[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 30.289592] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 31.203104] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.628016] random: sshd: uninitialized urandom read (32 bytes read) [ 32.249284] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.125' (ECDSA) to the list of known hosts. [ 37.902846] random: sshd: uninitialized urandom read (32 bytes read) 2019/11/18 02:49:21 fuzzer started [ 38.102766] kauditd_printk_skb: 10 callbacks suppressed [ 38.102775] audit: type=1400 audit(1574045361.436:36): avc: denied { map } for pid=6949 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 38.981192] random: cc1: uninitialized urandom read (8 bytes read) 2019/11/18 02:49:23 dialing manager at 10.128.0.105:37719 2019/11/18 02:49:23 syscalls: 2529 2019/11/18 02:49:23 code coverage: enabled 2019/11/18 02:49:23 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/11/18 02:49:23 extra coverage: extra coverage is not supported by the kernel 2019/11/18 02:49:23 setuid sandbox: enabled 2019/11/18 02:49:23 namespace sandbox: enabled 2019/11/18 02:49:23 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/18 02:49:23 fault injection: enabled 2019/11/18 02:49:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/18 02:49:23 net packet injection: enabled 2019/11/18 02:49:23 net device setup: enabled 2019/11/18 02:49:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/18 02:49:23 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 41.263919] random: crng init done 02:51:39 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xa060, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x6d, 0x1ff}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0xbd, 0x8}, &(0x7f0000000100)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000140)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x100, 0x8, [0x700, 0x5, 0x8, 0x2, 0x7ff, 0x200, 0x4, 0x5c76]}, &(0x7f00000001c0)=0x18) r3 = syz_open_pts(0xffffffffffffffff, 0x6080) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000200)={0x6, 0x1f}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={r2, 0x9}, &(0x7f00000002c0)=0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x24) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000000480)={r6, &(0x7f00000003c0)=""/162}) syz_mount_image$bfs(&(0x7f00000004c0)='bfs\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffff01, 0x4, &(0x7f0000000700)=[{&(0x7f0000000540)="b12aa2b12d05b8c65873577b66d4235ef30e34bea7fa8c", 0x17, 0x100000001}, {&(0x7f0000000580)="8a0f1b1b3be9c87ed194f00bce51bcf5d600cffb1116ebd4f8b2ecf1fe17c1d59259b0878522", 0x26, 0x9}, {&(0x7f00000005c0)="5184064027614328ba0254fc3fada4cd23ab86434315d4d4e9d7", 0x1a, 0x1f}, {&(0x7f0000000600)="ddc37bd9cde25732afff34892ec44d1d1df09504685d2d980440e80209389b51537e8a8f89c41e753e7d622677c4bbbc47eb764a7ac3b89f2cff00a9132097e0b6ed4d9e043106be25a57bba9a2d382daa594bb1cec1cb91e09ba0b148b4e33254f3610254309860ad8cda02ab69eede5b279b8fed007fb89727e44b1cafd8f9f7e5449e95f49233fb565ef5d3cb1e71e9572dea16af2304d91535b65f8acfc99f4ad9cff9e9953725c043b820375dd22b67d642748540c93aa2fee107bd825f93071fc3a678f564e556", 0xca, 0x8}], 0x8001, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) shutdown(r7, 0x1) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sync_file_range(r8, 0x3ff, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000840)={0x1, 0x6, 0x4212, 0x5, 0x5, 0x8, 0x101, 0x4, r1}, &(0x7f0000000880)=0x20) getsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f00000008c0)=@assoc_value={r10, 0x80}, &(0x7f0000000900)=0x8) r11 = accept(r0, &(0x7f0000000940)=@generic, &(0x7f00000009c0)=0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000a00)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000b80)=0xe8) lstat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000c80)={r12, r13, r14}, 0xc) r15 = socket$nl_crypto(0x10, 0x3, 0x15) tee(r15, 0xffffffffffffffff, 0x4, 0x15) r16 = openat$full(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/full\x00', 0x8000, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r16, 0xc0285629, &(0x7f0000000d40)={0x0, 0x8, 0x100, [], &(0x7f0000000d00)=0x7}) 02:51:39 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x6, @rand_addr="882fc9f4ad52d9587f164648aff84ee3", 0x6}}, 0xfffffffc, 0x6, 0x1000, 0x3, 0x9}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x5c, &(0x7f0000000200)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}, @in={0x2, 0x4e22, @rand_addr=0x4}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f00000002c0)=0x10) r4 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x1, 0x2) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x400, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000380)=r5) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001900)='/dev/vga_arbiter\x00', 0x20202, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001940)={r3, @in6={{0xa, 0x4e23, 0x4, @loopback, 0xfff}}, 0x0, 0x8001, 0x401, 0x4, 0x4}, 0x98) r7 = syz_open_dev$vbi(&(0x7f0000001a00)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000001a40)={0x8, 0x7, 0x5a79f8ccdf9e0022}, 0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getownex(r8, 0x10, &(0x7f0000001a80)) syz_mount_image$ceph(&(0x7f0000001ac0)='ceph\x00', &(0x7f0000001b00)='./file0\x00', 0x8, 0x5, &(0x7f0000001d40)=[{&(0x7f0000001b40)="b9dcaef1ecc7ebd6dda76f02d77d498f47292835e001f5db2794f327a6272593b92b3056e2df7f9b628d2814fa6c02d15587b6ef223b69fd8ad561cc6500857a019568689eb7e951c7a8ef81e18f4a7b7774b146af3b88bc12b3dbe7abfde1a3d0c2f32f9fe5641e", 0x68, 0x8}, {&(0x7f0000001bc0)="8668c8a05a3ca73a803dfcb3b286bdaa7997a144d1d334345dff567585a6cd328589a82065d6a2ac9518e1ac64b4229a0a135d168f6ba36af755", 0x3a, 0xff}, {&(0x7f0000001c00)="364f2da66eac5adbc77eb85bc4980a63cfd4b526c687a9155042432f9ef9", 0x1e, 0x20000000}, {&(0x7f0000001c40)="8f8067acc68fbc9980", 0x9, 0x1}, {&(0x7f0000001c80)="84e8983e8c3c9d60e88e2ecbe07f94aaf1d00440d3a4010bf74a95eeb579b836abc97debce732ab068d5fdd49e83736da6c3789c83a0dd05a12a46de2e2aa863e58d11ec7028d55eb0e1b1ce8dece3f1b7b8b0e13c2946206ed1c3ef64a6b158764fb43e5f40235ae88e2d2c31db92beebb2cce9a1b8318509e4e89b3f1ece4cd0eb6edf1ec2fabeb0fcfd3244303d82ca0ee3567d61e4efb8fcbf78", 0x9c}], 0x301390, &(0x7f0000001dc0)='/selinux/status\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001e00)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001e80)={0x0, 0x0}) r11 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001f00)='/dev/video35\x00', 0x2, 0x0) kcmp(r9, r10, 0x4, r0, r11) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/dlm-monitor\x00', 0x303000, 0x0) recvfrom$ax25(r12, &(0x7f0000001f80)=""/129, 0x81, 0x40000041, &(0x7f0000002040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @null, @bcast, @bcast]}, 0x48) r13 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000020c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r13, 0x84, 0x75, &(0x7f0000002100)={r2, 0x1}, 0x8) setsockopt$inet6_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f0000002140)=@gcm_128={{}, "448eb2a88f9f3fea", "73496c7ede72d7d54d59700a26fa7a8a", "0ddfa6a4", "9e1123c7f90009d9"}, 0x28) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000002180)=0x1, 0x4) r14 = syz_open_dev$radio(&(0x7f00000021c0)='/dev/radio#\x00', 0x0, 0x2) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000002240)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r14, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, r15, 0x2, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40000) 02:51:39 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x128240, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x9, @rand_addr="76d76250cc837eb3971cb20a9e2d4559", 0xecce}, {0xa, 0x4e23, 0xffff, @empty, 0xfffffffa}, r3, 0xfffffffb}}, 0x48) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=0x0) syz_open_procfs(r4, &(0x7f0000000280)='net/ip_mr_vif\x00') ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f00000002c0)={0x66a9, 0x1000, [0x7, 0x9534, 0xa7, 0x2, 0x7fff], 0x3f}) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000340)={0x0, 0x0, @ioapic}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x200, 0x0) ftruncate(r6, 0x9) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$TIOCSLCKTRMIOS(r7, 0x5457, &(0x7f00000004c0)) ioctl$VIDIOC_ENUMAUDIO(r7, 0xc0345641, &(0x7f0000000500)={0x81, "f3ab0e6ff21ac81386bcc29fb3d85143f9e675c9e4faa8b09c41a17c7fd59a6a", 0x1}) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f0000000680)={0x8, &(0x7f0000000580)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}]}) ioctl$sock_ifreq(r1, 0x891e, &(0x7f0000000700)={'veth0_to_team\x00', @ifru_settings={0x0, 0x1, @fr_pvc_info=&(0x7f00000006c0)={0x3, 'hsr0\x00'}}}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000740)='/dev/snapshot\x00', 0x801, 0x0) r10 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000780)={{{@in=@remote, @in=@rand_addr=0xfff, 0x4e20, 0x311c, 0x4e24, 0x7293, 0xa, 0xc0, 0x80, 0x93, 0x0, r10}, {0x6, 0x401, 0x6, 0x7ff, 0x9, 0xd2, 0x3, 0x8}, {0x4, 0x9, 0x40, 0x800}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x89b093e359c8bbea}, {{@in6=@rand_addr="7d07d67c3ce59225e4898c5237e55023", 0x4d4, 0xff}, 0xa, @in=@multicast2, 0x0, 0x1, 0xb8b75c5f592734ba, 0xff, 0xfffff000, 0xffffff01, 0x5}}, 0xe8) r11 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000880), 0x80800) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000dc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e40)=""/209, 0xd1}], 0x1, &(0x7f0000000f80)=""/4096, 0x1000}, 0x44) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001fc0)={'dummy0\x00', r12}) r13 = syz_init_net_socket$ax25(0x3, 0x6, 0x1) finit_module(r13, &(0x7f0000002000)='hsr0\x00', 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000002040)='/dev/ppp\x00', 0x101002, 0x0) pipe2(&(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4400) ioctl$CAPI_NCCI_OPENCOUNT(r14, 0x80044326, &(0x7f00000020c0)=0x800) 02:51:39 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0xb, 0x1}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000080)={0x3ff, 0x7, 0x81, 0x8, 0xff, 0x81}) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0xb, @sdr={0x48524742, 0x6}}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x80, 0x0) accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @empty}, &(0x7f0000000280)=0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000002c0)={0x80000000, 0x20, 0x3f, 0x1, 0x1f, 0x8}) r4 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x6, 0x400) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000380)={0x10001, 0x2}) r5 = dup(r0) write$P9_RLCREATE(r5, &(0x7f00000003c0)={0x18, 0xf, 0x2, {{0x20, 0x0, 0x1}, 0x8}}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000440)) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000480)=""/163) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000540)={@null=' \x00', 0x4, 'vlan0\x00'}) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/access\x00', 0x2, 0x0) connect$rxrpc(r3, &(0x7f0000000680)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x7ceb, @empty, 0x5}}, 0x24) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vsock\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000700)={0x5, [0x9544, 0x0, 0xe47, 0x638f, 0x401]}, &(0x7f0000000740)=0xe) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a00)='/selinux/enforce\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000a40)={0x0, 0x8001, 0x524, 0x7fffffff}, 0x10) write$UHID_CREATE(r7, &(0x7f0000000b00)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000a80)=""/77, 0x4d, 0x8, 0x1200, 0x400, 0x9e, 0x8000}, 0x120) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000c40)={0x6, 0x10, 0x1, r7}) ioctl$FS_IOC_FSGETXATTR(r10, 0x801c581f, &(0x7f0000000c80)={0x100, 0x6, 0x8, 0x8, 0x7}) pwrite64(r6, &(0x7f0000000cc0)="316e0df3d90d5d2770879400e513545d52d162596781db70622b497462afb47fd2e44b4191b891c80e0f", 0x2a, 0x0) socket$inet6(0xa, 0xa, 0x1) [ 175.748107] audit: type=1400 audit(1574045499.076:37): avc: denied { map } for pid=6967 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=30 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 02:51:39 executing program 3: r0 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x5b, @loopback, 0x4e24, 0x3, 'wlc\x00', 0x10, 0x9, 0x35}, 0x2c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x724020de99d06181) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x101000, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000100)={0x18, 0xf, 0x1, {{0xe719381f1d3ae3e1, 0x1, 0x4}, 0x7}}, 0x18) r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x443) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x1, 0x1, 0x6}}, 0x14) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x1e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_delete(r4) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @dev}, &(0x7f00000002c0)=0xc) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x11}, @in=@multicast2, 0x4e21, 0x1, 0x4e22, 0x0, 0x0, 0x2ef77f0678c42864, 0xf0, 0x3c, r6, r7}, {0x1ff, 0x0, 0x3f, 0x2, 0x40, 0x8, 0x8, 0xaf37}, {0x0, 0x2193, 0x7, 0x8}, 0x249, 0x6e6bb2, 0x1, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d3, 0x33}, 0xa, @in=@rand_addr=0x8, 0x3503, 0x3, 0x0, 0xe9, 0x9, 0x6}}, 0xe8) r8 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x3, 0x2) write$P9_RVERSION(r8, &(0x7f0000000500)={0x15, 0x65, 0xffff, 0x41c, 0x8, '9P2000.u'}, 0x15) r9 = syz_open_dev$swradio(&(0x7f0000000540)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f0000000600)={r10, 0x3ff, 0xb}) r11 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$setperm(0x5, r11, 0xe68a5735484fb3cf) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000006c0)=@assoc_id=0x0, &(0x7f0000000700)=0x4) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f0000000740)={r12, @in={{0x2, 0x4e24, @empty}}}, 0x84) syz_open_dev$amidi(&(0x7f0000000800)='/dev/amidi#\x00', 0xfffffffffffffffb, 0x200) r13 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r13, 0x0, 0x20, &(0x7f0000000840)={@broadcast, @loopback}, &(0x7f0000000880)=0xc) r14 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r14, 0x84, 0x13, &(0x7f0000000900)={r12, 0x10000}, &(0x7f0000000940)=0x8) r15 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000980)='/dev/dlm-monitor\x00', 0x0, 0x0) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r15, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2040400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, r16, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x1a}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 02:51:39 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200002, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'yam0\x00', 0x200}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='/selinux/mls\x00') ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x1015, 0x4, 0x7, "4a5fab0569d32f85a7907a6dc9ba2e39", "4e18612116788a3b1c11fb7f80c6edb9e91cf828a8a4dcc66ba8edb814962adeec3b5fbaa44ee4225efaa6b544277fb2208c12ddf15c245bccb364919f31b95ee91e17d5d354c96063f278793e0ba6b8f7e7e7711bc12b4a4d19a4ab1bc01d813e991288d07389b4384e615e913e6e873da7561b326323a0cb314fbd7d04314cfd4ae8ac5b1b7de2a9d6e59cdb8f985cd1a75d61c564a5c6f4952428bbae9e80d1408e9a92d6c924246e319b88921e962c8f61dff10e58795b276336df77ba892ea9fc8e0049368cb1ee6feca81d8dae5adbe6215b30083fe58dfc1c13cd5dc23f37fd0e1338414509c3d28ff17df57e26be4c68e339d83d6850b6703869af102462900bcf1954aceb543d918351a9cee5debf6ef3416137a9d1802f7e82ba1a19b11fe6f0b1e980dd81d0f0c4250cb2be4b4c955de46ebf15b16f85c8f367d7398a8bbe2d2f3126a727f3806875ee3b86de2bbf39079b188d704619a017d4b0604d58ec1523bc4d9835d3b87e3afda90bc9f933ad1fd989302bc140b33dcc5ad762dc2e9549c1b6cc3f3a81c8c4fedb0d27c316940917701ab4d9a3e81c8504e3c84bb348fa40f6df8c540a4f2a87e2d6d7f71c184d69a97a3c3501af807eea10ede4fb6bd98c6bfb348af8ad455f1f215313c07c897e8aeb07240761462c42ef253d029066ff697338ca28bfca536fa92ce3f596dc9cd6c7e783cafd48e22cc8b0ff2b6fc927c7528c31eb80bd627ec7567e269b71e3d8364250aef782305c14956762e93516e6e4c4f0fe21d6174c04aeba0c147b1c05f12687a734a6f64c3fa593ace17b4f308f1105695d135313dca35eba43d5bfac9471e122ba4dc93d53e7004138c343b82988f0c6df8ed0bdcc58750190f1e928f686ede74ea919eae46b839d8191413784d7e0066833efece6e93fce8bbaa58d6931d0d9b38222e8f924fd966b5d697b63932e18af8ed47cebca39667573458d0f83376fcb6cabc67ce960c78fa101a1f8dc9bc7401e08bb916608165e8e7a579d4bf108fcdf925c6a0aff6edcf96c2861d1a3ff97faa2fee94d870266352df3fe976085d65d4b24af37c676cb6000c044f8820c5c1cde0fbc2a8ff13ac74383efb6c211633b479127c3e47f6fd1fd94c7a62ef9cc85308b37fab7c292f275fb73e1e003cb7e98568302bcce4456c125c8c3b6792429251d0a8c0e77e6b9b8b88046813ed20c2378756cae2dd39781ab00d2026574641baf1c1356f38399faec8aa9b86f499aa9e96fec3e66b27a72c7a9c777b10d5a5cd7353100e081f05157e9f35ca9f9cf0a297772a76dfebce04cb55db2394fa2bda8c624e4369e0775f7eba9adcf2f843f35ca44b64f8a31c1ddc2e23bb6aac916b78f751c0de6692a32cdba1d4f040c79e01e6e959e6020444696d7cdbaccfbba9f842e209478f46987dc3b758c1c1cfe85c63500cffda62b0c7f53a1b0b05d4021fca653dfc4340a7bfd7af9328dda06eefca025fbcac6333fb87aaf7056c35b68e43a846109ee5ce99cebae8f3ff9c720b075fd4729915ce8333e099fce1fed418367f853aae02d880c4c8db4c10756eece09b77d410e800b44b23202fb348bebcef492499fb770b8ed5181fae7a5c02f44837540299980dfb07aa8d94561e6ae982af853e2cf8063ee306fac5804a69b7cc9dee15cd020e168ef5cbabc4ce2e6ccd62cea42bd6875bd96806c8618df1190c6661cfae1bf9f80dc708d5d00420b8d40454740745ab864afca8a5fc3b3fb2213129e9f27a1af09aec08582f3f960c95d3d205805aeae7766b1803defe3b4c482c48cf2e26fcd1a0a53241bf199e950009c754342343b8fb7c36c1c5c23bc0b5c6ee380c5d50357984139509696985505b6848a441ed08aaa82ab4fe820c572e4a9605b7517bdba3feb4589e1f8b16d3877647c56855b7f94c3dffd19439c794addc3b4aba171808f59ead0a01713185dfbf145849170c207c3953d42c5b2aeb274021a9c4b375f1c4a4d801830f82afb4608329e95f3c1917e7457deb86ab155f83daaa3f44827a4aa93d67d21b1288b40c49a1589a127e92d2fc7e0c458537a040082c4696947c0fcf4d0a1c8fc24e7bae9b6f5cd4948384bba2706e9b1f8cca6f7c2b33b037fdb61d8e4bc9be92c22f4938ef07f8aa26657ba558c1c71d271ca3bdc3952630b29a00022fb98a9d8a9b8629368da5b76c8da83a95a26642d064f26a70520f61ecb6d6e353313b331286a554dabf7a3bd74e74646c976b407eaa317a5cf8bb4a758644fa60988a4f393792254c5fcf4f82fcc08628866bee66d07750aa86204ae2144733d3d3b4043cd29a1f7be279eeb7ac1e6c5d78e13b33e59c6b878c449ea71771a5898abaaed33147df07685e8230dac89474838e16d27436f9a8f86c832ca314c93441f3bd1a9a8a31ed72c0195b5586b9b2d6cefbadf0881d21b21cd5359eb296352cb924de6c4a3b7f27d57bac8bbe39991d10d7f9a27e38336d47ec4f111911b0eb582dcf12089c642162934ee87b9dc8b5718b20a045064afd1e779ff2014073873e947fe5c0df945af10f98b962619020c29703fc6b34452075a37e7553783eb66b3a4724e909a01bd84a6e955cd31e92e36c644c6097dee5b01517efa6a393f2a4011440afc1c537d021b58d8a23f8abd4d27b81f6b05c49217ff4c54e7f9fb71b6be82e34ab83fe4f2bc728e61d060fa469cb1b1aa67cdc27e362db4127d5b6fe4196ac2e30bd6484ff36d1dc603785e1d8f96936ff2083440280e53366b3ff9a519e58bbfc51fea065cf5aa2e66d7e19986af6c5c4fbf49ad91ee9f290bb240844db6d14e06648be3d517ef286b29047a45c1e8de400329dc7305163bfbca89fb09c5a25a81182a950f4265696fd37966d7d42ecb2dbb8b3ecede825d36fd3c80a3f2ce9e65ed50f9d0a72ee8f5cc90c7634bfeded162aff6d1f68066c8e1fe31102a287ca8129b509383a17d3e6d9d5e804b6a1043d6053d6007c13a89cdd25a59bad755fafc79fd67a8394ff756b0fcb1dc7fe7366eb6882cbb59fb9dd73396f6e01bb2d3df1f09dfd9d0fd411f5f9fbd0ea98a4fd83602be2ae0c494e3132b6e0706fe565f707ff31e73fadcf30f76cebd8168b2968af0a758bdc4d08c1d52b108b9e835effc2d70f417