) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000080)={0x3, 0x0, [{0xd, 0x1, 0x8, 0x9, 0x6}, {0xa, 0x100000001, 0x75b, 0x5, 0xef}, {0xa, 0x8, 0xffffffff, 0x8000, 0x6}]}) 07:27:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000280)) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/125) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)={0x5, 0x0, [{0x3000, 0xce, &(0x7f00000002c0)=""/206}, {0x1000, 0x0, &(0x7f00000000c0)}, {0x6000, 0xca, &(0x7f00000003c0)=""/202}, {0xd000, 0xb8, &(0x7f00000004c0)=""/184}, {0x3000, 0xb, &(0x7f0000000100)=""/11}]}) 07:27:21 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RREADDIR(r2, &(0x7f0000000100)={0x49, 0x29, 0x1, {0x5, [{{0x80, 0x3, 0x4}, 0x8, 0xffffffffffffffe1, 0x7, './file0'}, {{0x0, 0x3}, 0x7, 0x9fca, 0x7, './file0'}]}}, 0x49) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000180)={0x4, 0xffff, 0x9f7, {0x77359400}, 0x8, 0x161c}) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0xfffffffffbfffa14, 0x3a8) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xffffffffffffff72) 07:27:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @local}], 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101002, 0x0) write$9p(r1, &(0x7f0000000080)="274904c0a4bf4005544c1216ecc09a2110c0021ffe7118daca318b8005bb24af25c22762c7ffca31dc16e529ac2a62ecc776aa320643f2a8", 0x38) 07:27:21 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r2, &(0x7f0000000000)={{0x3, @default}, [@netrom, @bcast, @remote, @netrom, @remote, @default, @bcast, @rose]}, 0x48) write(r1, &(0x7f0000000340), 0x10000014c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000009000000", @ANYRES32=r0, @ANYBLOB="00000000001000010000000000f0ffffffffffff", @ANYRES32=r0, @ANYBLOB="0000000000f0ffffffffffff0000000000000000", @ANYRES32=r3, @ANYBLOB="ffffffff32961819b9251c44eec9924e186f60bf8a123a8d4e80dfc632d0d4d9fda30437d886a25676e806ef698bc23500321364fde2949357eb26273f55a3a312b402c45270e49a46446401de045c5cacee593d6927ec45805cd10192cb2489a8db8858c52d96b5fbdf48740ef9b858c63eea2f85fc5a4a713c0a24d0b68a4c7241949ff12540db8dfb7ccc28214dff5becaac995d18f7277b7e88beba8c8733a92012db5e8fa6a17291da1", @ANYRES32=r3, @ANYBLOB="00000000000000f0ffffffff0000000100000000fdce3fd4f87d734b29f58de9e28bf432ad2c1c2e23fa3974220b02e209c5c5aca721b400260d4e4b4fa924185beabad2f7f1d6f870f6926ee5bb3fafa9fe", @ANYRES32=r1, @ANYBLOB="00000000000001000000000081dcb200f0ffffffffffff903794587c7d19cfa4e5d79d4f5d5b46abcedd0cecc3b9094e07c369dbd3481f56053842cb", @ANYRES32=r0, @ANYBLOB="0000000000f0ffff0000000000f0ffff00000000", @ANYRES32=r1, @ANYBLOB="00000000008000000000000000f0ffffffffffff", @ANYRES32=r0, @ANYBLOB="0000000000100000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000200000010000000000000000000100"]) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 07:27:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname$inet6(r0, &(0x7f0000000080), &(0x7f0000000200)=0x1c) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x4, 0x0) 07:27:21 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x10, 0x4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x9, 0x9, 0x9}, 0x10) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x6ed}, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffee5, 0x79, 0x3f0003e8}, 0xffffffffffffffc4) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) 07:27:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a0") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) [ 273.625133] ax25_connect(): syz-executor1 uses autobind, please contact jreuter@yaina.de 07:27:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a0") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:22 executing program 5: socketpair$unix(0x1, 0x4000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x82400, 0xed) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@remote, 0x0}, &(0x7f00000000c0)=0x14) syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x3, 0x220080) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@gettfilter={0x54, 0x2e, 0x0, 0x70bd29, 0x25dfdbff, {0x0, r4, {0xffe5, 0xffff}, {0x8, 0xd}, {0x7, 0x1}}, [{0x8, 0xb, 0x79f}, {0x8, 0xb, 0x34d}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8ad9}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000011}, 0x4) close(r2) io_setup(0x40, &(0x7f0000000140)=0x0) io_getevents(r5, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r5, 0x200000000000007e, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000140), 0x5ee}]) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000080a}, 0xc, &(0x7f00000003c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="f12d1c13ff030000000000009d07f915c88dfe301aaed25fe33e135251e3e7e509c9db212d5d09e11bf063dba5946c9d6b3559e8c4ce9aba82499ab890a644cb59909ad34843815fdd607edadf1497bd264e285b84613789957095a876a97f75370f7e387bbdde888d22c6db826066d49aad0629da984cbd358fcd", @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf25090000002000020014005a20a010b1b10100e000000100000000000000000000000008000400030000000800fe7e3a4a37b038a4814200900000000000001e5cc9e7514567590f32011180c1a2d23952649f63b72ff23bb519014caa6708bf0c00aab3b16e22688bdac526745c9e71"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000640)=""/4096) 07:27:22 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x10, 0x4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x9, 0x9, 0x9}, 0x10) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x6ed}, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffee5, 