b5bed1fde012215b966828249927a169e86ca2172466af50641b765d352852d564009ac6f4c3a67c89c6caae76554c3248c117d4f1ad5a3ed955c6eb4cea1f8f5e8333abf7234c353dea08e05c60418ff8ad8f0f4a0f7f784ca259bd20f3274a1e8aa3edf75fac74a1ba86bba452bcd0923ac05edead28efb6d14eb96abf8cd919f899ee7ecb380dacb37c905f41a514bd8bf4ef794fa0d431525a003a2ce8c09ec5e1e684655d0a3c04cce3f3fd88bd40876a3ff8fa0de9782de57eb014c2e272feaa00a4d6bc935f04db3a57f0341153e9a7d304110b9f448c0d5ddcec13f712adc21ada6f351083edb160c2feed88ad3a063321bbd9b99ebb3099a64980fbfc4e8ed9440ad074beadc706fb7ac4db10b02f88bc63f66b13d54c1ae10bb502394966e9b4d5185ab732def59462dc6552bf707edf5f868a875f0f1aa1e3731235c12035648841ca31e18a06135b3d55fa9d7dd8c5dcaf0cfa5dd40e3d520b6ff5cf8f2895f97bdcc80cec074e0f935156d1cb273aad30fa7a05466a90bb42e53cbc3f3ba49f96062fb9fa2b2d6fd6c7d4e48295f7446e938fc4de12a0a2a60e8490055ac64e7e6b01ecdd98ce19ae45f79c0161897734fc702954c5b49a2c70b20c1831a343f9ecbbdbdcdc4fa69429aa54fcdb11ceff393b71a02bcddb91b14fc18606544f7c1be21a914abee4ae4d81e07f1d7394478a0b8067afc76b373d7f04eb02e5fd3ac1ef0c71b8c562a27b98d48225cf242682489eccd0e6d44ac21d2f10ce45cb0c80bbec0c4fd90bec79961d5c9257bbdc16b117a35de8b2d6d74146cfe74d9ce0ee3d1eeaffc1faa037e3c1de72e66d4129ff20ddb7760772f213cc9b5debe637467423816d36dfbcf3db98e7b38f454ae0f83e69212fa1e4f852f097bfebe12ab9c145b3bcc0dced8aa7539031e8ffdd705cf5a447154cff344b089079b84479ab7d97a53b72e1319ebc13a04f6946c6cb0e5baafd8cf663ccd09a89f8c135ebd5b6f7e5f918716bbeab736bf6dfcb32afbd0995469bdc7fae2143427ba749dcabecb702006c73ef4e3d44b0ff55f423ad6d3d1acc76a6a44c1263c60482d19f838ed7635aad502878c5ea43e3fdf3e7b3eed58b21cd8744157a42d426fb8cb8868723d824c11be59eabc50314e0516a510cc84ae83bec03fe26593737028dcc60046277655cd63b8412487af0a227567fa96db7904841f59c85719b237db6e100d6c727d9313be383a3435458c1e1524b1cc13e6279ebe1f53c41819b88a7a00213d634fe840c0637b8c36f771e716cb119d05f559f33ef234bc788f4ba29c90f51e6fcb7a352a2f9d2c8e155566850740952a6e38d7e51276e4b3c3649e5238fd7fa62f80c2047b99e9cc2c4a5f23066dbfc6175b45a56a77bebae109675d26268b834c2b672a45492a4d83abf15dd6b6fcbc9a2a2138273df429e774dd360259a4bd6e9e525ec9ce814c54f7bb6cd10ade39d18f5d9c0db84de1ce627f7dfa38ecab1dbc861b0ee69761ee6f4fac5f3f7284fa6ff53cc355f31cb57635c6c4d6b9e1308ccea3a85dfa676abcb4917d7e06b123fd09413bb88fd4a5feedde8468b1b267cf3ebbd8e7107966a48a3392a9ea3980ead7bfe00b2b3129a23cd620e372811176e6664771399d4d95765be5119b6341cb05ae3477d87aabc14ff5fa9d003d02150406bd2e52a396f62fb53c92f2f9e73be1645b6c66d26cd3c8eaec5978ac0dcc249712cbf55fecb7b94c61bcd411c9299f11999aa355baea5d0acf1ab8fb82152a2e4fdfb0c1c970f73e52e570d004a0eb5a6ef5d221e917f38c15a0315063c83d3b13e87809207bd149f6f80444863e049f2bc37720c8785668c840792dcb68960986c4eefd5fbb25aa79dad23114db8480fd232acf2c530d0a5b2aafa28bc19efa20a791031214c870ada8a866a8aae71364de8a5aaf87c6bcda6af44c6bf8ff90cd9a5cbe14853d690d71b173df303370037d1452d92f70029c14e76c859299319aac6b5c7f3ec8d1f6fd681114d0371658bd14bd0d66624c5c3b3911b90f3ecdff58ff8784de46b7e09178794196345ddf044804db62643fb2a905708cfaea299e8f91bc5e7af8ed9ca86d5ed39c7a33fae6e40f187731b96d9f2023fa09e9f28d25c19ad7a1f1182c5c20be4585541c630c48401d7c1d882371553c4a49db0af79b83e7874f9cfaccaada9f893bbd5fa208ac3b6dcede0a3766ae33c558327039059fa36b279b5cd678168089111e0081357fdff6b7184bd1056e2e5c7bf5c9ca2760be6b1db0d3c157d749ccacf9b63814d17877ff5adada425607050af9b0e1f61aef525af4a7b7b894d5cbb9950d490b7c1b2094032791fa2cdf20555b42669aeef2c228cbcf321e99d1dc8acf5c879dc920d2b5058da8a0eea8add373ef6443147f69c1f7efca52ec6d0ec2407a767f3da57662accb20a243d03870520d44ef8dbeb965a5f6e99ce2965b64bada34c9b0cb6e9b5119c11f398ec5b9f2c1b5348421948ec326cb08f261ef0fb81e7a65a07d6c2797fbb52c8922c3599c014ab5afef363d214a2b267b3c683bbe26775e6de0bb403a89444556d86badd2c01ba76898f3170b3fc71b88675d6479dc1aec6b4a8dc82"}, 0x1015, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001200)='/dev/vsock\x00', 0x4280, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001240)={0x2, 0xd, 0x3ff, 0x1, 0x0}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000012c0)={0x0, 0x40, "7208ed24ace9f4865fe531e04c33d523aa3cbba4cd21623107be0558a594266de2978321bc1096838e496557690263ffa277d481739304e5f0cd05b8ec9e1918"}, &(0x7f0000001340)=0x48) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000001380)={r3, 0x2, 0x7fff, 0x400, 0x6, 0x200, 0x20, 0x1000, {r4, @in6={{0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, 0x7c0, 0x10001, 0xc6fc, 0x1, 0xffff}}, &(0x7f0000001440)=0xb0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000024c0)={&(0x7f0000001480), &(0x7f00000014c0)=""/4096, 0x1000}) r6 = add_key$keyring(&(0x7f0000002500)='keyring\x00', &(0x7f0000002540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$describe(0x6, r6, &(0x7f0000002580)=""/232, 0xe8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002680)={r5, 0x5, 0x2, [0x8, 0x2]}, &(0x7f00000026c0)=0xc) r8 = syz_open_dev$cec(&(0x7f0000002700)='/dev/cec#\x00', 0x1, 0x2) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x1d) r9 = dup2(r2, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25GETUID(r9, 0x89e0, &(0x7f00000027c0)={0x3, @null, r10}) r11 = syz_open_dev$audion(&(0x7f0000002800)='/dev/audio#\x00', 0x3, 0x1) setsockopt$inet_sctp6_SCTP_NODELAY(r11, 0x84, 0x3, &(0x7f0000002840)=0x101, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000028c0)={0xffffffffffffffff, r8, 0x0, 0x8, &(0x7f0000002880)='keyring\x00', 0xffffffffffffffff}, 0x30) r13 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002900)='/selinux/status\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002980)={r12, r13, 0x0, 0xd, &(0x7f0000002940)='/selinux/mls\x00'}, 0x30) pipe(&(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r14, 0x40405514, &(0x7f0000002a00)={0x6, 0x0, 0x4, 0x6}) ioctl$sock_ax25_SIOCADDRT(r9, 0x890b, &(0x7f0000002a40)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002ac0)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r15, 0x84, 0x73, &(0x7f0000002b00)={r7, 0x6533, 0x20}, &(0x7f0000002b40)=0x18) [ 175.931282] IPVS: ftp: loaded support on port[0] = 21 [ 176.479349] chnl_net:caif_netlink_parms(): no params data found [ 176.491535] IPVS: ftp: loaded support on port[0] = 21 [ 176.518065] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.525025] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.532301] device bridge_slave_0 entered promiscuous mode [ 176.539319] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.545973] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.553205] device bridge_slave_1 entered promiscuous mode [ 176.569682] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.578674] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.595213] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.602559] team0: Port device team_slave_0 added [ 176.608123] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.615599] team0: Port device team_slave_1 added [ 176.621137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 176.628580] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 176.691984] device hsr_slave_0 entered promiscuous mode [ 176.730338] device hsr_slave_1 entered promiscuous mode [ 176.790305] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 176.799128] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 176.807066] audit: type=1400 audit(1574045500.146:38): avc: denied { create } for pid=6972 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 176.832808] audit: type=1400 audit(1574045500.146:39): avc: denied { write } for pid=6972 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 176.842274] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.863085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.869928] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.876294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.883676] audit: type=1400 audit(1574045500.146:40): avc: denied { read } for pid=6972 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 176.921055] IPVS: ftp: loaded support on port[0] = 21 [ 176.985414] chnl_net:caif_netlink_parms(): no params data found [ 177.014812] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 177.021326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.032828] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 177.061695] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.068297] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.075831] device bridge_slave_0 entered promiscuous mode [ 177.092525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.100816] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.107861] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.117234] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.124346] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.132152] device bridge_slave_1 entered promiscuous mode [ 177.139194] IPVS: ftp: loaded support on port[0] = 21 [ 177.153868] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 177.159979] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.175657] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.186879] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.226884] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.234170] team0: Port device team_slave_0 added [ 177.245497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.253234] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.259574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.266660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.275075] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.281720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.299964] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.308152] team0: Port device team_slave_1 added [ 177.316522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.324514] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 177.353322] IPVS: ftp: loaded support on port[0] = 21 [ 177.422838] device hsr_slave_0 entered promiscuous mode [ 177.460341] device hsr_slave_1 entered promiscuous mode [ 177.500714] chnl_net:caif_netlink_parms(): no params data found [ 177.525597] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 177.533785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.542148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.549614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.564179] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 177.571739] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 177.583430] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 177.600142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.607705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.638100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 177.669353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.676941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.685732] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.698402] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 177.705656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.725973] chnl_net:caif_netlink_parms(): no params data found [ 177.735155] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.742148] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.749387] device bridge_slave_0 entered promiscuous mode [ 177.756417] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.763048] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.770188] device bridge_slave_1 entered promiscuous mode [ 177.814924] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.815678] IPVS: ftp: loaded support on port[0] = 21 [ 177.828515] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.843297] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 177.873292] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 177.895986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.903206] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.938080] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.945678] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.953062] device bridge_slave_0 entered promiscuous mode [ 177.964131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.976212] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.983635] team0: Port device team_slave_0 added [ 178.003490] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.009961] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.017435] device bridge_slave_1 entered promiscuous mode [ 178.034733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.042142] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.049603] team0: Port device team_slave_1 added [ 178.056956] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 178.076442] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.086173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.094857] chnl_net:caif_netlink_parms(): no params data found [ 178.112094] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 178.119420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.134791] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.155275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.162675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.176488] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 178.183561] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.199572] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.209476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.228252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.237504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.245469] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.251848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.258702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.266821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.274478] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.280863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.287914] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 178.295153] team0: Port device team_slave_0 added [ 178.306722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 178.352473] device hsr_slave_0 entered promiscuous mode [ 178.390380] device hsr_slave_1 entered promiscuous mode [ 178.430864] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 178.438045] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 178.447133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.454777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.464709] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 178.473064] team0: Port device team_slave_1 added [ 178.478893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 178.494748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 178.513013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 178.524922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.538570] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 178.547083] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.554080] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.561554] device bridge_slave_0 entered promiscuous mode [ 178.568738] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.578395] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.589584] device bridge_slave_1 entered promiscuous mode [ 178.624374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 02:51:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) r3 = fcntl$getown(r1, 0x9) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x1e, 0x37, 0x1, {0x1, 0x1, 0x100000000, r3}}, 0x1e) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 178.652451] audit: type=1400 audit(1574045501.986:41): avc: denied { create } for pid=7001 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 178.723464] device hsr_slave_0 entered promiscuous mode [ 178.751028] device hsr_slave_1 entered promiscuous mode [ 178.801570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.811371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.819658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.851018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.868457] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 178.876405] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 178.884415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.893502] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 178.901917] chnl_net:caif_netlink_parms(): no params data found [ 178.910835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.918519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.938977] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 178.953024] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 178.967740] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.977016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.985052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 02:51:42 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet6(0xa, 0x2, 0x0) close(r4) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) r6 = open(&(0x7f0000000100)='./bus\x00', 0x800000141042, 0x4) ftruncate(r6, 0x200006) r7 = socket$rxrpc(0x21, 0x2, 0xa) sendfile(r7, r6, 0x0, 0xe) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000000)={0x8001009, 0x1, 0x2}) r8 = open(&(0x7f0000000100)='./bus\x00', 0x800000141042, 0x0) ftruncate(r8, 0x200006) sendfile(r4, r8, 0x0, 0x8000fffffffe) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(r10, 0x0) dup3(r11, r10, 0x0) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000040)={r10, 0x0, 0x8, 0x1, 0xfffffffffffffd56}) fcntl$dupfd(r4, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000100)={0x0, 0xfe, 0x185, 0x0}) [ 179.000822] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 179.016598] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 179.029600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.049678] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 179.058723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.073697] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.081978] team0: Port device team_slave_0 added [ 179.088025] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.095878] team0: Port device team_slave_1 added [ 179.101285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.108728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.137530] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.159514] md: could not open unknown-block(254,389). [ 179.167004] md: md_import_device returned -6 [ 179.182972] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 179.197344] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.223745] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 179.236906] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.244603] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.252041] device bridge_slave_0 entered promiscuous mode [ 179.258338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.265750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.276913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.332397] device hsr_slave_0 entered promiscuous mode [ 179.361725] md: could not open unknown-block(254,389). [ 179.367249] md: md_import_device returned -6 [ 179.374142] device hsr_slave_1 entered promiscuous mode [ 179.400956] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.407350] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.414738] device bridge_slave_1 entered promiscuous mode [ 179.435944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.443492] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready 02:51:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffec2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000040)={[{0xffff7ffb, 0x54}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000008d16000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000e000000000000000000000010000030bb28f68f6c15cd0000000000000000000000000000000000000000000000000000000000000001080000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000050820b7ca5b66bdb0000000800000000768a2f0d9bba28ca52955213b1539af474e758618fab25615d98070ab686e2dfb83918b7280774c23e2b4b2670357e87bdf2"]) [ 179.452709] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 179.465470] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 179.478571] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.485968] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 179.507820] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 179.529756] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 179.531046] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 179.554249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.562003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.585141] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 179.593021] 8021q: adding VLAN 0 to HW filter on device team0 02:51:42 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8931, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4001, 0xc1847e3fa9386aca) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xfffffffffffffe9d) inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2000203) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0x7fffffa7) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 179.607933] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 179.617049] team0: Port device team_slave_0 added [ 179.633094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.651699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 179.664539] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 179.674768] team0: Port device team_slave_1 added [ 179.691298] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 179.704156] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 179.713453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.724738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.732159] audit: type=1800 audit(1574045503.056:42): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=3 res=0 [ 179.760838] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.767256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.774309] audit: type=1804 audit(1574045503.056:43): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir720961527/syzkaller.2Rx50x/4/file0/file0" dev="loop0" ino=3 res=1 [ 179.802140] audit: type=1800 audit(1574045503.056:44): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="loop0" ino=3 res=0 [ 179.802555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.833031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.842160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 179.850052] hrtimer: interrupt took 46219 ns [ 179.856729] audit: type=1804 audit(1574045503.166:45): pid=7038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir720961527/syzkaller.2Rx50x/4/file0/file0" dev="loop0" ino=3 res=1 [ 179.861350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.889965] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 179.898409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 179.913538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.925541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.933896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.941692] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.948100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.961407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 179.979900] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 180.014379] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 180.022963] FAT-fs (loop0): Filesystem has been set read-only [ 180.035268] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 17) [ 180.051034] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 180.058753] 8021q: adding VLAN 0 to HW filter on device team0 02:51:43 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x800, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="2205509705f4942ee8f2060eba5d1f6633", 0x11}, {&(0x7f0000000080)="7a73ef3bc898f64b549e8b95d5c8", 0xe}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f0000000100)="2628cc4b8a432fdbbdfc22bfaebd4ab759fe6ff8bbdeab27582f1ab9ff0915ae3695647fbf1244c9111bfa254c", 0x2d}, {&(0x7f0000000180)="b81e2a4c897498ee5c9f63887b3d01b5987774e9c7a0ce00756b1eac2cd66839a5645ae8ac97f678de2cbe53e0c6cc7f11c6a6a67e578402efca81dc2d61ba5730", 0x41}, {&(0x7f00000005c0)="20a73a38ddd92023e1af099756e3c2ebb50fecef19d3abb7bf5116dd60941c90f3a93faabd2579f740937da56d567c8ff7d53686a38308f59cc31be724a25b1adff666e3176649f2369fc0e4f481d970f5b71f9d9f842fe9e8ed1e5e1360cc22f231fbc6dfe1", 0x66}], 0x6}}], 0x1, 0x8040) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000400)={r3, 0x45, "ed676ee4279ba890693cc4416c74247ae359092c3e8ee700f78cf49416edf94e43faddee1db4233431561e4c50ec607308898e79c27b2efb307b35fff6de175de511141cd9"}, &(0x7f00000002c0)=0x4d) pipe2(0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001140)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8d3a4321c1e54b9b47b4995a5bee657b2d8542698698db7fecec19e45b141e790ec062a9c884ebc05009a9bf7030b59eaa2f05cdf44c9fe4c0d42a25757e795eb2817f27a9abfeb45b5d01387ae09c50671fda36c167d87ed24710f76ffbcd612e063355406fc226a3f9e9cd0f3c7c5ea38fe032893b0b9a3980b27c6c62151d09afc95020198a73b601654174432c0c0ca8a624d749aded1c6250c6885127e69ba048aa2919ed95644defb09e75ef6d35fa70a9e9de152d7c57a5d41a370d8cb506efa5d76f78c25f6c0aebe834ac8", 0xd0}, {&(0x7f0000000140)="8d93682d3645a66298b06a18e8eb4933f47d743f932f1c4c1236", 0x1a}, {&(0x7f0000000180)="98a15617168925fd259138ac85bf9d25602e2ca282bbd0b27c9561fdc7d06ce6675277c1b4cf71d41e7d72034bb32daa371c4cb01c29631d51ff6d8e88be74100c19fdfe734be2d34ecda154faa057c0ab516cb93ea46c1e943b8ea95164c839059df051d08211725511599babd248063065383e414033bb", 0x78}, {0x0}], 0x4}], 0x1, 0x8001) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x4}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x0) dup3(r7, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = dup3(r5, 0xffffffffffffffff, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) [ 180.065230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.075646] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.144626] device hsr_slave_0 entered promiscuous mode [ 180.180396] device hsr_slave_1 entered promiscuous mode [ 180.221004] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 180.228208] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 180.236080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.245685] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 180.254059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 02:51:43 executing program 2: syz_mount_image$ntfs(&(0x7f0000000500)='ntfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="662d61736b3d30303030303030303030303030303030303030303030302c64697361626c655f7370617250b53d6e6f2c6572725f7a6f6e655f6d756c7469706c6965723d3078303030303030303030303030303030302c73686f775f7379735f66696c65733d6e6f2c756d61736b3d30303030303030303030303030303030303030303030302c666d61736b3d30303030303030303030303030303030303030303030302c6769643d"]) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) [ 180.265303] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.273249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.285372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.299255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.308447] ntfs: (device loop2): parse_options(): Unrecognized mount option f-ask. [ 180.316949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.324416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.332436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.343465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.351726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.359388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.368267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.376447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.385208] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.391633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.398583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.406646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.414322] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.420721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.427673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.436025] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.443198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.454049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 02:51:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000003100)) r4 = eventfd2(0x0, 0x80001) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/38, 0x26}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000004c0)=""/245, 0xf5}, {&(0x7f00000003c0)=""/115, 0x73}], 0x5, &(0x7f0000000440)}, 0x2) ftruncate(r4, 0x2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000100)={0x0, r4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/\xe7\xa8v/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f00003b9fdc)) r10 = syz_open_pts(r9, 0x0) dup3(r10, r9, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000000)=0xa) recvmmsg(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000680)=@pppol2tpv3, 0x80, &(0x7f0000000440)=[{&(0x7f0000000700)=""/90, 0x5a}, {&(0x7f0000000780)=""/71, 0x47}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000800)=""/213, 0xd5}], 0x4}, 0x4}, {{0x0, 0x0, &(0x7f0000001ac0), 0x0, &(0x7f0000001b00)=""/115, 0x73}, 0x9}, {{&(0x7f0000001b80)=@can, 0x80, &(0x7f0000002000)=[{&(0x7f0000001c00)=""/192, 0xc0}, {&(0x7f0000001cc0)=""/23, 0x17}, {&(0x7f0000001d00)=""/97, 0x61}, {&(0x7f0000001d80)=""/198, 0xc6}, {&(0x7f0000001e80)=""/134, 0x86}, {&(0x7f0000001f40)=""/38, 0x26}, {&(0x7f0000001f80)=""/123, 0x7b}], 0x7, &(0x7f0000002080)=""/37, 0x25}, 0x4}, {{&(0x7f00000020c0)=@tipc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002140)=""/227, 0xe3}, {&(0x7f0000002240)=""/238, 0xee}, {&(0x7f0000002340)=""/107, 0x6b}, {&(0x7f00000023c0)=""/122, 0x7a}, {&(0x7f0000002440)=""/114, 0x72}], 0x5, &(0x7f0000002540)=""/75, 0x4b}, 0x8}, {{&(0x7f00000025c0)=@hci, 0x80, &(0x7f0000002980)=[{&(0x7f0000002640)=""/78, 0x4e}, {&(0x7f00000026c0)=""/133, 0x85}, {&(0x7f0000002780)=""/94, 0x5e}, {&(0x7f0000002800)=""/140, 0x8c}, {&(0x7f00000028c0)=""/11, 0xb}, {&(0x7f0000002900)=""/13, 0xd}, {&(0x7f0000002940)=""/41, 0x29}], 0x7, &(0x7f0000000900)=""/55, 0x37}, 0x3ff}, {{&(0x7f0000002a40)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002ac0)=""/63, 0x3f}, {&(0x7f0000002b40)=""/53, 0x35}], 0x2, &(0x7f0000002bc0)=""/87, 0x57}, 0x456}, {{&(0x7f0000002c40)=@nfc_llcp, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002cc0)=""/75, 0x4b}, {&(0x7f0000002d40)=""/34, 0x22}, {&(0x7f0000002d80)=""/10, 0xa}, {&(0x7f0000002dc0)=""/10, 0xa}], 0x4, &(0x7f0000002e40)=""/198, 0xc6}, 0x7}], 0x7, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) preadv(r11, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) [ 180.484601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.492439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.501033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.524546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 02:51:43 executing program 0: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) rt_tgsigqueueinfo(r0, r1, 0x18, &(0x7f0000000080)={0xe, 0xff, 0x6}) r2 = socket(0x9, 0x4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xffffffffffffffe0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000280), 0x4) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r8, 0x200004) sendfile(r7, r8, 0x0, 0x80001d00c0d0) lstat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) quotactl(0x5, &(0x7f00000001c0)='./file0\x00', r12, &(0x7f00000002c0)="b7a4d9dd6ff566bd0dca24201f1a414b8f141202498c71830f") mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)=ANY=[@ANYBLOB='mode=00000000000000000001000,mode=00000000000000000100000,mode=00000000000000000000004,euid<', @ANYRESDEC=r10, @ANYBLOB=',permit_directio,smackfsdef=group_id,fowner>', @ANYRESDEC=r9, @ANYBLOB=',uid<', @ANYRESDEC=r12, @ANYRESHEX]) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@loopback, 0x4e24, 0x1f6, 0x4e23, 0x0, 0x0, 0x0, 0x20, 0x84, r4, r9}, {0x1, 0x2, 0x5, 0x8, 0x8000, 0x627, 0x1, 0x5}, {0x7, 0x81, 0x2, 0x3}, 0x78e8, 0x6e6bb8, 0x0, 0x0, 0x1, 0x4}, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4d4, 0x32}, 0x2, @in6=@local, 0x0, 0x1, 0x3, 0x3, 0x1f, 0x7, 0x2}}, 0xe8) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) inotify_add_watch(r6, &(0x7f0000000100)='./file0\x00', 0x83000240) write(r2, &(0x7f0000000140)="2400000052001f0014f9f407000904000a00071004000100feffffff0800000000000000", 0x24) [ 180.556290] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 180.563131] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.574748] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 180.584335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 180.592355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.600591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.608652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.617705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 180.629170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.637052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.648121] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 180.659093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.669511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 180.685761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 180.698696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.706998] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.715229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.723656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.731745] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.738162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.745873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.765825] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 180.778710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 180.788998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.803321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.810979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.818800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.828855] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.835277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.852870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 180.863633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 180.873904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.886293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.894352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.908781] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 180.937225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.951537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 180.959987] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 180.971690] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 180.977741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.990177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.998027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.005326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.014384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 181.024219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.051719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.059638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.068332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.078749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.088000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.099742] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.107508] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 181.115335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.125221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 181.134825] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.143134] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 181.150961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.158611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.166369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.173585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.181286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.188424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.199159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 181.214080] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 181.222217] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.228807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.236817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.246736] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 181.253371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.264429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 181.277188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.286659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.299197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.307430] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.313945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.322507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.332356] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.344373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 181.354645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.363117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.371028] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.377365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.384512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.395536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 181.411099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.421302] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 181.435551] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 181.446343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.465715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.478574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.486686] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 181.501140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 181.508958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.527749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.535582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.543732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.556376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.566014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 181.573445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.582058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.593995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 