0x79, 0x3f0003e8}, 0xffffffffffffffc4) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) 07:27:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB]) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000280)) mq_open(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)="8f7debf6fb197bbf9110cb973711c91b3502eef7adf479e25c92110ae65ab41b07607323b2eef024f5da3934beed3187d6c66c0a004190b165984d63e84d3c42943f39aa3a7876d48820e4f210debf1621ff6bedecdb74fe2db6c032c8d7fc6ea0733ea7276254a207241e82d8ee20ba0ac0e418d552280e5f2b4f34da158b306644d8dee6d3a76f04521bb746f6a1d4efaeaa0c0ef98ba4f921530f336bbf43928ea1b296c4f8a473290d2ecc47d8e9acc40bc32a1e22b3b14253bd0644f5f08caa7f6056b91052d994973834ecc9229a13bfb74a08a5c46894d9ec034fe4a76346cbf2810e5dfd4ea4bc16566c51920b", 0xf1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 07:27:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a0") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:22 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x10, 0x4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x9, 0x9, 0x9}, 0x10) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x6ed}, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffee5, 0x79, 0x3f0003e8}, 0xffffffffffffffc4) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) 07:27:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002a40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400200, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r3, 0x804, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x88, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4050}, 0x20000010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$P9_RVERSION(r4, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000280)={0x0, @rand_addr, @local}, &(0x7f00000002c0)=0xc) sendto(r0, &(0x7f00000001c0)="641decd6da5e9ea0357860029a5a619d2910e35fba71e1a67f1daa3ef0388cc136af13289e75983b46a1f741c9e443f26a3c15fab84d38876b47832fb8ab59c0ab1b2d0ef9c863997a1e54cf37d981", 0x4f, 0x4000, &(0x7f0000000300)=@can={0x1d, r5}, 0x80) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x1) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x371) ioctl$UI_BEGIN_FF_UPLOAD(r6, 0xc06855c8, &(0x7f0000000380)={0x3, 0x9, {0x52, 0x3, 0xfffffffffffffe01, {0x6, 0x2}, {0x3, 0x1b2}, @ramp={0x3, 0xceca, {0x401, 0x6, 0x0, 0x70000000}}}, {0x54, 0x9, 0x6, {0x2, 0x37}, {0x1f, 0x6}, @ramp={0x7, 0x2, {0x3, 0x4d, 0x6, 0xc569}}}}) 07:27:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1200}, 0x28) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) getpid() [ 274.553304] ax25_connect(): syz-executor1 uses autobind, please contact jreuter@yaina.de 07:27:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0xc0c3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4(r2, 0x0, 0x0, 0x40100080001) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x3f, 0xfffffffffffff000, 0x3009, 0x9, 0xf, 0x3, 0x0, 0x7}}) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xffffffff80000000, 0x3, 0x0, 0xa3, 0x0, 0x7bb, 0x2, 0x4, 0x80000001, 0x0, 0x5, 0x8, 0x7, 0xf3, 0x3, 0x5, 0x81, 0x5, 0x0, 0x6, 0xa16, 0x246, 0x4, 0xffffffff, 0x1, 0x5, 0x20, 0x8000, 0x8001, 0x8000, 0x80, 0x5814, 0xffffffffffffc800, 0x1, 0x7, 0x1ff, 0x0, 0x265b71a5, 0x0, @perf_bp={0x0, 0xd}, 0x4000, 0x4, 0xfffffffffffffff8, 0xb, 0x7, 0x7a, 0x6}, 0x0, 0xa, r1, 0x9) close(r3) 07:27:23 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x91c05995b585aab5, 0x0) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f00000000c0)=""/161, 0xa1, &(0x7f0000000180)=""/6, 0x2, 0x2}}, 0x68) r1 = socket$inet(0x2, 0x3, 0x2) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x88100, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) setsockopt$inet_int(r1, 0x0, 0xd1, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101000, 0x0) 07:27:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400, 0x0) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x1c) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 07:27:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:23 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="726573697a653d617574572c6e6f7461696c2c7461696c636b2d616c6c6f6361746f723d6e908c8550157fbcb4"]) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x11b000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x1, [0x9]}}]}}}, @IFLA_BROADCAST={0xc, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x5c}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:smartcard_device_t:s0\x00', 0x28, 0x3) write$selinux_access(r0, &(0x7f0000000180)={'system_u:object_r:dhcpc_var_run_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x521f}, 0x68) 07:27:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) [ 274.822504] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value autW for -oresize [ 274.822504] [ 274.844880] QAT: Invalid ioctl 07:27:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0xfffffffffffffe6e) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 274.888516] QAT: Invalid ioctl [ 274.898656] audit: type=1400 audit(1549178843.147:54): avc: denied { relabelto } for pid=8949 comm="syz-executor2" name="file0" dev="sda1" ino=16635 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:smartcard_device_t:s0 tclass=dir permissive=1 [ 275.009238] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value autW for -oresize [ 275.009238] 07:27:23 