181.602070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.609904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.619557] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 181.627258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.651615] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 181.675880] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 181.687598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.696045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.708001] 8021q: adding VLAN 0 to HW filter on device batadv0 02:51:45 executing program 3: syz_open_dev$usbfs(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = dup3(r0, r3, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$SCSI_IOCTL_PROBE_HOST(r11, 0x5385, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000000c0)={"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"}) openat$full(0xffffffffffffff9c, 0x0, 0x442600, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x8}, 0x90) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000000)=0x100005) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 182.556132] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns 02:51:46 executing program 2: stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) r1 = socket$tipc(0x1e, 0x0, 0x0) r2 = getpgrp(0x0) setpriority(0x0, r2, 0xffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000002c0)=""/246) r4 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r3, r4, 0x0, 0x102002700) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), 0x0) 02:51:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdf}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10143c37}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000006600cde72bbd7000fcdbdf25000000000000000008ec4873f08d884c28754c57c7f954323c6da3804697746f163dd94d0a5274d127f15f54c8461117a42f3f16439fa88cedda79fc2f41de5a9ca4cdd0634a6c9add144e6bc177945cf127a4159d10407007713e72366dbb786da3904c5adbe057a03a9233c1dd870636851f9cd0ad90c1933222f9f4278d555580a9f041b08f3e2ba9b3d66c85718ddf24b06ff6073806612ab2de5f7ccf24a83a993741cb78100f1a39b638e35d637d999ce32cb38923800456ad7dd23747", @ANYRES32=r6, @ANYBLOB="06000c00050005000700f1ff08000b000000000008000b000400000008000b005a00000008000b000800000008000b000000000008000b0009000000"], 0x58}, 0x1, 0x0, 0x0, 0x8042}, 0x20000000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 02:51:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="3e260f090f20e035000002000f22e0260f205bf78d7132713279e6c3c68503000000123e0f38f10bb9490900000f32f3e1000fae44ee08", 0x37}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000240)={r8}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={r8}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0xffffffffffffff7d, 0x0}}], 0x1, 0x0) 02:51:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000006500000000000000950000000000000b9500000000000000"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r2 = accept(r0, 0x0, &(0x7f0000000080)) accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r5, 0x4) r6 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000180)={0xa, 0x0, &(0x7f0000ffa000/0x3000)=nil}) 02:51:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x200, 0x200000) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000080)={@loopback, @initdev, @remote}, &(0x7f00000000c0)=0xc) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000b6300000f630c400000000000100000000000000000"], 0x3, 0x20000000, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x34c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, [], 0x17}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @empty, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @loopback, 0xa17f}}}}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x100, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x22}, 0xc3b}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @mcast2, 0xffffff0a}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, [], 0x20}, 0x8fd1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xe62d, @dev={0xfe, 0x80, [], 0x11}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @local, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x643}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa2e}]}, @TIPC_NLA_BEARER={0x14c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3675, @local, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x21}, 0xc92}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x17}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @loopback, 0x9419}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xc6, @mcast1, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xff8000, @empty, 0x1}}}}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400000}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x40800}, 0x2008000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) accept$alg(r5, 0x0, 0x0) recvmsg(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 02:51:46 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000100)=0x54) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="700100002400ffffff7f00"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x170}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 182.955421] kvm: emulating exchange as write [ 182.957358] kauditd_printk_skb: 9 callbacks suppressed [ 182.957365] audit: type=1400 audit(1574045506.286:48): avc: denied { set_context_mgr } for pid=7150 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 183.012692] binder: 7150:7152 unknown command 4 [ 183.017766] binder: 7150:7152 ioctl c0306201 20000080 returned -22 02:51:46 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f0000000100)=0x54) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="700100002400ffffff7f00"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x170}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 02:51:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r3, 0x0) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000400)=""/179) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x18, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) write$cgroup_subtree(r6, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700010000a50e11d5006324e200"]) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x1001, 0x0, 0x0, 0x0, 0x2ca8}, 0x0, 0x0, 0xffffffffffffffff, 0xbd837be91bb220f4) r7 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r8 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r9 = dup2(r8, r7) r10 = creat(&(0x7f0000000380)='./file0\x00', 0x16b) close(0xffffffffffffffff) write(r10, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 02:51:46 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x0) r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = syz_open_procfs(0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000380)="0c4f4d16cf2f3a2dd8a5046790a60c91e487dc9ca281434dbc169c6555a654da5e42c953490634b417ec9535653162fc5730d4c8dab3e136550ed7d31fa8d7094afd6e5154349155e6ef7e5fb08d79c283188a3f28548ab4366e6863ba5561aedbd1ee3f9a2c5646e4a9c2806b231528bca7ee2134e39966c40bcb1371a7e7691672a8dc9bda07175f11a9160cba3f0ddb78db3b2e184e1e9aa371691df9f49a5e3343bce4e4b8a2c80831b63d95ed57cf89982b317abf1cf8a71078d00dd5fa9151c142fa4bb765d503150f5f6f34284c7480a5091e9b246e", 0xd9) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)={0x0, 0xb, 0x4, 0x4, {0x0, 0x7530}, {0x2, 0x0, 0x81, 0x14, 0x0, 0x6, "06000300"}, 0x0, 0x5, @planes=&(0x7f00000000c0)={0x7, 0x7fe, @mem_offset=0x1a0, 0x6}, 0x4}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x4, &(0x7f0000000540)={0x0, 0x989680}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'U+', 0x7}, 0x28, 0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x4000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1, 0x80000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={r7}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) 02:51:46 executing program 3: syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8931, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = shmget(0x3, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000800)=""/4096) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4001, 0xc1847e3fa9386aca) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xfffffffffffffe9d) inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2000203) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffa7) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 183.416361] binder: 7150:7165 unknown command 4 [ 183.423129] binder: 7150:7165 ioctl c0306201 20000080 returned -22 [ 183.442954] audit: type=1400 audit(1574045506.776:49): avc: denied { setopt } for pid=7172 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 02:51:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x200, 0x200000) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000080)={@loopback, @initdev, @remote}, &(0x7f00000000c0)=0xc) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000b6300000f630c400000000000100000000000000000"], 0x3, 0x20000000, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x34c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80, @dev={0xfe, 0x80, [], 0x17}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @empty, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @loopback, 0xa17f}}}}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x100, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x22}, 0xc3b}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @mcast2, 0xffffff0a}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, [], 0x20}, 0x8fd1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xe62d, @dev={0xfe, 0x80, [], 0x11}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @local, 0xffffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x643}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa2e}]}, @TIPC_NLA_BEARER={0x14c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3675, @local, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x21}, 0xc92}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0x17}, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @loopback, 0x9419}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xc6, @mcast1, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xff8000, @empty, 0x1}}}}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400000}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x40800}, 0x2008000) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) accept$alg(r5, 0x0, 0x0) recvmsg(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 02:51:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdf}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10143c37}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000006600cde72bbd7000fcdbdf25000000000000000008ec4873f08d884c28754c57c7f954323c6da3804697746f163dd94d0a5274d127f15f54c8461117a42f3f16439fa88cedda79fc2f41de5a9ca4cdd0634a6c9add144e6bc177945cf127a4159d10407007713e72366dbb786da3904c5adbe057a03a9233c1dd870636851f9cd0ad90c1933222f9f4278d555580a9f041b08f3e2ba9b3d66c85718ddf24b06ff6073806612ab2de5f7ccf24a83a993741cb78100f1a39b638e35d637d999ce32cb38923800456ad7dd23747", @ANYRES32=r6, @ANYBLOB="06000c00050005000700f1ff08000b000000000008000b000400000008000b005a00000008000b000800000008000b000000000008000b0009000000"], 0x58}, 0x1, 0x0, 0x0, 0x8042}, 0x20000000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) [ 183.729227] audit: type=1800 audit(1574045507.036:50): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16556 res=0 [ 183.768367] audit: type=1804 audit(1574045507.046:51): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir765330203/syzkaller.AyjKPI/2/file0/file0" dev="sda1" ino=16556 res=1 [ 183.805516] audit: type=1800 audit(1574045507.046:52): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="file0" dev="sda1" ino=16556 res=0 [ 183.835888] audit: type=1804 audit(1574045507.056:53): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir765330203/syzkaller.AyjKPI/2/file0/file0" dev="sda1" ino=16556 res=1 [ 183.895805] binder: 7201:7203 unknown command 4 [ 183.904385] binder: 7201:7203 ioctl c0306201 20000080 returned -22 02:51:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdf}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r5, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10143c37}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000006600cde72bbd7000fcdbdf25000000000000000008ec4873f08d884c28754c57c7f954323c6da3804697746f163dd94d0a5274d127f15f54c8461117a42f3f16439fa88cedda79fc2f41de5a9ca4cdd0634a6c9add144e6bc177945cf127a4159d10407007713e72366dbb786da3904c5adbe057a03a9233c1dd870636851f9cd0ad90c1933222f9f4278d555580a9f041b08f3e2ba9b3d66c85718ddf24b06ff6073806612ab2de5f7ccf24a83a993741cb78100f1a39b638e35d637d999ce32cb38923800456ad7dd23747", @ANYRES32=r6, @ANYBLOB="06000c00050005000700f1ff08000b000000000008000b000400000008000b005a00000008000b000800000008000b000000000008000b0009000000"], 0x58}, 0x1, 0x0, 0x0, 0x8042}, 0x20000000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ff9000/0x4000)=nil) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 02:51:47 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bind$x25(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) ftruncate(r1, 0x200003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0x1f, 0x3, 0xff, 0x1, 0x3}, 0x3}, 0xa) [ 184.241542] audit: type=1804 audit(1574045507.576:54): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir765330203/syzkaller.AyjKPI/2/file0/file0" dev="sda1" ino=16556 res=1 02:51:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffff7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x1c18a0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:51:47 executing program 3: syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8931, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = shmget(0x3, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000800)=""/4096) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4001, 0xc1847e3fa9386aca) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xfffffffffffffe9d) inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2000203) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffa7) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 184.295058] audit: type=1804 audit(1574045507.606:55): pid=7194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir765330203/syzkaller.AyjKPI/2/file0/file0" dev="sda1" ino=16556 res=1 02:51:47 executing program 4: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x8b3, 0x1c1883) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x1ff, 0x4, 0x3f, 0x8}, 0xf, [0x101, 0x3, 0x80000001, 0xffffffff, 0x5, 0x400, 0x1, 0x4, 0x40, 0x80000000, 0x10000, 0x3, 0x1f, 0x5, 0xff, 0x9, 0x4, 0x1000, 0x7, 0x7, 0x3, 0x4, 0x7, 0xece, 0x693, 0xce, 0x5, 0x3, 0x1, 0xfffff801, 0x9b, 0xc1, 0x8, 0x4, 0x8, 0x42, 0x9, 0x200, 0x5, 0x3, 0x0, 0x7, 0x5, 0x7ff, 0x917, 0x3, 0x1000, 0x8, 0x80000000, 0x4000, 0x9, 0x100, 0x0, 0xfbe, 0x3, 0x0, 0x2a96, 0x9, 0x8, 0xde1, 0x7, 0x0, 0x6, 0xffff0001], [0x101, 0x0, 0x40, 0x3, 0xfffffffe, 0x2, 0x7, 0x36c63856, 0x42e, 0x1, 0x8, 0x5, 0x3, 0x2, 0x36, 0x9, 0xf2, 0x0, 0x0, 0xfff, 0x624, 0x4, 0x7, 0x6, 0x5, 0x3, 0xc, 0x4, 0x7, 0x2, 0x80000000, 0x1, 0xf09bb33, 0x40, 0x8000, 0x80000001, 0x401, 0x200, 0x1, 0x0, 0x3ff, 0x60, 0x2, 0x8, 0x3, 0xa0, 0xbf35, 0x0, 0x10000, 0x2d70, 0x94d, 0x81, 0xbd, 0x1, 0x0, 0x7, 0x0, 0x0, 0x5, 0x4, 0x101, 0x5, 0x0, 0x1], [0x6, 0x7, 0x6eed, 0xe82e, 0xe2, 0x8001, 0x1f, 0xfffffffb, 0x8001, 0x4, 0x3, 0x8, 0x1f, 0x1ff, 0x5, 0x9, 0x3, 0xa2fb, 0x3f, 0x1874000, 0x1, 0x0, 0x6, 0x3f, 0x7, 0xffff, 0x9a7, 0x100, 0x67d4, 0x2, 0x2, 0x8001, 0x8, 0x80000001, 0x9aa, 0x4, 0xb48d, 0x3, 0x0, 0x7, 0x7fffffff, 0x2, 0x3, 0x1, 0x1ff, 0x200, 0x1, 0xfff, 0x6, 0xefb, 0x2f51, 0x6, 0xfffffff7, 0x2, 0x2, 0x4, 0x401, 0x5, 0x4, 0x7f, 0xf3, 0x9, 0x7fffffff, 0x8], [0x524c7b15, 0x0, 0x6, 0x8, 0x8, 0x8, 0x9, 0x9, 0x6, 0x80, 0x2, 0x9, 0x0, 0x40, 0x83, 0xffffffff, 0x401, 0xffff, 0x7ff, 0x8e2a, 0x4, 0x8, 0x1, 0x101, 0x0, 0x10001, 0x4, 0x6, 0xfffffffe, 0xd0, 0x8, 0x0, 0x5, 0xfffffff9, 0x6, 0xdc6, 0x9, 0xfffffffd, 0x5, 0x4, 0x7f, 0x6, 0x3, 0x10000, 0x1, 0x3ff, 0x2eb, 0x6, 0x5, 0x5, 0x2, 0x401, 0xfffffeff, 0x80000000, 0x10000, 0x0, 0x9, 0x0, 0x2, 0xff, 0x2, 0x1, 0x3ff, 0x40]}, 0x45c) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000240)={0x200, {0x2, 0x38b, 0x9, 0x0, 0x8, 0x100}}) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r6, 0x0, 0x0, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x2200, 0x0) timerfd_gettime(r7, &(0x7f0000000300)) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000280)={0x4, 0x8, 0x1, r2}) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000180)) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$input_event(r3, &(0x7f0000000080)={{0x0, 0x2710}, 0x2, 0x8, 0x1}, 0x18) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x52f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, 0x45c) [ 184.430528] audit: type=1804 audit(1574045507.616:56): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir765330203/syzkaller.AyjKPI/2/file0/file0" dev="sda1" ino=16556 res=1 [ 184.494257] input: syz1 as /devices/virtual/input/input5 02:51:48 executing program 1: r0 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) kexec_load(0x0, 0x10, &(0x7f00000005c0)=[{0x0, 0x13c000, 0x0, 0x3e0000}], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x1, 0x2, 0x1, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r4) [ 184.767610] input: syz1 as /devices/virtual/input/input6 02:51:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffff7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x1c18a0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 184.824335] audit: type=1400 audit(1574045507.696:57): avc: denied { map } for pid=7224 comm="syz-executor.0" path="/root/syzkaller-testdir720961527/syzkaller.2Rx50x/9/file0/bus" dev="ramfs" ino=26597 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 02:51:48 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x4a, 0x8, '9P2000.L'}, 0x15) syz_emit_ethernet(0x8a, &(0x7f00000000c0)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "1100", 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @window={0x3, 0x23}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "00000000000000000000000701000080"}, @md5sig={0x13, 0x12, "0000b4d0ceb3a8d98f5d9ffd47fdc19a"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) [ 185.014826] input: syz1 as /devices/virtual/input/input8 [ 185.063361] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 185.096267] syz-executor.4 (7263) used greatest stack depth: 23248 bytes left 02:51:48 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000002c0)="bd87deccbc002438c96fd51fb4a5e0e3e4def8b749a009f40c0620575e3c49f626bbfa24138eedf25fd6bec509a400f4eff679ad5b49a289e0960808e6bc5a8ea38a67029516e813df10cf2847eadfd044627514b71ef6cce0c941390450f1152d643d933cc3c736841093e151e93e50b8c95564cbc5cea4001fd380d22adf429da13318f53d98734193ea7cbbcc620a594e18d1673499fcc0ba5f29933aee23478be4fd8115d22c97cb8cb9db0bce297ad51ee365638427906d715eadfae9c0ab3d7ca6f4f3daf67f3d4e696db323190da7c2872f84", 0xd6) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0x0, 0x6, 0x0, [], [{0x5, 0x6, 0x86, 0x6, 0x2, 0x401}, {0x9, 0x4, 0x2, 0x0, 0x8, 0x1}], [[], [], [], [], [], []]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='attr/soakcreat\xc7\x8d') 02:51:48 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2, 