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB]) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000280)) mq_open(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000340)="8f7debf6fb197bbf9110cb973711c91b3502eef7adf479e25c92110ae65ab41b07607323b2eef024f5da3934beed3187d6c66c0a004190b165984d63e84d3c42943f39aa3a7876d48820e4f210debf1621ff6bedecdb74fe2db6c032c8d7fc6ea0733ea7276254a207241e82d8ee20ba0ac0e418d552280e5f2b4f34da158b306644d8dee6d3a76f04521bb746f6a1d4efaeaa0c0ef98ba4f921530f336bbf43928ea1b296c4f8a473290d2ecc47d8e9acc40bc32a1e22b3b14253bd0644f5f08caa7f6056b91052d994973834ecc9229a13bfb74a08a5c46894d9ec034fe4a76346cbf2810e5dfd4ea4bc16566c51920b", 0xf1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 07:27:23 executing program 5: r0 = gettid() syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x2000, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040), 0x4) kcmp(r0, r0, 0x0, r3, r2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001940)={0x0, 0x1d129e75}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0xfed3, 0xfa00, {0x3, &(0x7f0000000000), 0x0, 0x82}}, 0x20) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000200)={r4}, 0x8) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000000c0), 0x3cc) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x1f1) 07:27:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:23 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f\x00\x00\x00\x00\x00', 0x2761, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x50, &(0x7f0000000340)}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={r2, r2}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000240)) close(r4) 07:27:23 executing program 1: r0 = socket$packet(0x11, 0x400000000000002, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff010}, {0x80000006}]}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000018008114e00f80ecdb4cb9c00a480e181e0cd310e8bd6efb120009000e00da1b1400000006000500fe80", 0x2e}], 0x1}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000280)={{0x2, 0x5, 0x1f, 0x6, '\x00', 0x9}, 0x0, 0x20000400, 0xfffffffffffffff9, r3, 0x9, 0x6, 'syz1\x00', &(0x7f00000001c0)=[',,%md5sum\xf3\x00', 'vmnet1%)\x00', '/dev/vbi#\x00', 'proc\x00', '/dev/vbi#\x00', 'keyringcpuset\x00', '@\'\x00', '$posix_acl_access@\x00', '/dev/vbi#\x00'], 0x5b, [], [0x10000, 0x80, 0xfffffffffffffffd, 0xfffffffffffffff4]}) epoll_wait(r2, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1f) 07:27:23 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="726573697a653d617574572c6e6f7461696c2c7461696c636b2d616c6c6f6361746f723d6e908c8550157fbcb4"]) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x11b000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x1, [0x9]}}]}}}, @IFLA_BROADCAST={0xc, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x5c}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:smartcard_device_t:s0\x00', 0x28, 0x3) write$selinux_access(r0, &(0x7f0000000180)={'system_u:object_r:dhcpc_var_run_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x521f}, 0x68) 07:27:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000040)) [ 275.296545] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value autW for -oresize [ 275.296545] 07:27:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:23 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x8, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2080, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@remote, 0x22}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000400)={0x2f, 0x4, 0x0, {0x2, 0x200, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000140)={0x3}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000540)={@multicast2, @remote}, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8, 0x1b73, 0x4, 0x8000, 0x7}, 0x3, 0x200, 0x81}) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000580)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x10000000143042, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f00000002c0), 0x4) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@remote, 0x1f, r6}) personality(0x100000) ftruncate(r5, 0x7fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000500)={0x9, "5875daafd579e61be330641ee4ceee908d144f31ca02bf792a597566455f9420", 0x3, 0x1}) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) close(r1) write$nbd(r5, &(0x7f0000000440)={0x67446698, 0x1, 0x0, 0x3, 0x2, "6b571d78"}, 0x14) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1011, r0, 0x26) 07:27:23 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300090e000000000000f1b30e2d0005000600000000000a00000000000e2c2cf000040000000000d1bfbe0d00000000000000000000000200010000000000000000020000000005000500000000000a00000000000000ff170000000000ca38384d026194e2170000000000000000"], 0x70}}, 0x0) r3 = accept(r2, &(0x7f0000000100)=@ax25={{0x3, @null}, [@default, @remote, @null, @rose, @rose, @bcast, @netrom, @rose]}, &(0x7f0000000200)=0x80) getpeername(r1, &(0x7f0000000300)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000240)=0x80) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@loopback, @in6=@mcast2, 0x4e22, 0x1, 0x4e24, 0x4, 0x2, 0xa0, 0x80, 0x2f, r4, r5}, {0x8001, 0x3, 0x3, 0x0, 0xffff, 0x200, 0x7fff, 0x1f}, {0x80000000, 0x800, 0xfffffffffffffffc, 0xff}, 0x1, 0x6e6bb4, 0x0, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d5, 0x3f}, 0x2, @in6=@remote, 0x34ff, 0x7, 0x0, 0x0, 0x9, 0x100000000, 0x1f}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 07:27:23 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="726573697a653d617574572c6e6f7461696c2c7461696c636b2d616c6c6f6361746f723d6e908c8550157fbcb4"]) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x11b000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x1, [0x9]}}]}}}, @IFLA_BROADCAST={0xc, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x5c}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:smartcard_device_t:s0\x00', 0x28, 0x3) write$selinux_access(r0, &(0x7f0000000180)={'system_u:object_r:dhcpc_var_run_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x521f}, 0x68) 07:27:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, &(0x7f0000000040)) [ 275.650115] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 275.781379] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value autW for -oresize [ 275.781379] 07:27:24 executing program 0: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) ioprio_get$uid(0x3, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000110009040000000000000000000000006398c9465022627d5d5884d5b6f1853b75f24d8d9648fae4fd74ca5b072acfb77dc68790f8d2cfc860be10a9d0534329bb99ef61930a2f1c9080e8b7e95e92464b87be3edc3a4cc7070c1fed8942ec49938bf0bbe51130825736ddbb07b48b4248a9988bac6b2d3f5fd8d04cdf7f1760f149a7ea016ecf6c30350a9c2b1071a260424d07937de97beb876127492d0d63b5e74fd77c8c4a9bcad8dc391ea7ae42d1166430eb8fb7fedf9aa5c41316a800a66e0314220cd536f850d97e86d3dfbd7ea1d1eeaf26be1f1691f2165835171580a66a8f97e16e5c23a660d3840141", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970365f76746930000000000000003f"], 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x4, 0x80000000, 0x6, 0x6f23, 0x8}) 07:27:24 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000004c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f\x00\x00\x00\x00\x00', 0x2761, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x50, &(0x7f0000000340)}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={r2, r2}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000240)) close(r4) 07:27:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, &(0x7f0000000040)) 07:27:24 executing program 5: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) ptrace$cont(0x1f, r0, 0x5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x9, 0x1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x3, 0x0) 07:27:24 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="726573697a653d617574572c6e6f7461696c2c7461696c636b2d616c6c6f6361746f723d6e908c8550157fbcb4"]) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x11b000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x1, [0x9]}}]}}}, @IFLA_BROADCAST={0xc, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x5c}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:smartcard_device_t:s0\x00', 0x28, 0x3) write$selinux_access(r0, &(0x7f0000000180)={'system_u:object_r:dhcpc_var_run_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x521f}, 0x68) [ 276.211126] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value autW for -oresize [ 276.211126] 07:27:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) [ 276.288998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 07:27:24 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x8, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2080, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@remote, 0x22}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000400)={0x2f, 0x4, 0x0, {0x2, 0x200, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000140)={0x3}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000540)={@multicast2, @remote}, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8, 0x1b73, 0x4, 0x8000, 0x7}, 0x3, 0x200, 0x81}) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000580)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x10000000143042, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f00000002c0), 0x4) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@remote, 0x1f, r6}) personality(0x100000) ftruncate(r5, 0x7fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000500)={0x9, "5875daafd579e61be330641ee4ceee908d144f31ca02bf792a597566455f9420", 0x3, 0x1}) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) close(r1) write$nbd(r5, &(0x7f0000000440)={0x67446698, 0x1, 0x0, 0x3, 0x2, "6b571d78"}, 0x14) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1011, r0, 0x26) 07:27:24 executing program 5: clock_nanosleep(0x9, 0x37dc12502000000, &(0x7f0000000100), 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x1ff, 0x5, 0x800, 0x6, 0x7, 0x1f}) socket$rxrpc(0x21, 0x2, 0x2) 07:27:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x38, 0x829, 0x0, 0x0, {0x0, 0x1000000, 0x2}}, 0x14}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) wait4(r1, &(0x7f00000000c0), 0x400000088, 0x0) 07:27:24 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) 07:27:24 executing program 0: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096}) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(0x0, &(0x7f0000000500)={0xffff}) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x10000) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f0000000280)) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1", 0x34}], 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000014c0)={0x3, @win={{0x80, 0x2, 0x2, 0x4}, 0xd, 0x231, &(0x7f00000003c0)={{0x0, 0xaf7, 0x194c451d, 0x9}, &(0x7f0000000380)={{0x7, 0xfffffffffffff800, 0x1, 0x9}, &(0x7f0000000100)={{0xbb3, 0x6, 0x7, 0x8}}}}, 