0x3, 0x5, 0x0, 0x80}, 0x20) 02:51:48 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) bind$x25(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) ftruncate(r1, 0x200003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) bind$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, {0x1f, 0x3, 0xff, 0x1, 0x3}, 0x3}, 0xa) 02:51:48 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="800003000000000001044080"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0185879, 0x20000000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r3 = socket$isdn(0x22, 0x3, 0x2) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100), 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socketpair(0x200000000000f, 0x0, 0x0, &(0x7f00000000c0)) socket$kcm(0xa, 0x0, 0x11) recvmsg(0xffffffffffffffff, 0x0, 0x2020) socket$nl_crypto(0x10, 0x3, 0x15) creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080)='security.ima\x00', 0x0, 0xffed, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0x9) 02:51:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) readv(0xffffffffffffffff, 0x0, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 02:51:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000580)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f00000015c0)={0x8, "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", 0xfffffffffffffde9}, 0x10000005c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r4, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) recvfrom$inet(r4, &(0x7f0000000080)=""/177, 0xb1, 0x100, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') write$UHID_INPUT2(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x84) 02:51:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94\x00\x00\x00\x00\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77') lseek(r2, 0x203ffffd, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) fsetxattr$security_selinux(r5, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:tetex_data_t:s0\x00', 0x22, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) close(0xffffffffffffffff) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r6, 0x200004) sendfile(0xffffffffffffffff, r6, 0x0, 0x80001d00c0d0) ioctl$EVIOCSREP(r6, 0x40084503, &(0x7f0000000000)=[0x7ff, 0x8]) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357) 02:51:48 executing program 3: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x1d, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000200)=""/21) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x1d, 0x0, 0x0, 0x100, 0x6, 0x6, 0x4, 0x80, 0x0, 0xfb, 0x81, 0x0, 0x10001, 0x0, 0x7, 0x1f, 0x92}) socket(0x10, 0x2, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x400, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) 02:51:48 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r3 = dup(r0) write$uinput_user_dev(r3, &(0x7f0000000980)={'syz0\x00'}, 0x45c) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:51:48 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x84804, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="16bc9acac65c60926c47aeccbcfebaf81de7adca9bf9b44ce45c3109fe0d7b4bf081967468dd073f4b1e9654cfdaa59e4b6664b417da1aedab91fce911ecf22aa59e"], 0x38) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) [ 185.631049] input: syz0 as /devices/virtual/input/input9 [ 185.749182] input: syz0 as /devices/virtual/input/input10 02:51:49 executing program 4: r0 = socket(0x10, 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x396282, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000030000100000000000000000000000000380001003400010000000c1800037b7f1816bda49fcf4856000000000000000000000000000062786d70448dd36872539b6200"], 0x4c}}, 0x0) [ 185.937200] overlayfs: filesystem on './file0' not supported as upperdir 02:51:49 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8d}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = semget$private(0x0, 0x207, 0x0) semop(r5, &(0x7f0000000000)=[{0x2, 0x8000}, {0x0, 0x5, 0x800}, {}, {0x0, 0x0, 0x3800}], 0x156) semctl$IPC_RMID(r5, 0x0, 0x0) semctl$IPC_INFO(r5, 0x2, 0x3, &(0x7f0000000340)=""/9) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) mkdir(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0xb7}, 0xfffffffffffffe02) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f0000000140)="73844ae89d", 0x5, 0x0, 0x0, 0x0, r0}]) r8 = socket(0x0, 0x0, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, 0x0, &(0x7f0000000140)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r8, 0x29, 0x45, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./bus\x00', 0x6, 0x2) 02:51:49 executing program 2: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x800, 0x6) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r2, &(0x7f0000000800)="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", 0x325a9269340c5f6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0x4}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x2000080001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x80045113, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0xfffe, 0x0, 0x4, 0x200, 0xa90, 0x0, 0x9}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000340)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x12}, 0x90) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xc6402, 0x0) write(r6, &(0x7f0000000600)="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", 0x200) sendfile(r6, r7, 0x0, 0x7fffffa7) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x1bf) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 186.029185] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 02:51:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) r2 = dup(0xffffffffffffffff) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x2007fff) keyctl$assume_authority(0x10, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) bind$packet(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x40400}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') utime(&(0x7f0000000040)='./bus\x00', &(0x7f0000000180)={0x3, 0x100000000}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) keyctl$clear(0x7, r0) 02:51:49 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="ffffffffffffffde280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0004000000000080"], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8d}, 0x98) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0xb0, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x1c, @rand_addr="b99f0001620c4eac3a0136860484030d", 0x10001}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x9, @remote, 0x6}, @in6={0xa, 0x4e21, 0x7, @loopback, 0x1}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x3f, @ipv4={[], [], @multicast2}, 0xfffffffc}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}]}, &(0x7f0000000300)=0x10) [ 186.281757] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:51:49 executing program 1: add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000300)='keyring\x00', 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x6, 0x1, 0x6, 0x80, 0xafd}, 0xc) r4 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0x261801) syz_open_dev$admmidi(0x0, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f00000006c0), 0x4000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x0, 0x7, [0x8, 0x4, 0x744, 0x0, 0x0, 0x4, 0x6]}, &(0x7f0000000180)=0x16) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x109, 0x8, 0x1, r8}, &(0x7f0000000280)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="72e4bbf9a0683f63042aa892ff00926f4e23abeb2fcf4dc800876d5265303800"/47], 0x2f) sendfile(r1, r1, 0x0, 0x40fdf) 02:51:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="1713fb4f4aab1e7a831f9224466cf0b2", 0x10) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000100), 0xa0, 0x0) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 186.395866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.427675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:51:49 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) sendfile(r0, r2, 0x0, 0x20) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x9, 0x3}, {0xfffd, 0x1, 0x0, 0x8}]}) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) [ 186.631501] device veth3 entered promiscuous mode [ 186.636871] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready [ 186.659351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.677834] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.688744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:51:50 executing program 3: mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x80200, 0x0) mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000540)={0x0, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000002100010000000000000000000200000000000000000000000b000000"], 0x20}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7f, 0x42a000) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000180)) link(0x0, 0x0) clock_adjtime(0x5, &(0x7f0000000340)={0xa5, 0x0, 0x7ff, 0x4a, 0x7, 0x0, 0x8, 0x6, 0x8, 0x7, 0xf4b, 0xb2, 0x2, 0x80, 0xdb, 0x3, 0x0, 0x5, 0x5e6, 0x3, 0x20000, 0x0, 0x253e, 0x401, 0xa17, 0x4}) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x80000000000000c) socket$inet6(0xa, 0x80000000003, 0x80000000000000c) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000240)=0x8) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6000000, 0x10, 0xffffffffffffffff, 0x10001) syz_open_dev$amidi(0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) 02:51:50 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6fd0, 0x214b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x401000000001, 0x0) close(r1) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r2 = gettid() syz_open_procfs(r2, &(0x7f0000000000)='gid_map\x00') close(r1) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 186.835965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 02:51:50 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) accept$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team0\x00', r4}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @rand_addr="d706b7b60f53de8f21b709d087db11a4", 0x20}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0xffffff3a, 0x0, @loopback, @mcast2, {[], @icmpv6=@ndisc_rs}}}}}, 0x0) 02:51:50 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f0000000240)={0x0, 0x10}}, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{0x2, 0x3000, 0xe, 0x0, 0x5, 0x2f, 0x4, 0x80, 0xff, 0x6, 0x12, 0x3}, {0xd000, 0x6000, 0x0, 0x40, 0x0, 0x9, 0x3, 0x3, 0xcc, 0x1, 0x2, 0x8}, {0xd000, 0x1, 0x17, 0xf7, 0x0, 0x0, 0x5b, 0x2, 0x0, 0xf3, 0x1, 0x7}, {0x6000, 0xc7541d38614992a9, 0xf, 0x0, 0x4, 0x3f, 0x9, 0x4, 0x23, 0x0, 0x2, 0xa3}, {0x4, 0x6000, 0xb, 0xff, 0x2, 0x48, 0x3f, 0x81, 0x6, 0x9, 0x3, 0x6}, {0x1, 0x1, 0x8, 0x4, 0x3, 0x40, 0x40, 0x0, 0x0, 0xe3, 0xd3, 0x8}, {0x8001, 0xd000, 0xe, 0x1, 0x6, 0x7f, 0x1, 0x5, 0x7f, 0x4, 0x2, 0x9}, {0xd000, 0x4, 0x10, 0x9, 0x27, 0xff, 0x9, 0x84, 0x0, 0x2, 0x9, 0x1}, {0x5000}, {0x2000, 0xf002}, 0x80000021, 0x0, 0x6800, 0x400, 0x4, 0x900, 0x4000, [0x1, 0x4, 0x81, 0x10001]}) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) link(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='./bus\x00') r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x200000) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x3, 0x7f, 0x7, 0xfff7}) lseek(r0, 0x0, 0x2) sendfile(r0, r3, 0x0, 0x20008) 02:51:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000340)=""/4096) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000140)) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3f}, {}, {0x6002, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe1}, {}, {}, 0x0, 0x0, 0x0, 0x9297d42779d3d462, 0x0, 0x0, 0x0, [0x7]}) 02:51:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={[{@logbsize={'logbsize', 0x3d, [0x32, 0x4d]}}]}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000040)=0x7) 02:51:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@dev={0xfe, 0x80, [], 0x2b}, @in6=@mcast2, 0x4e24, 0x975d, 0x4e20, 0x0, 0xf, 0x100, 0x80, 0x1, 0x0, r1}, {0x1, 0x0, 0x8000, 0x0, 0x1, 0x401, 0x101, 0x200}, {0x7, 0x9, 0x0, 0x10001}, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x4d5, 0x2b}, 0xa, @in6=@local, 0x3503, 0x1, 0x2, 0x1f, 0x40, 0x7, 0x3}}, 0xe8) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000a62000/0x1000)=nil, 0x200000, 0x10200000008) 02:51:50 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f0000000240)={0x0, 0x10}}, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{0x2, 0x3000, 0xe, 0x0, 0x5, 0x2f, 0x4, 0x80, 0xff, 0x6, 0x12, 0x3}, {0xd000, 0x6000, 0x0, 0x40, 0x0, 0x9, 0x3, 0x3, 0xcc, 0x1, 0x2, 0x8}, {0xd000, 0x1, 0x17, 0xf7, 0x0, 0x0, 0x5b, 0x2, 0x0, 0xf3, 0x1, 0x7}, {0x6000, 0xc7541d38614992a9, 0xf, 0x0, 0x4, 0x3f, 0x9, 0x4, 0x23, 0x0, 0x2, 0xa3}, {0x4, 0x6000, 0xb, 0xff, 0x2, 0x48, 0x3f, 0x81, 0x6, 0x9, 0x3, 0x6}, {0x1, 0x1, 0x8, 0x4, 0x3, 0x40, 0x40, 0x0, 0x0, 0xe3, 0xd3, 0x8}, {0x8001, 0xd000, 0xe, 0x1, 0x6, 0x7f, 0x1, 0x5, 0x7f, 0x4, 0x2, 0x9}, {0xd000, 0x4, 0x10, 0x9, 0x27, 0xff, 0x9, 0x84, 0x0, 0x2, 0x9, 0x1}, {0x5000}, {0x2000, 0xf002}, 0x80000021, 0x0, 0x6800, 0x400, 0x4, 0x900, 0x4000, [0x1, 0x4, 0x81, 0x10001]}) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) link(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='./bus\x00') r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x200000) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x3, 0x7f, 0x7, 0xfff7}) lseek(r0, 0x0, 0x2) sendfile(r0, r3, 0x0, 0x20008) 02:51:50 executing program 1: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x54400, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x5953}, 0x200, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r1) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000300)) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x21a7f5f2870ef24c, 0x0) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000400)={0x6, 0x7, 0x6680, 0x62, 0x81, 0x0, 0x100000000}) r4 = getpid() perf_event_open(&(0x7f0000000540)={0x4, 0x70, 0x6, 0xfe, 0x0, 0x80, 0x0, 0x9, 0x403, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0xd, @perf_config_ext={0x400, 0x4}, 0x400, 0xffffffffffffff97, 0x17b7, 0x6, 0x1f21, 0x6, 0x9}, r4, 0x0, r1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xa25c, 0x200000) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x7, 0x40000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000380)=@int=0xfffffffd, 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000ee499b67eff4842a1998", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="1000db00000000002040100000efae01a84ced68b3202510d54153c2ad43f339affa4e42503b6a85bb96555bc2d1732bcbf593a23083d620e35aeb70d8"], 0x34, 0x0) renameat(r5, &(0x7f0000000180)='.//ile0\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') 02:51:50 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2b3ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r7) r8 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$binfmt_elf64(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="042750630b5ae3543fba71ca033e5b6655695817c4c6782026aa43a30fdbf397c04a7d9b4761e93fc0923a6638fd20643772e9761ff07c2ec30e1b30eb9cc6cdaf5ef93db140e7390b711e8c02c4e47a465212ad2f98c55daa67479720e2954bbc44d3a2aca0e8b6c6f7fcba36e08505fecfba6a3a9a9cedb81a6ed0203123b6b8ce85f3bf9509d0f984639b13"], 0x1) fallocate(r1, 0x0, 0x0, 0x8020003) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='L-') fsetxattr$trusted_overlay_nlink(r9, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x2}, 0x28, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 02:51:50 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x800000, &(0x7f0000000240)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r1, &(0x7f0000000300)={0xffffffffffffffcf, 0x2, 0x0, 0x0, 0x6e4, 0xffffffdfffffffff, 0xfffffffffffffffe, 0x200}, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) creat(0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) recvmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001bc0)=@hci, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/153, 0x99}, {&(0x7f0000001f00)=""/50, 0x32}], 0x2, &(0x7f0000001d80)=""/85, 0x55}, 0xffffffff}], 0x2, 0x2002, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048000}, 0x44001) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) get_thread_area(&(0x7f0000000200)={0x2, 0x1000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r5, 0x28007d) sendfile(r5, r5, 0x0, 0x2008000fffffffe) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 02:51:50 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) write$UHID_INPUT(r5, &(0x7f0000000340)={0x8, "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", 0x1000}, 0x1006) sendmsg$NBD_CMD_DISCONNECT(r3, 0x0, 0x0) rt_sigprocmask(0x6, &(0x7f00000000c0)={0x20}, &(0x7f0000000200), 0x8) r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$link(0x8, r6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/19, @ANYRES32, @ANYBLOB="00000400f1ffff0000000008000100687462001c00020018006a000300000000010000000000000800000000000043db224b707596906260"], 0x3}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/24, @ANYRES32=0x0, @ANYBLOB="00000000000048fa223c0000"]}}, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) [ 187.553155] overlayfs: filesystem on './file0' not supported as upperdir [ 187.625070] devpts: called with bogus options 02:51:51 executing program 3: mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0xfffffed9) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000001c0)={0x81, &(0x7f00000005c0)="1e8f7c09fc8732b73414c0a83a56a83866828d04952645dcf1a7883fbdccfef10146e6755111036889a98700c49a926332eb7dc22d431f2b4bc74fb5de91db16a2fe22102090602b8f428caa9affc099351e80a943f59b0a18129636cd166c34bc313cfe5806f16ff07a13073f6959b4bd3d1ab5817737d7c7712cb9f5e6e83b790673f1"}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20100, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000380)={0x3, 0xb, 0x4, 0x100000, {0x77359400}, {0x842105fad5a6e58, 0xc, 0x6, 0x7f, 0xff, 0x7, "fd225d92"}, 0x40, 0x688ab3f1fae62313, @planes=&(0x7f0000000080)={0x7, 0x6, @fd=r4, 0x2}, 0x4}) setxattr$security_selinux(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) 02:51:51 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4140, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x4081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f00000c6000/0x3000)=nil, 0x3000) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000400)=0x14) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/197, 0x495}], 0x1000000000000015, 0x2) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200100000000000000ed190e0200", 0x1c) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f00000001c0)={0x2}) r3 = socket$inet6(0xa, 0x2b7ed3262bccc080, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d0) setsockopt$inet6_tcp_int(r6, 0x6, 0x5, &(0x7f0000000480)=0x5, 0x4) clock_gettime(0x0, 0x0) 02:51:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0xfffffdb0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x100}, 0x28, 0x2) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, r5, 0xb03, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x1c8, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x655}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fc3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x40, @ipv4={[], [], @multicast1}}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9f3f}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdaa}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8114) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x100000001}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000380)={'ip_vti0\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r7, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f00000000c0)={0x80000001, "f98caaacfdacc96c13832cd504c15989c340792060d9db8f83ba4e6044c76273", 0x1, 0x800, 0xf, 0x800, 0x20, 0x2}) [ 188.124866] device bridge_slave_1 left promiscuous mode [ 188.158991] bridge0: port 2(bridge_slave_1) entered disabled state 02:51:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_open_dev$amidi(0x0, 0x20, 0x101002) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000003c0)={0x1, 'netdevsim0\x00', 0x4}, 0x18) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000480)={0x3, @pix={0xfff, 0x6bcece26, 0x4f424752, 0x3, 0x1, 0xf3, 0x8, 0x3, 0x0, 0x3, 0x1}}) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setlease(r6, 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000380)={0xf, 0x8, 0xfa00, {r7, 0x2}}, 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x6, 0x1d, 0x3, 0x0, 0x100, 0x6, 0x2, 0x4, 0x80, 0xb4, 0xfb, 0x81, 0x0, 0x0, 0x4, 0x7, 0x1f, 0x92, 0xfd}) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000340)) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR, @ANYRES32=r4, @ANYBLOB="c634083f5b21d7bee6f83cdd826243434b95f9885ae5a6e543709e2eb33dc35bc6006fc1eaed68991f66f3f87f067c2dd67a984ad45dce5b86158c78fe9a0dc79edb01dd5ee35b3ee97dddd13f", @ANYRES64=0x0, @ANYBLOB="4c819ee069610da7d144760eecab90e35669171ade124a0240bdbd36f465a2baba07e5b9b3f0be7f384f23ab58bb69fc4cd9ab6e90b46b96c3804aad14b1358ebdf56d7be3", @ANYPTR64, @ANYRESDEC, @ANYPTR], @ANYRES32, @ANYRES16, @ANYRES64], 0x4, 0x2) renameat(r8, &(0x7f0000000180)='.//ile0\x00', r8, &(0x7f00000007c0)='./file0/f.le.\x00') setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x4, 0x4) [ 188.244314] device bridge_slave_0 left promiscuous mode [ 188.253544] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.273664] kauditd_printk_skb: 15 callbacks suppressed 02:51:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$md(0xffffffffffffff9c, 0x0, 0x4c0680, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f00000006c0)=""/107, 0x6b}], 0x3, 0x4) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$cec(0x0, 0x2, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5000040) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000001080), &(0x7f00000010c0)=0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="8500000011000000000000090000000000000000000000002c0745b629032b87b24bd40e4def0434487eb1ae2f0f32817ac4520db26b9828a315fba98a"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffa0008000, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x40) r7 = open(0x0, 0x141042, 0x0) syz_genetlink_get_family_id$tipc(0x0) recvmmsg(r7, &(0x7f0000000f80)=[{{&(0x7f0000000180)=@pppol2tpv3, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/205, 0xcd}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000000440)=""/58, 0x3a}, {&(0x7f0000000740)=""/173, 0xad}], 0x4, &(0x7f0000000800)=""/54, 0x36}, 0x3ff}, {{&(0x7f0000000840)=@tipc=@id, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/137, 0x89}, {&(0x7f0000000980)=""/2, 0x2}], 0x2, &(0x7f0000000a00)=""/92, 0x5c}}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b00)=""/7, 0x7}, {&(0x7f0000000b40)=""/194, 0xc2}, {&(0x7f0000000c40)=""/142, 0x8e}, {&(0x7f0000000d00)=""/253, 0xfd}, {&(0x7f0000000e00)=""/129, 0x81}], 0x5, &(0x7f0000000f40)=""/9, 0x9}, 0xfffffffa}], 0x3, 0x20, &(0x7f0000001040)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0xba, 0x7, 0x10000}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x5ebf1d0f03eaee01}, 0x839bed49d968d7f8) [ 188.273674] audit: type=1400 audit(1574045511.606:73): avc: denied { ioctl } for pid=7447 comm="syz-executor.4" path="socket:[28025]" dev="sockfs" ino=28025 ioctlcmd=0x8914 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 02:51:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e572000000000000000004000000"], 0x14}}, 0x0) [ 188.659613] device hsr_slave_1 left promiscuous mode [ 188.723885] device hsr_slave_0 left promiscuous mode [ 188.778763] team0 (unregistering): Port device team_slave_1 removed [ 188.796139] overlayfs: filesystem on './file0' not supported as upperdir [ 188.845147] team0 (unregistering): Port device team_slave_0 removed [ 188.900112] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 188.949496] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 189.154755] bond0 (unregistering): Released all slaves [ 191.061550] IPVS: ftp: loaded support on port[0] = 21 [ 191.957662] chnl_net:caif_netlink_parms(): no params data found [ 191.991674] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.998193] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.005297] device bridge_slave_0 entered promiscuous mode [ 192.012858] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.019236] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.026277] device bridge_slave_1 entered promiscuous mode [ 192.041503] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 192.050547] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.068143] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 192.075903] team0: Port device team_slave_0 added [ 192.081609] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 192.088683] team0: Port device team_slave_1 added [ 192.094372] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 192.101871] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 192.183026] device hsr_slave_0 entered promiscuous mode [ 192.250478] device hsr_slave_1 entered promiscuous mode [ 192.301087] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 192.308207] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 192.325388] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.331789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.338355] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.344726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.374130] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 192.380631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.389743] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 192.398855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.406024] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.412839] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.423191] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 192.429374] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.438258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.445848] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.452221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.464318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.475358] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.481809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.502286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.509959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 192.517644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.525393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.533160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.542272] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 192.548309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.561478] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 192.568961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.576215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.587362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.950727] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 02:51:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) keyctl$clear(0x7, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:51:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="af3402f540adc1b8782ed8a1db7405bef55becc655027af9a984dd6443793dd08a35bed1373c9356d4a61aa595826986bacf3a421845fdf77d440e4a1663e05d09882a5195e5b030af69ec7ddf60bdc35b5a9321c20de12ecdf15a1fe87cefada2814d1774ae514b145daa8a8c7e4270", @ANYRES32=0x6, @ANYBLOB="300012000c00010069703667726500002000020014000700ff0200000000001a00000000000000010800030096000000"], 0x58}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) r6 = open(0x0, 0x0, 0x0) sendto$unix(r6, 0x0, 0x0, 0x20000000, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000b00)=0xe8) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000340)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) sendmsg$can_raw(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x1d, r7}, 0x10, &(0x7f0000000900)={&(0x7f0000000880)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x37, 0x0, 0x0, 0x0, "36af875006c3f826eb85216391f732b44d5762efdf22ad30fac9415371e4bdc5a3553a6ec622e83176c67d2e809d1b23c7062c00ac4900"}, 0xd}, 0x1, 0x0, 0x0, 0x4000800}, 0x4004000) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 02:51:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x297ef) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x1000000080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) write$P9_RLOCK(r4, &(0x7f0000000180)={0x8, 0x35, 0x1}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:51:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1c1142, 0x20) ftruncate(r3, 0x200004) r4 = dup(r3) ppoll(&(0x7f0000000580)=[{r1, 0x20}, {r2}, {r1, 0x2000}, {r1, 0x500}, {r4, 0x140}], 0x5, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='security.SMACK64IPIN\x00', r4}, 0x10) lsetxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='security.SMACK64IPIN\x00', &(0x7f0000000240)='htcp\x00', 0x5, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000af27297f50881d0800000000000000000010000108000000000000308ede5417b8e12f", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='htcp\x00', 0x5) 02:51:57 executing program 0: read(0xffffffffffffffff, 0x0, 0x23b) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) socket(0x200000000000011, 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x800000000000004, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @local}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x81, 0x3c}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x0, @rand_addr=0x7}, {0x2, 0x0, @dev}, 0x20, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='vxcan1\x00', 0x3, 0x8001, 0x1f}) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000001240)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 'l\x02p\xaa[\xbb$\xf5\x9c\x00\x00\x04\x00', 0x0, 0x7, 0x5b}, 0x2c) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) sendto$inet(r3, 0x0, 0x0, 0x28080000, &(0x7f0000001280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x4, 0x12) r4 = dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r4, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r4, &(0x7f0000000100)=@abs, 0x6e) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x8001}, 0x120) open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x0) r5 = open(0x0, 0x98940, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setsig(r5, 0xa, 0x17) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) 02:51:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x8040, &(0x7f00000002c0)=ANY=[]) fcntl$setpipe(r4, 0x407, 0x4) pipe2$9p(&(0x7f0000000100), 0x4800) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x400000000000, r2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$full(0xffffffffffffff9c, 0x0, 0x6a002, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r7) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x81080, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x38185, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, r8, 0x2, 0xffffffffffffffff, 0x8) io_setup(0x3, &(0x7f0000000580)) socket$inet6_tcp(0xa, 0x1, 0x0) [ 193.940310] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.030826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32553 sclass=netlink_route_socket pig=7523 comm=syz-executor.3 [ 194.032583] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. 02:51:57 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget(0x0, 0x1000, 0xc5a7939cef5172e9, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 02:51:57 executing program 5: ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 02:51:57 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) chmod(&(0x7f0000000000)='./bus\x00', 0x0) 02:51:57 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) [ 194.195848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32553 sclass=netlink_route_socket pig=7523 comm=syz-executor.3 02:51:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0xd2e34034cc9d4721}}, 0xb8}}, 0x0) 02:51:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x8, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x38}}, 0x0) [ 194.249293] audit: type=1400 audit(1574045517.576:74): avc: denied { name_bind } for pid=7546 comm="syz-executor.4" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 02:51:57 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xcb, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x6}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000180)=""/99, &(0x7f0000000080)=0x63) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x0, 0x8000, 0x6}, 0x1c) r1 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)) socket(0x10, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000100)) ptrace(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0xb8) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x20a81) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r2, &(0x7f0000000500)=""/175, 0x5d) getdents64(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000200)="9f", 0x1) r3 = epoll_create1(0x0) fcntl$setown(r3, 0x8, 0x0) [ 194.282997] audit: type=1400 audit(1574045517.576:75): avc: denied { node_bind } for pid=7546 comm="syz-executor.4" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 02:51:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x15202, 0x0, &(0x7f0000ab0000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 194.333690] audit: type=1400 audit(1574045517.576:76): avc: denied { name_connect } for pid=7546 comm="syz-executor.4" dest=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 02:51:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x4, [0xc0000080], [0x3a]}) 02:51:57 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffa0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x6}, 0x4) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:51:57 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000040)={'crc32c-intel\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}}) [ 194.432369] audit: type=1400 audit(1574045517.746:77): avc: denied { map } for pid=7555 comm="syz-executor.2" path="socket:[28251]" dev="sockfs" ino=28251 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1 02:51:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:51:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) dup2(r0, r1) 02:51:57 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 02:51:57 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x12) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) [ 194.550684] protocol 88fb is buggy, dev hsr_slave_0 [ 194.555911] protocol 88fb is buggy, dev hsr_slave_1 02:51:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 194.678120] kvm [7571]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 02:51:58 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0xc5a7939cef5172e9, &(0x7f0000ffa000/0x1000)=nil) 02:51:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:51:58 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/50, 0x32}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00\xcc\xf8V\xfe~\xdc\x94\x8e\xf06Ff\x00\xab\xa5\xd6\xeaY\xc8\xb5F\xfa\xa1\xd2\xc4*,ZT') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x1a) [ 194.751954] kvm [7571]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 [ 194.790134] protocol 88fb is buggy, dev hsr_slave_0 [ 194.795363] protocol 88fb is buggy, dev hsr_slave_1 02:51:58 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7b4534ff06000000d2010020be0ad8bf088593660300000000000001"], 0x1c) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0x801, 0x4) write$nbd(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1010) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) [ 194.814700] kvm [7571]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 [ 194.849575] kvm [7571]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 02:51:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x2, &(0x7f0000000480)=@raw=[@map={0x18, 0x0, 0x3}], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x90, &(0x7f00000000c0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 194.884703] kvm [7571]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 [ 194.918446] kvm [7571]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 [ 194.967586] kvm [7571]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 [ 194.997965] kvm [7571]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 [ 195.027046] kvm [7571]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 [ 195.041446] protocol 88fb is buggy, dev hsr_slave_0 [ 195.046568] protocol 88fb is buggy, dev hsr_slave_1 [ 195.062374] kvm [7571]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 02:51:58 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) 02:51:58 executing program 4: unshare(0x8020000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) listen(0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 02:51:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:51:58 executing program 1: creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x3c) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 195.420434] device bridge_slave_1 left promiscuous mode [ 195.426395] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.460996] audit: type=1400 audit(1574045518.796:78): avc: denied { sys_admin } for pid=7624 comm="syz-executor.4" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 195.489122] device bridge_slave_0 left promiscuous mode [ 195.495900] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.637598] device hsr_slave_1 left promiscuous mode [ 195.674846] device hsr_slave_0 left promiscuous mode [ 195.734583] team0 (unregistering): Port device team_slave_1 removed [ 195.744606] team0 (unregistering): Port device team_slave_0 removed [ 195.755183] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 195.795550] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 195.874143] bond0 (unregistering): Released all slaves [ 195.910247] protocol 88fb is buggy, dev hsr_slave_0 [ 195.915356] protocol 88fb is buggy, dev hsr_slave_1 [ 196.150135] protocol 88fb is buggy, dev hsr_slave_0 [ 196.155356] protocol 88fb is buggy, dev hsr_slave_1 [ 197.681517] IPVS: ftp: loaded support on port[0] = 21 [ 198.562361] chnl_net:caif_netlink_parms(): no params data found [ 198.594431] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.601841] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.609002] device bridge_slave_0 entered promiscuous mode [ 198.616042] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.622550] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.629452] device