0x6, &(0x7f0000000400)="5ff1398dd0c26f319f657e17055f8b75560863f0aafe677bc9214906781cd719f67bd4655105b4359015dd0b2545661e6c834b739df97370cd9fa50633e129d45f41100b7a1ebc7226af4e6187230e7c1b79551fbe68964c3c31d84b41229dd5c00c78c8c8fee81c8cba40a379f945c84f2d15b0cfc014a26530f598629cd3170be655fc4d41f975e8259123db322d36a4e491e861fc49bb9afa", 0x7fffffff}}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8}, 0x10) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000540)={0x0, 0x4}, 0x8) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000002c0)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x0, 0x5, 0x2e, 0xfff, 0x100000001, 0x0, 0x40, 0x8000000000000, 0x1, 0x7}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xff) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000001600)) dup3(0xffffffffffffffff, r1, 0x80000) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f00000015c0)='ppp0\x00', 0x5) 07:27:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='dev ', 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x8, 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) 07:27:24 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="726573697a653d617574572c6e6f7461696c2c7461696c636b2d616c6c6f6361746f723d6e908c8550157fbcb4"]) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x11b000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x1, [0x9]}}]}}}, @IFLA_BROADCAST={0xc, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x5c}}, 0x0) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:smartcard_device_t:s0\x00', 0x28, 0x3) 07:27:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) 07:27:24 executing program 5: mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) clone(0x1ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000080)) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000280)={r0, 0xffffffff, 0x2, "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"}) 07:27:25 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x8, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2080, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@remote, 0x22}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000400)={0x2f, 0x4, 0x0, {0x2, 0x200, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000140)={0x3}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000540)={@multicast2, @remote}, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000200)={{0xfffffffffffffff9, 0x8, 0x1b73, 0x4, 0x8000, 0x7}, 0x3, 0x200, 0x81}) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000580)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x10000000143042, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f00000002c0), 0x4) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@remote, 0x1f, r6}) personality(0x100000) ftruncate(r5, 0x7fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000500)={0x9, "5875daafd579e61be330641ee4ceee908d144f31ca02bf792a597566455f9420", 0x3, 0x1}) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) close(r1) write$nbd(r5, &(0x7f0000000440)={0x67446698, 0x1, 0x0, 0x3, 0x2, "6b571d78"}, 0x14) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1011, r0, 0x26) 07:27:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x100, 0x0) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000140)=""/40) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x11, 0x70bd26, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0x1, 0xfffffffffffffffd}}}}, 0x30}}, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x8180) ioctl$TCSBRK(r3, 0x5409, 0x7f) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000080)=""/74) [ 276.762789] binder: 9097:9103 ioctl c0306201 0 returned -14 [ 276.774343] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value autW for -oresize [ 276.774343] 07:27:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x4, 0x0, 0x0) 07:27:25 executing program 4: io_setup(0x5, &(0x7f00000001c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xc2001, 0x0) [ 276.875036] binder: 9097:9120 ioctl c0306201 0 returned -14 [ 276.940473] Unknown ioctl -2143271653 07:27:25 executing program 0: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096}) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utime(0x0, &(0x7f0000000500)={0xffff}) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x10000) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f0000000280)) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1", 0x34}], 0x1}, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000014c0)={0x3, @win={{0x80, 0x2, 0x2, 0x4}, 0xd, 0x231, &(0x7f00000003c0)={{0x0, 0xaf7, 0x194c451d, 0x9}, &(0x7f0000000380)={{0x7, 0xfffffffffffff800, 0x1, 0x9}, &(0x7f0000000100)={{0xbb3, 0x6, 0x7, 0x8}}}}, 0x6, &(0x7f0000000400)="5ff1398dd0c26f319f657e17055f8b75560863f0aafe677bc9214906781cd719f67bd4655105b4359015dd0b2545661e6c834b739df97370cd9fa50633e129d45f41100b7a1ebc7226af4e6187230e7c1b79551fbe68964c3c31d84b41229dd5c00c78c8c8fee81c8cba40a379f945c84f2d15b0cfc014a26530f598629cd3170be655fc4d41f975e8259123db322d36a4e491e861fc49bb9afa", 0x7fffffff}}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8}, 0x10) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000540)={0x0, 0x4}, 0x8) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000002c0)) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0x0, 0x5, 0x2e, 0xfff, 0x100000001, 0x0, 0x40, 0x8000000000000, 0x1, 