bridge_slave_1 entered promiscuous mode [ 198.648063] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.657376] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.673883] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.681350] team0: Port device team_slave_0 added [ 198.686874] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 198.694174] team0: Port device team_slave_1 added [ 198.699554] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.707228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.772197] device hsr_slave_0 entered promiscuous mode [ 198.810387] device hsr_slave_1 entered promiscuous mode [ 198.851061] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 198.858212] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 198.873393] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.879790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.886504] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.892885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.923600] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 198.929856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.938396] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 198.947382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.954934] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.962161] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.972172] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 198.978435] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.987095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.994916] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.001286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.011252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.018998] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.025402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.041947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.050150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.059350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.073077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.085208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.095937] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 199.102309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.109211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.123634] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 199.131669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.138347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.149026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.550412] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 200.070253] net_ratelimit: 24 callbacks suppressed [ 200.070259] protocol 88fb is buggy, dev hsr_slave_0 [ 200.080426] protocol 88fb is buggy, dev hsr_slave_1 02:52:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x101042, 0x0) keyctl$clear(0x7, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:52:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000280)=[@acquire, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@flat=@weak_handle, @ptr={0x70742a85, 0xfffffffd, 0x0, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 02:52:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:03 executing program 1: mknod(&(0x7f0000000140)='./bus\x00', 0x3a0914c44f7b802c, 0x1b00) r0 = open(&(0x7f0000000440)='./bus\x00', 0x400000003fd, 0x0) write(r0, &(0x7f0000000040)="7435b4", 0xff39) ioctl$TIOCMGET(0xffffffffffffffff, 0x4004746a, 0x0) 02:52:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 02:52:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000001c0)={{}, {0x80}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r1) 02:52:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 200.310133] protocol 88fb is buggy, dev hsr_slave_0 [ 200.315267] protocol 88fb is buggy, dev hsr_slave_1 02:52:03 executing program 2: unshare(0x8020000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 02:52:03 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x3}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x10, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 200.345410] audit: type=1400 audit(1574045523.676:79): avc: denied { map } for pid=7657 comm="syz-executor.2" path="/dev/binder2" dev="devtmpfs" ino=15363 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 02:52:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000280), 0x1c) r1 = dup2(r0, r0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f00000004c0)="ff", 0x1) sendfile(r1, r2, &(0x7f0000000040), 0xffff) sysfs$1(0x1, &(0x7f0000000000)='\x00') clone(0x3502001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$addseals(r2, 0x409, 0x8) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0xc0000000, &(0x7f0000000600)="3772f5810a62bf203f565effaf39a862d8ff6fdeb8e06c236e598b5f187d00f691846be83ef16672df094b5bd096fb62e43b67f3f6cb4eb480e3eea82ffdd94f7176379057a4d60abe3f03abb50c2c4966ed581e7a78e887a6981cf0e1a5e713094ab7075b628c4cfc0fd013190a522a2a352f67be98b360a7e1d75ca7e757147d4d7717f2830355de09762b92ec3f9c98a06b293f3225ae7cdf1929995fe1753d6a593ef06d650ace09834f80094cce563ce82fde78a12b1eeb8ecb5ebee3d5e632537a2779018243bd854788084af60042", 0x0, &(0x7f00000001c0), &(0x7f00000002c0)) 02:52:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000340)=[@register_looper, @enter_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x8126000, 0x0}) [ 200.619218] [ 200.621286] ============================= [ 200.625431] WARNING: suspicious RCU usage [ 200.629570] 4.14.154 #0 Not tainted [ 200.633178] ----------------------------- [ 200.637319] include/linux/radix-tree.h:238 suspicious rcu_dereference_check() usage! [ 200.645180] [ 200.645180] other info that might help us debug this: [ 200.645180] [ 200.653313] [ 200.653313] rcu_scheduler_active = 2, debug_locks = 1 [ 200.659963] 2 locks held by syz-executor.5/7694: [ 200.664696] #0: (&sb->s_type->i_mutex_key#12){+.+.}, at: [] shmem_add_seals+0x15e/0x1060 [ 200.674691] #1: (&(&mapping->tree_lock)->rlock){-.-.}, at: [] shmem_add_seals+0x334/0x1060 [ 200.684832] [ 200.684832] stack backtrace: [ 200.689314] CPU: 1 PID: 7694 Comm: syz-executor.5 Not tainted 4.14.154 #0 [ 200.696218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.705561] Call Trace: [ 200.708146] dump_stack+0x142/0x197 [ 200.711757] ? vprintk_func+0x65/0x159 [ 200.715630] lockdep_rcu_suspicious+0x153/0x15d [ 200.720285] shmem_add_seals+0x9e0/0x1060 [ 200.724419] ? shmem_put_link+0xe0/0xe0 [ 200.728390] shmem_fcntl+0xf7/0x130 [ 200.732004] do_fcntl+0x190/0xe10 [ 200.735440] ? f_getown+0xb0/0xb0 [ 200.738876] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 200.743876] ? selinux_file_fcntl+0x66/0x110 [ 200.748271] ? security_file_fcntl+0x89/0xb0 [ 200.752661] SyS_fcntl+0xd5/0x110 [ 200.756464] ? do_fcntl+0xe10/0xe10 [ 200.760075] do_syscall_64+0x1e8/0x640 [ 200.763955] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.768784] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.773956] RIP: 0033:0x45a639 [ 200.777128] RSP: 002b:00007f88bf569c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 200.784836] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 200.792096] RDX: 0000000000000008 RSI: 0000000000000409 RDI: 0000000000000004 [ 200.799353] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 200.806956] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f88bf56a6d4 [ 200.814209] R13: 00000000004c1068 R14: 00000000004d3c60 R15: 00000000ffffffff [ 200.830321] protocol 88fb is buggy, dev hsr_slave_0 [ 200.835461] protocol 88fb is buggy, dev hsr_slave_1 02:52:04 executing program 3: r0 = open(&(0x7f0000000200)='./bus\x00', 0x141442, 0x0) ftruncate(r0, 0x87ffd) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4e68d5f8) 02:52:04 executing program 2: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xcb, 0xfa00, {0x0, &(0x7f00000000c0), 0x0, 0x6}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup2(r1, r1) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r3 = dup2(r0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, 0x0) socket(0x10, 0x80002, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0xb8) r4 = memfd_create(0x0, 0x0) dup2(0xffffffffffffffff, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r5, &(0x7f0000000500)=""/175, 0x5d) write$9p(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create1(0x0) fcntl$setown(r6, 0x8, 0x0) 02:52:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$set_timeout(0xf, r4, 0x0) 02:52:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 201.030468] protocol 88fb is buggy, dev hsr_slave_0 [ 201.032451] audit: type=1804 audit(1574045524.366:80): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir801535392/syzkaller.YHlIwt/2/bus" dev="sda1" ino=16632 res=1 [ 201.035627] protocol 88fb is buggy, dev hsr_slave_1 02:52:04 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x489ee6f326d721, 0x40, 0x0) pipe(&(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file0\x00') fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2a) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/dev_mcast\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x20002200b, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x2000000009, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x0, 0x2) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 02:52:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) keyctl$clear(0x7, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 201.122552] IPVS: ftp: loaded support on port[0] = 21 02:52:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 201.280835] protocol 88fb is buggy, dev hsr_slave_0 [ 201.286515] protocol 88fb is buggy, dev hsr_slave_1 02:52:04 executing program 1: 02:52:04 executing program 5: 02:52:04 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x489ee6f326d721, 0x40, 0x0) pipe(&(0x7f00000001c0)) chdir(&(0x7f0000000100)='./file0\x00') fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2a) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/dev_mcast\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x20002200b, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x2000000009, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x0, 0x2) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 02:52:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 201.308745] audit: type=1804 audit(1574045524.636:81): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir801535392/syzkaller.YHlIwt/2/bus" dev="sda1" ino=16632 res=1 02:52:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc050000200000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 02:52:04 executing program 1: 02:52:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000018002551075c0165ff0ffc021c14020000100f05", 0x18) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:52:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x80000008) 02:52:04 executing program 1: [ 201.557084] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29231 sclass=netlink_xfrm_socket pig=7760 comm=syz-executor.4 02:52:05 executing program 1: 02:52:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:05 executing program 5: 02:52:05 executing program 2: 02:52:05 executing program 4: 02:52:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc050000200000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 02:52:05 executing program 1: 02:52:05 executing program 5: 02:52:05 executing program 2: 02:52:05 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) 02:52:05 executing program 4: 02:52:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc050000200000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 02:52:05 executing program 1: 02:52:05 executing program 5: 02:52:05 executing program 2: 02:52:05 executing program 4: 02:52:05 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) 02:52:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc050000200000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 02:52:05 executing program 1: 02:52:05 executing program 4: 02:52:05 executing program 5: 02:52:05 executing program 2: 02:52:05 executing program 1: 02:52:05 executing program 4: 02:52:05 executing program 2: 02:52:05 executing program 1: 02:52:05 executing program 5: 02:52:05 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:52:05 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) 02:52:05 executing program 4: 02:52:05 executing program 2: 02:52:05 executing program 5: 02:52:05 executing program 1: 02:52:05 executing program 4: 02:52:05 executing program 2: 02:52:05 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:52:05 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 02:52:05 executing program 1: 02:52:05 executing program 5: 02:52:05 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:52:05 executing program 2: 02:52:05 executing program 4: 02:52:05 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 02:52:05 executing program 1: 02:52:05 executing program 2: 02:52:05 executing program 5: 02:52:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc050000200000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 02:52:05 executing program 4: 02:52:05 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 02:52:05 executing program 1: 02:52:05 executing program 2: 02:52:05 executing program 5: 02:52:05 executing program 4: 02:52:05 executing program 1: 02:52:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc050000200000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 02:52:05 executing program 2: 02:52:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:06 executing program 5: 02:52:06 executing program 4: 02:52:06 executing program 1: 02:52:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc050000200000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 02:52:06 executing program 2: 02:52:06 executing program 4: 02:52:06 executing program 5: 02:52:06 executing program 1: 02:52:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:06 executing program 2: 02:52:06 executing program 1: 02:52:06 executing program 4: 02:52:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:06 executing program 5: 02:52:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:06 executing program 2: 02:52:06 executing program 1: 02:52:06 executing program 5: 02:52:06 executing program 4: 02:52:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:06 executing program 1: 02:52:06 executing program 2: 02:52:06 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 02:52:06 executing program 4: 02:52:06 executing program 5: 02:52:06 executing program 1: 02:52:06 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 02:52:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:06 executing program 2: 02:52:06 executing program 4: 02:52:06 executing program 1: 02:52:06 executing program 5: 02:52:06 executing program 2: 02:52:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:06 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r0, &(0x7f0000000040), 0x12) 02:52:06 executing program 1: 02:52:06 executing program 4: 02:52:06 executing program 5: 02:52:06 executing program 2: 02:52:06 executing program 1: 02:52:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:06 executing program 4: 02:52:06 executing program 5: 02:52:06 executing program 2: 02:52:06 executing program 1: 02:52:06 executing program 4: 02:52:06 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:06 executing program 5: 02:52:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x101042, 0x0) keyctl$clear(0x7, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 02:52:06 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') socket$inet6(0xa, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 02:52:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 02:52:06 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 02:52:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 02:52:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000002030501ff0080dffdffff270a0600000c00010001380800400a00010c000300003017cd3f0022ff"], 0x2c}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x26f615125b0edad7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000300), 0x675) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa5y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc9*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0(\x18\xe9\xef%nM\'\aF\xb7\x95\xcbm\x04\xa8\x05\xef@&\xc4') sendfile(r4, r5, 0x0, 0x80000003) close(r2) splice(r1, 0x0, r2, 0x0, 0x10003, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0xc2, 0x4, [], &(0x7f0000000140)}) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) dup3(r6, r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) splice(r7, 0x0, r8, 0x0, 0x10003, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000100)=0x78) 02:52:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c007365725f69643d5bb82fab357f88ca84de45e8351cbeb2567cc4f0b82339f3cede5bdc15a91fe3924688b08de727931e864ca79a482f0009d75e001223967f502f6f550344c1898ec6a27585d36331ffdfddaafd7d92b5149fa61320e125e6170517ee9d6f48e945b768c40311e455906a5262ec334baca1599c804aca9e1cbc23f8030fe299d12b8b131f4342bfc10d44e4e7", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$security_evm(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) unlink(&(0x7f00000001c0)='./file0/file0\x00') read$FUSE(r0, &(0x7f0000002540), 0x1000) read$FUSE(r0, &(0x7f0000000480), 0x93f) write$FUSE_ENTRY(r0, &(0x7f0000001480)={0x90, 0x0, 0x2, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000002c0f}}}, 0x90) [ 204.033705] audit: type=1400 audit(1574045527.366:82): avc: denied { write } for pid=8043 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 02:52:07 executing program 1: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x0) dup3(r6, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="9c30bdef44433981ce6cd3f4adcbe8f6ef8bcb94d78cf7daabfdf804ac817c32770b72e26eddd04db921c82a45374a2f4a18f8dce55c2f9a2bc6f3bbb2ea842d765d647db62e23103497d9a1", @ANYRESHEX=r6, @ANYBLOB=',\x00']) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f00000000c0)=0x2d5d) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000006c0)='Net/3\x97OOT\x15\x00\xb6\xcf@e\xd3r\x82\x9fc') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000380)="0c4f4d16cf2f3a2dd8a5046790a60c91e487dc9ca281434dbc169c6555a654da5e42c953490634b417ec9535653162fc5730d4c8dab3e136550ed7d31fa8d7094afd6e5154349155e6ef7e5fb08d79c283188a3f28548ab4366e6863ba5561aedbd1ee3f9a2c5646e4a9c2806b231528bca7ee2134e39966c40bcb1371a7e7691672a8dc9bda07175f11a9160cba3f0ddb78db3b2e184e1e9aa371691df9f49a5e3343bce4e4b8a2c80831b63d95ed57cf89982b317abf1cf8a71078d00dd5fa9151c142fa4bb765d503150f5f6f34284c7480a5091e9b246e", 0xd9) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f00000005c0)={0x0, 0xb, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x2, 0x81, 0x10, 0x24, 0x6, "cf676f53"}, 0x80, 0x5, @offset=0x9, 0x4}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000640)={0x10, 0xd17, {0x52, 0x2db, 0x7f, {0x200}, {0x40, 0x4}, @const={0x7ff, {0x8, 0xba, 0x1, 0x9150}}}, {0xa5e136065a937c32, 0x5, 0x0, {0x4, 0x3}, {0x7, 0x1}, @ramp={0x800, 0x80, {0x100, 0x4c2, 0x800, 0x3}}}}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000480)="c1cc3d2c05c16add6c964974e00652617b35c74bd5a620d3170df3c2f134d5beb838b0f00c6ca198401126d02772777a96ead8602a94c5450ea4e5c8b02fc6e876ee2383fc4faa682ed6a91a53a08a1fdd9839c170a6f81ede814c769cf15c688c8514b5f4f1dc0a50019813ce4459", 0x6f, 0x0, &(0x7f0000000540)={0x0, 0x989680}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'U+', 0x7}, 0x28, 0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x0, 0x0) 02:52:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='$\x94ev/sequencer\x00', 0x660000, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x101000, 0x0) getsockname$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x1c) r3 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='vmnet0ppp0vboxnet0[%\x00', 0xfffffffffffffff9) r4 = request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='/dev/sequencer\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f00000001c0)=[{&(0x7f0000000180)="7f6fd4737f7f8b", 0x7}], 0x1, r4) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000001580)=[@in6={0xa, 0x4e22, 0x0, @rand_addr="c90e51cf04dd8c07ecb1b882cf6fe3cd", 0x1}, @in={0x2, 0x0, @local}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0xf3}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000004c0)={r6, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x7, 0x1}, 0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="f649b86606000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0x1c) 02:52:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:07 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:07 executing program 5: getdents64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/163) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="a9248e6e42e20180c200f7043b5e450000380000000000019078ac7014bbac1414110304907800000a004500000000000000006c0000ac1414aaac14140003000080000000a6"], 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000001680)={0x6, &(0x7f00000002c0)=""/215, &(0x7f00000015c0)=[{0x31, 0x1000, 0x5b5, &(0x7f00000003c0)=""/4096}, {0xa3, 0x12, 0x7, &(0x7f0000000100)=""/18}, {0x800, 0x4e, 0x2, &(0x7f00000013c0)=""/78}, {0x100, 0xcd, 0x0, &(0x7f0000001440)=""/205}, {0x6, 0x20, 0x81, &(0x7f0000001540)=""/32}, {0x9, 0x33, 0x5937, &(0x7f0000001580)=""/51}]}) 02:52:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e21, 0x1, @rand_addr="7aca1b32d51e790c4710d9dcb11c8724", 0x80000000}, {0xa, 0x4e22, 0x4, @mcast1, 0x7e4}, 0xfff7, [0x6, 0x7fffffff, 0x7ff, 0x400, 0xa3e4, 0x1000, 0x2, 0x7]}, 0x5c) socket$inet6(0xa, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)=ANY=[@ANYBLOB="01009c00baa54304cda427fb8bc1f90002cf79c33708fe2d30c729fb79fe8bd82a9e441c5bcea0d600000000621dc383f013336f5711e931f9f363b5d9cd273032eca1647fe424402e1775c00193c36b4c59c44bf7d176aaed7b402978f7f692203976efbfca4ed7767fd04132f967186edfd25e6f51829696c25f1b360187b3bbb8962912aeb4d73da1afbb07f8d70dc3f8b4725c73a41fbd1e4168f918010448e98588ac9c0efb9205d6d9ef8280a3305eecaf34427a5139442a1afce0b27554033f69437b777255d2c769b29b3c80ecf35aaff1e0cf65f4bfc6f09b9c5a7673d48f881e9838974e9d"]) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) tkill(r5, 0x1f) syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 02:52:07 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x14, 0x20a201) clock_gettime(0x0, &(0x7f0000000080)={0x0}) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0245720, &(0x7f0000000300)={0x11, {r2, r3+30000000}, 0x9, 0x42}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100c, 0x0, 0x0, 0x0, 0x4, 0x8c, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000640)=""/148, 0x94}], 0x100000000000026e, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) pipe(0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) r7 = socket$inet(0x2, 0x6000000000000001, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x8000000000000002, 0x0) ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f0000000440)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00\x00\x00\x00\x00\x00\x00\x00\xb9\xd9\xd3q\xa1h\x00', 0x0, 0x0, 0x28d, [], 0x0, 0x0, &(0x7f0000000100)=""/5}, &(0x7f00000002c0)=0x78) getpgid(0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r9 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'gretap0\x00'}, 0xffffffffffffff3d) ioctl(r10, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) r11 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r12 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'\xf4\xff\x96', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r11, r12) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000d40)="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", 0x352, r11) r13 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r13, 0x800000c0045005, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x1, 0x11, r13, 0x0) ioctl$KVM_REINJECT_CONTROL(r13, 0xae71, &(0x7f0000000380)={0x7f}) r14 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r14, 0x800000c0045005, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x1, 0x11, r14, 0x0) ioctl$KVM_REINJECT_CONTROL(r14, 0xae71, &(0x7f0000000380)={0x7f}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000700)=ANY=[@ANYBLOB="4ff8266803e516b8e857481a24e31a9c8860c3085e3820bf12bb546ebbdf03a8b80500002a0b6c5b1776d42841bd86af8f542100f827b1187be763faed5c46c9eb7ba6f79e570ba00152d321cd52f2b51faa8ace1b8660e5f1ac21ba6b2ed3aa716068513bf544f9f5a5f8d35fe1aaee90a0ec8071876c0ff5a8ef6eb50bf8de1c20b7dc517629993ed0f8f86e22f42030245dfbed9815944809f12a07bcb78e620b140647f120c1149b8e46c41a469e7aac3b", @ANYRESHEX=r11, @ANYRESOCT, @ANYRESHEX=r1, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r14, @ANYPTR64]], 0x0) [ 204.680516] audit: type=1400 audit(1574045528.006:83): avc: denied { map } for pid=8076 comm="syz-executor.1" path=2F6D656D66643A2F70726F632F7379732F6E65742F697076342F76732F69676E6F72655F74756E6E656C6564202864656C6574656429 dev="tmpfs" ino=31089 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 02:52:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 204.843492] audit: type=1400 audit(1574045528.166:84): avc: denied { map } for pid=8070 comm="syz-executor.4" path="/dev/audio" dev="devtmpfs" ino=15402 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 02:52:08 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2408}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300000000000800000000000000e9ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0xff, 0x0, 0x0, 0x5], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe(0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000380)={&(0x7f0000000140), 0x0, 0x80000001, 0xffffffff, 0x0, 0x20, 0x0, {0x7fffffff, 0x0, 0xbe, 0xae04, 0x0, 0x1, 0x5, 0x0, 0x4, 0x0, 0x0, 0xe, 0x0, 0x9, "9f32879b36d42879efcab3b101125db8680149303df6bbf0327646ac00567a56"}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\xdf\xf2\x02x\x1a\x9cu\xa1\x1b\xdaN\x1c\xef\xe9\nJ\x93\xf2\xee\xe8W\xcd\xc4\xadG\x17e\xf1\xd7\xda\xf7\xa1\xcf\x1f\xa4\xd3\xe32\xa0\x8c\xd4\xd0\x9a\xbb\xe15\xf2E`\xc9SX7\x02HG\xbd.p\xf4m\x8a\xd5u\x9c\x8c\xc0\x1b\x11\xd1.C(R\x16B5_\x1cVY,M\x83x\x89\xbe\xfb\xa5\x99\x99s\xea(D\x8d0\xec\x06\x1d\xe4\x9fw\xe7\x06\x11m\xcfL\x10HW\xf3\xf7\xee_\",\a\'\x11;\x85\x8a\x80S\v\x90\xab\x13\xe4\xc93\x96\x16\'\xdc\xecq\xcdQ\x8d\xec\xe0 \x13\xbd\x1a\x1f0\xcf\xe0\n\xeds\x85\xf2\x7f\xf1\xa4\x1fam\xc7\x12\x90\xf1Z\xbf\x15\xf7t+!}B\x15\a\x13\xbf\xa7\x05\xb1M\x89\xd5\xc43\x94\x84,\xeeFw\xc8\xe7\xa9\x9a\xbe\x0f\x80\xb9\xef\xafg2\xd0\x11\x94\b`\x8apREK*\x19zq\xbcRZ\xb2\xfc#*\xdaG5}\xc0y\xb5B\xa1Aa=\xde\xb4W\xdbC\x82f\xbb\xa12\x8b\x96J\xfa.\xf3mekE\xa0\xf2\xcd\x89\xe3\x99\x9c', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) io_setup(0xa2b, &(0x7f0000000000)=0x0) syz_mount_image$nfs4(&(0x7f00000002c0)='nfs4\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x6, &(0x7f0000000800)=[{&(0x7f0000000440)="3093630227f4990378f67318686408619960f58de891e3c3674c3db05b44b2a1463394c3e0e6484b9cbcbbb8410e49c84154a054bcb6757ae534fadb62f9b9d6f482ad1e32c690339feeecef1d55991a5b0c206889b2fe2d6fee2840178e4b2303b4da2ff65c022a856409e8b2acfbd4f217ab4db79254d186943e663715d92295ba631c2314e8dfe288c5463f1271e091e87255480e403a2d036fd00d42c181513043faf1c2b2a1497ce8a268a0f6947fbed070922443ff2afc", 0xba}, {&(0x7f0000000500)="e424c7394b42ebadee7bfd6c8f3bbad87a699f5357b4633cbf8bf0c2fc28ceaffbcdbb9bffe6d22e667011be2728fe8121c49befec25ad8152fb5079f14a47b4c5c20c2cd3f4a0ae804a1207688db9baa32cb022e5e8316d6b038d16135997a9300cd4256ed36cb93dc6a1445c13726dde1987e5a68977c8fcd19ea1a5be537107475893f2ff249e53f058e84bba129d7bf0100517a2a4fc4444666991ec8dda80f1eb78cac0529b916ba285a9e2c46c977dc2a0609062a3c03f92206d0f5b85789a2d79ead1409dbab4793ab49e74a5951d2ab7994f09f71c200bb88152fde120eac0a521d4f5ff42cb54", 0xeb, 0x400}, {&(0x7f0000000600)="467282eba870f07239cfd6bad49ec8d77c1adcb9108631b62d29a81485a9de41db63c193e1bf7beb4082e87505b4be6d929fa6f74dd036d26ea94d4af8b2ea887b0d993f52ebf4be29378ec1e83142ba30bde788328403512965d5c7180b6c6d9be3a54d9fd5ea8343a3a676bb33be62e478fbffee6cf2853e7eaa376d55fdfa6014b04e4b5c3f07733897a26c493994afb35bac2580", 0x96, 0x100000001}, {&(0x7f00000006c0)="51d53a0700eb2920291005eaa6017d17059f1a1b9a705dacca71f285eecf0dda7d5c8d289ed941c7e6384a28f8", 0x2d, 0x6}, {&(0x7f0000000700)="1e5e7980a16a3550af25cd56e4ef65b77598951773f48b92f753b350f047cceff8e40b3e61519cae0a0289", 0x2b, 0x6}, {&(0x7f0000000740)="e3e34085f4cc191ae88c9970f7e7f591239d6e0dc2ed6621555b2b4da070f877be46904fbe6278a2cdf22abb46495828fe8d5d2113d1e75afccdadccccaa671ede7894effa7e8ef2a4ad3b1c571528f55394b4bdb64d9159c467fd2fe8e4fe6e1be65b3651b9ebdf45b8af869094c89c4179befd7b20e05b861516", 0x7b, 0x100000000}], 0x200000, &(0x7f00000008c0)='/dev/kvm\x00') getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000007c0)=0x2, &(0x7f0000000900)=0x4) io_submit(r6, 0x2, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}]) ioctl$RTC_UIE_OFF(r5, 0x7004) 02:52:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='$\x94ev/sequencer\x00', 0x660000, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x101000, 0x0) getsockname$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x1c) r3 = request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='vmnet0ppp0vboxnet0[%\x00', 0xfffffffffffffff9) r4 = request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='/dev/sequencer\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f00000001c0)=[{&(0x7f0000000180)="7f6fd4737f7f8b", 0x7}], 0x1, r4) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000001580)=[@in6={0xa, 0x4e22, 0x0, @rand_addr="c90e51cf04dd8c07ecb1b882cf6fe3cd", 0x1}, @in={0x2, 0x0, @local}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0xf3}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000004c0)={r6, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x7, 0x1}, 0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="f649b86606000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000300)=0x1c) 02:52:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64af51a259bc145f, @perf_config_ext, 0x10000, 0xfffffffffffffffd, 0x0, 0x3, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000a4f000/0x1000)=nil) shmctl$IPC_SET(0x0, 0x1, 0x0) shmat(0x0, &(0x7f00000c7000/0x2000)=nil, 0x4000) shmctl$IPC_INFO(0x0, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 02:52:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:08 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x14, 0x20a201) clock_gettime(0x0, &(0x7f0000000080)={0x0}) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0245720, &(0x7f0000000300)={0x11, {r2, r3+30000000}, 0x9, 0x42}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100c, 0x0, 0x0, 0x0, 0x4, 0x8c, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000640)=""/148, 0x94}], 0x100000000000026e, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) pipe(0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) r7 = socket$inet(0x2, 0x6000000000000001, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x8000000000000002, 0x0) ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f0000000440)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00\x00\x00\x00\x00\x00\x00\x00\xb9\xd9\xd3q\xa1h\x00', 0x0, 0x0, 0x28d, [], 0x0, 0x0, &(0x7f0000000100)=""/5}, &(0x7f00000002c0)=0x78) getpgid(0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r9 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'gretap0\x00'}, 0xffffffffffffff3d) ioctl(r10, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) r11 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r12 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'\xf4\xff\x96', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r11, r12) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000d40)="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", 0x352, r11) r13 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r13, 0x800000c0045005, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x1, 0x11, r13, 0x0) ioctl$KVM_REINJECT_CONTROL(r13, 0xae71, &(0x7f0000000380)={0x7f}) r14 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r14, 0x800000c0045005, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x1, 0x11, r14, 0x0) ioctl$KVM_REINJECT_CONTROL(r14, 0xae71, &(0x7f0000000380)={0x7f}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000700)=ANY=[@ANYBLOB="4ff8266803e516b8e857481a24e31a9c8860c3085e3820bf12bb546ebbdf03a8b80500002a0b6c5b1776d42841bd86af8f542100f827b1187be763faed5c46c9eb7ba6f79e570ba00152d321cd52f2b51faa8ace1b8660e5f1ac21ba6b2ed3aa716068513bf544f9f5a5f8d35fe1aaee90a0ec8071876c0ff5a8ef6eb50bf8de1c20b7dc517629993ed0f8f86e22f42030245dfbed9815944809f12a07bcb78e620b140647f120c1149b8e46c41a469e7aac3b", @ANYRESHEX=r11, @ANYRESOCT, @ANYRESHEX=r1, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r14, @ANYPTR64]], 0x0) 02:52:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc05000020000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) [ 205.190118] net_ratelimit: 20 callbacks suppressed [ 205.190122] protocol 88fb is buggy, dev hsr_slave_0 [ 205.200234] protocol 88fb is buggy, dev hsr_slave_1 02:52:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc05000020000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:08 executing program 1: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) pipe(0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) lstat(0x0, &(0x7f0000000600)) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) quotactl(0x5, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f00000002c0)="b7a4d9dd6ff566bd0dca24201f1a414b8f141202498c71830f") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x0) dup3(r9, r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r4, @ANYBLOB=',permit_directio,smackfsdef=group_id,fowner>', @ANYRES32=r9, @ANYBLOB="aca5d6682f", @ANYRESDEC=r6, @ANYRESHEX=r4]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x6d, 0x7d, 0x1, {{0x0, 0x49, 0x8, 0x7, {0x8, 0x0, 0x1}, 0x10000, 0x3, 0xbca5, 0xfffffffffffffe01, 0x0, '', 0x10, 'eql\x00`\x00\xa9[,\x00^\x01\x03\x03\xf0\x00', 0x2, '&!', 0x4, 'eql\x00'}, 0xf, 'eth1$#vboxnet0\xdf', 0xee00, r3, r6}}, 0x6d) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r10 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x7, 0x400000) connect$rose(r10, &(0x7f0000000300)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x3, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffee6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x700}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) move_pages(r11, 0x6, &(0x7f0000000180)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil], 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00^\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 205.430132] protocol 88fb is buggy, dev hsr_slave_0 [ 205.435251] protocol 88fb is buggy, dev hsr_slave_1 02:52:08 executing program 2: syz_open_procfs(0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) ioctl(r0, 0x1, 0x0) preadv(r0, &(0x7f0000000880)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) ioctl(r1, 0x1, 0x0) r2 = open(0x0, 0xfc, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000002}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[]}, 0x1, 0x0, 0x0, 0x2800}, 0x100400c0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r3, 0x0, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040810}, 0x24001040) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@isdn, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) openat$vhci(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhci\x00', 0x48a02) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 02:52:08 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x14, 0x20a201) clock_gettime(0x0, &(0x7f0000000080)={0x0}) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0245720, &(0x7f0000000300)={0x11, {r2, r3+30000000}, 0x9, 0x42}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100c, 0x0, 0x0, 0x0, 0x4, 0x8c, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000640)=""/148, 0x94}], 0x100000000000026e, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) pipe(0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) r7 = socket$inet(0x2, 0x6000000000000001, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x8000000000000002, 0x0) ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f0000000440)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00\x00\x00\x00\x00\x00\x00\x00\xb9\xd9\xd3q\xa1h\x00', 0x0, 0x0, 0x28d, [], 0x0, 0x0, &(0x7f0000000100)=""/5}, &(0x7f00000002c0)=0x78) getpgid(0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r9 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'gretap0\x00'}, 0xffffffffffffff3d) ioctl(r10, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) r11 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r12 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'\xf4\xff\x96', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r11, r12) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000d40)="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", 0x352, r11) r13 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r13, 0x800000c0045005, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x1, 0x11, r13, 0x0) ioctl$KVM_REINJECT_CONTROL(r13, 0xae71, &(0x7f0000000380)={0x7f}) r14 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r14, 0x800000c0045005, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x1, 0x11, r14, 0x0) ioctl$KVM_REINJECT_CONTROL(r14, 0xae71, &(0x7f0000000380)={0x7f}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000700)=ANY=[@ANYBLOB="4ff8266803e516b8e857481a24e31a9c8860c3085e3820bf12bb546ebbdf03a8b80500002a0b6c5b1776d42841bd86af8f542100f827b1187be763faed5c46c9eb7ba6f79e570ba00152d321cd52f2b51faa8ace1b8660e5f1ac21ba6b2ed3aa716068513bf544f9f5a5f8d35fe1aaee90a0ec8071876c0ff5a8ef6eb50bf8de1c20b7dc517629993ed0f8f86e22f42030245dfbed9815944809f12a07bcb78e620b140647f120c1149b8e46c41a469e7aac3b", @ANYRESHEX=r11, @ANYRESOCT, @ANYRESHEX=r1, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r14, @ANYPTR64]], 0x0) 02:52:08 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc05000020000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:08 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xec60175b2779f65b, 0x0, 0x0, 0x0, 0x0, 0xc9, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000400)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000003, 0x10, r3, 0xffff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000002c0)={0x4, r2}) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4001, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x48, "13f9644f103cf549ed91887f3d55c972049a2c9695abd