0x7}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xff) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000001600)) dup3(0xffffffffffffffff, r1, 0x80000) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f00000015c0)='ppp0\x00', 0x5) [ 276.983653] Unknown ioctl -2143271653 07:27:25 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="726573697a653d617574572c6e6f7461696c2c7461696c636b2d616c6c6f6361746f723d6e908c8550157fbcb4"]) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x11b000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1={0xff, 0x1, [0x9]}}]}}}, @IFLA_BROADCAST={0xc, 0x2, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x5c}}, 0x0) 07:27:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x500, 0x0, 0x0) 07:27:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x400001) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000100)=""/236) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\x00') [ 277.104627] binder: 9135:9137 ioctl c0306201 0 returned -14 07:27:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x0) sendfile(r0, r0, 0x0, 0xfffffffffffff8f5) mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100000002132, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xffffffffffffffc0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x20540, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) getxattr(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240), 0x0) write$uinput_user_dev(r0, &(0x7f0000000600)={'syz1\x00', {0x8, 0x6, 0x5d7623f9, 0xe83a}, 0x40, [0xffffffffffffff5d, 0xffffffffffff7fff, 0xfffffffffffffffd, 0x7, 0x81, 0x5, 0x9, 0x6, 0x9, 0x0, 0xfff, 0x30a, 0x2, 0x703b, 0x20, 0x0, 0x2, 0x6, 0x7, 0xfffffffffffffffb, 0x0, 0xaac5, 0x80000001, 0x5, 0x20, 0x5, 0x80, 0x8, 0x5, 0x6, 0x3, 0x9, 0x0, 0x1, 0xfffffffffffffff7, 0xfffffffffffffffd, 0xee4, 0x6, 0x3, 0x4, 0x0, 0xd35b, 0x7, 0x9, 0xffff, 0x5, 0x6df8, 0xf44, 0x1f, 0x60000000000000, 0x80, 0x8, 0x80000001, 0x80000000, 0x72ec, 0xaaae, 0x10001, 0x9, 0x2, 0x4, 0x800, 0x100000000, 0x6, 0x2], [0xffffffffffffff38, 0x9, 0x100000001, 0x9, 0x4, 0xd1, 0x100, 0x37, 0x5, 0x1, 0x318, 0xf, 0x80000000, 0x2, 0x7f, 0x8, 0x8000, 0xfffffffffffff000, 0x0, 0x8, 0x2, 0x492c, 0x3f, 0x3, 0x9, 0x3, 0x10000, 0xfffffffffffffffc, 0x400, 0xd5a, 0x1, 0x100, 0x100, 0x2, 0x10001, 0x7fffffff, 0xff, 0x0, 0xffffffff, 0x20, 0xf1f, 0x1, 0x9, 0x8, 0xffffffffffffff81, 0x80000000, 0x3ff, 0x634b971, 0x3963c115, 0x8, 0x7ff, 0x7, 0x2, 0x4, 0x0, 0x6, 0x3, 0x1f, 0x6, 0x1, 0x7, 0xfffffffffffffffa, 0x8, 0x5], [0x7ff, 0x2, 0xcb1, 0x6, 0x9fb, 0x100000001, 0x4, 0x1, 0x80000000, 0xffffffffffff0001, 0x7fff, 0x401, 0x6, 0x4, 0x6, 0x4, 0x7401, 0x6, 0x100, 0xfff, 0x2b1d, 0x1, 0xfffffffffffffe01, 0x4, 0x4, 0x8, 0x1, 0x7fffffff, 0xffff, 0x3ff, 0xc3c, 0x1, 0x4, 0x800, 0x20, 0x6, 0x5, 0x4, 0x10000, 0x10000, 0x3, 0x100000001, 0x8000, 0x6, 0x4, 0x1, 0x9, 0xaa88, 0x1, 0x400, 0x1, 0x6, 0x8000, 0x0, 0xa28, 0x7, 0x8ba, 0x8001, 0xc5dc, 0x80000001, 0x4, 0x80, 0x200, 0x976], [0x8, 0x0, 0x7, 0x6, 0x0, 0x0, 0x5309, 0x54, 0x7fff, 0x80, 0x800, 0x1, 0x9, 0x9, 0x2, 0x100, 0xffffffffffffffc1, 0xffffffff, 0x2, 0xfff, 0xa4c, 0x100000001, 0xd66, 0x1, 0x81, 0x8000, 0x5, 0x0, 0x7fff, 0xfff, 0x3, 0x2, 0x2a, 0x9, 0x80000000, 0x1, 0x100, 0x3, 0x0, 0x3, 0x1, 0xb3b, 0x2b2, 0xf21e, 0x7, 0xfffffffffffffff7, 0x2, 0x3, 0xd62, 0x9, 0x88, 0xaccd, 0x4, 0x14, 0x7, 0x1, 0x5d, 0xbf, 0xf3b, 0x400, 0x10000, 0x487f37fb, 0x4, 0x9]}, 0x45c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x80000000000004, @ipv4={[], [], @broadcast}, 0xfffffffffffffffd}, 0x1c) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) listen(r4, 0x1fffc) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000540)={0xffff, {{0xa, 0x4e23, 0x0, @remote}}}, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000140)={0x3, 'bridge_slave_1\x00', 0x4}, 0x18) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x7, 0x10000, 0xff, 0x9, 0x3, 0x7, 0x1, 0x7, 0x7, 0xfffffffffffffff8, 0x9, 0x6}) accept(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$trusted_overlay_opaque(r4, 0x0, &(0x7f00000002c0)='y\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f0000000000)={{0x0, @addr=0x1}, 0x8, 0x7f, 0xfff}) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000004c0)) 07:27:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000200)=""/52) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) connect$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x8, 0x3, 0x10001, 0x4, @random="28f64b6849ec"}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="03177f454c46060507000700008000000000020000000d0000007b0300000000001d1eff9fe6dfd10a593c002a00541e3506cd45343d000000000000160000003f00380001"], 0x45) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0x5, 0x8, 0x3, 0x6}}) recvmmsg(r3, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) fallocate(r1, 0x18, 0x8000, 0x9) [ 277.218418] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value autW for -oresize [ 277.218418] 07:27:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1008008912, &(0x7f0000000000)="0af51f023c123f3188a0703bb3f74e7d0f64b9774c7b4ff3f34ca8a54d5cfd6fbd3f90d492740ab6e8592c558b47dbeb99fe46e35a8d37f7383b6e192548d77875ac6666c733fdadf613") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) 07:27:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@remote, 0x1f, r6}) personality(0x100000) ftruncate(r5, 0x7fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000500)={0x9, "5875daafd579e61be330641ee4ceee908d144f31ca02bf792a597566455f9420", 0x3, 0x1}) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) close(r1) write$nbd(r5, &(0x7f0000000440)={0x67446698, 0x1, 0x0, 0x3, 0x2, "6b571d78"}, 0x14) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x1011, r0, 0x26) 07:27:25 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="726573697a653d617574572c6e6f7461696c2c7461696c636b2d616c6c6f6361746f723d6e908c8550157fbcb4"]) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x11b000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) 07:27:25 executing program 5: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xf, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x4000, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000380)={{0xa, 0x4e23, 0xff, @empty, 0xfffffffffffffffd}, {0xa, 0x4e22, 0x723c1af5, @ipv4={[], [], @rand_addr=0xea6c}, 0x80}, 0x40, [0x9, 0x6, 0x3f, 0x0, 0x7, 0xfffffffffffff001, 0x3c21, 0x7]}, 0x5c) socket$isdn(0x22, 0x3, 0x22) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4) r5 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) rt_sigreturn() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_udp_int(r7, 0x11, 0xb, &(0x7f0000000040)=0x8001, 0x4) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) 07:27:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0xebf, 0x6}, 0xd4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) add_key(0x0, &(0x7f0000001a40)={'syz', 0x1}, &(0x7f0000001a80)="b7feb58638d4bf8dfafcdf7772f14b127341adba280fd79cc810085b0ac4a6bfbb03a22eb9a4958ee8a0a188e794bbb9b639d06a55c12aa11948cb5383795501baf9981e1311d8dc95625005158c4b946a262a479d121a16b13e6c163a73", 0x5e, 0xfffffffffffffff8) getegid() getegid() ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) prctl$PR_CAPBSET_READ(0x17, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)=0x8000) getegid() r4 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000100", @ANYRES16=r5, @ANYBLOB="0004eed429bd7000fedbdf25010e00000c95bfd843b6ac043204736a66151260fe7065a5032a1e"], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4) fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x1e) r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$TIOCNOTTY(r6, 0x5422) 07:27:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x36e, 0x80000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0x1, 0x9, 0x10000, 0x80000000, 0x8}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, 0x0) [ 277.632661] audit: type=1400 audit(1549178845.887:55): avc: denied { map_read map_write } for pid=9174 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 277.666340] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value autW for -oresize [ 277.666340] 07:27:26 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="726573697a653d617574572c6e6f7461696c2c7461696c636b2d616c6c6f6361746f723d6e908c8550157fbcb4"]) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x11b000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 07:27:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x220680, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) connect$netrom(r1, &(0x7f00000000c0)={{0x3, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) 07:27:26 executing program 5: socket$pptp(0x18, 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000000, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0xb9, 0x4, 0x78}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), 0x0}, 0x20) getgid() stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) geteuid() syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000440)='./file0\x00', 0x106, 0x7, &(0x7f0000000840)=[{&(0x7f0000000280)="fd3b3184846a0fc43ad8948dabf15f47386e300ad3de30e01680e6381a91f1303d8f18fc8720c4c5ac0152643d643473de319910ef08005233b885d5ee2cf1b3bdeb875ccead165d3921da3399629693f51c0af54d6ea22ca6e157738c0e5573639f6cf5e23e69eff216", 0x6a, 0x5}, {&(0x7f0000000640)="29d281dcece67dbe221f184f4c2e1191a72d88b0a811789bcecf5c3ea73667f22b80a07048eab8dabb26ede390ce22b7f7dd31117621b4bb25b223aa2237e5911b626ef90609d526d9b31e7138ab5c0f84894bda023dd3cd38548ce6f2f59194fbd78dcb338418b07c667d805bb727a0acb5df3026d7639b7f224a4213857d933a2b6af80a2ebd0386fb8e3cabe2b02e20725587ad13d41f10041fe02d803ac39f6b8929a99bf3e8de9ce31b565ed03a08cb7e9b1f0551a676dc19ccca293c9bce848e306bf4bf75c6f5567e7e3abb76f1cacc322dd6b0e3", 0xd8, 0xfffffffffffffeb7}, {&(0x7f0000000900)="cc8a8d970382320c78f80112248b8efbcfbe41d52d6ef7a06d855bfdaeda0670c134354c1831ba9364d71d525ae2741c1d36874208c208f62fa7ca3b8e7b285e084f19e94e78c2a45f1fa18743cc5ebcecdf5fbb5cd461f399ae31a05a8e6107dc7bca9fbb1c00c90763a97a7e7802d9cfc8759894642c7c4db81ed86ecdf642bdc162d9b4511e60b27e2857ff439c3073217ae808", 0x95, 0x1}, {&(0x7f0000000340), 0x0, 0x4cd}, {&(0x7f00000003c0)="c4329d8daebb8925ed696da2bf6c4aac70c49bfba94fb0ba42ef2313faf1b55156dc2b62326c9055a28b0fd27275b12530", 0x31}, {&(0x7f0000000400)="92965a06fa38", 0x6, 0x7}, {&(0x7f0000000740)="e7e061d9dc23d3db58c78024a879853b1a0c50e570ba0a446727027500d3ef38e89b892595dfe6b4556fa4ceb3699af3a05442937b77070820c6df44a55fe132006f20b9826faae095d6d36304a04f8f3a9222ce92c965a39358bf938e3263ad204341019a59a1100f860621e8e860e85da2af394eb924d11d771aab79d49aa3db4fc8709810ddfed8403a80559662d9ff9f585613a712315eb5998dc6d68d9085f9e14d6b95f8f7984bfb84f4f363241d89bafb8d98f622212262caa4c77883755ea3ccb9a7e5def673b84ecf27ebfb50e7300744ddf9b015e0ad4bddba7d", 0xdf, 0x1}], 0x8000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000040), 0xc, &(0x7f0000001300)={&(0x7f0000000200)=ANY=[@ANYBLOB="01040000ebc4"], 0x1}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'nr0\x00', @ifru_mtu=0x5}}) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000001380)=""/4096) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000040), 0x0}, 0x18) 07:27:26 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x8000000000001, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x202, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r1}, 0x10) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x222000, 0x0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x8) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r2) listen(r0, 0x0) [ 277.901124] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value autW for -oresize [ 277.901124] 07:27:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40485404, &(0x7f0000000000)={{0xfffffffffffffffe, 0x1, 0x400000000002, 0x3, 0xff}}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="46f9b0b4901448b445e2ebcfde8e70401133f8e360d137a5e25c12dc", 0x1c}, {&(0x7f00000000c0)="f946bb9a6861fee4e5686e71c067d3e023b7406ea6be4b6a8e72facd759ef0fe87594388206cbb1118dea8f8dabb46c93613c6feed97de7fa44dd2531d29ff9848b0864097f8f0f805235061f6f2b380985eb4737c53182620b4f174d2d0749a90e9bb2495e51e766d4c701d02f8d8480b84f2f05ccaccf195d6543971c432fc899ae7d901d9f9f7e911bfe66acf28710f8c318affb781311d3386741dc92648e23ef28be27230bf072e5b90aa8955c9c323aec1813880d716b11956dae893fd1836e634665df3611dca", 0xca}, {&(0x7f00000001c0)="45f8deba2d8c249ea08b56b903ff3c74e7fd70eee27fc1cf96795a6284102053658ec5518a8ece706272bfd3fc28e498909510e88457a897c66fcd582551a98470c3aafd4e5973bcdde41b3df0d1da1c43d4fec59fc95b98d4f649b3be196a25e778a25846e893c1db258427db8b3987ee0fad339924975cad85d850cb819dbfad9044262d2fedd464b43bc64cbb866e298eb417cf701a426ac7bb7b0852f11573fb87324a2c1bf2e344f3d05e63c288f9e6ccb704394703aa7868b56817cb8dd7f85eca8c67f48778f91319a20ae359166f09b237df8e153cf5ab2e5e572acc883715ca92b0cca775d6", 0xea}], 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x280000, 0x0) 07:27:26 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="726573697a653d617574572c6e6f7461696c2c7461696c636b2d616c6c6f6361746f723d6e908c8550157fbcb4"]) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x11b000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 07:27:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x48100, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x200, @dev={0xfe, 0x80, [], 0x10}, 0x4a}, @in6={0xa, 0x4e22, 0x8d9, @mcast2}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x400, @loopback, 0xfff}, @in6={0xa, 0x4e23, 0x7, @mcast2, 0x40}], 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={r2, 0x8000, 0xffffffff}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, 0x0) 07:27:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0xebf, 0x6}, 0xd4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) add_key(0x0, &(0x7f0000001a40)={'syz', 0x1}, &(0x7f0000001a80)="b7feb58638d4bf8dfafcdf7772f14b127341adba280fd79cc810085b0ac4a6bfbb03a22eb9a4958ee8a0a188e794bbb9b639d06a55c12aa11948cb5383795501baf9981e1311d8dc95625005158c4b946a262a479d121a16b13e6c163a73", 0x5e, 0xfffffffffffffff8) getegid() getegid() ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) prctl$PR_CAPBSET_READ(0x17, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) keyctl$unlink(0x9, r1, 0xfffffffffffffffd) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)=0x8000) getegid() r4 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000100", @ANYRES16=r5, @ANYBLOB="0004eed429bd7000fedbdf25010e00000c95bfd843b6ac043204736a66151260fe7065a5032a1e"], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4) fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x1e) r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$TIOCNOTTY(r6, 0x5422) 07:27:26 executing program 0: syz_execute_func(&(0x7f0000000400)="93cd808000006969ef69dc00d98adcd0d00fd1b02db5d900000070e4c653fb0fcdcce39aa95ff965be3c3b4d4d408064797f419fdf400e01efff2a9dc402053a9b0000002067450f483b1c0a1a63460fc476c16161787896040498e1b1ac8f0f0000009f") r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={{0x80000001, 0xb5, 0xedd, 0x3, 0x9, 0x6}, 0x1}) 07:27:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000009040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000)=0xfff, 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000001c0)='nfs\x00') ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) [ 278.316831] REISERFS warning (device loop2): super-6507 reiserfs_parse_options: bad value autW for -oresize [ 278.316831] 07:27:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101400, 0x0) accept$inet6(r2, 0x0, &(0x7f0000000040)) [ 278.463646] hugetlbfs: Bad mount option: "nfs" 07:27:26 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="726573697a653d617574572c6e6f7461696c2c7461696c636b2d616c6c6f6361746f723d6e908c8550157fbcb4"]) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fffffff, 0x11b000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) [ 278.565431] hugetlbfs: Bad mount option: "nfs" 07:27:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 07:27:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = dup3(r0, r1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x254, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xf0, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400000000000}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000000000}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL=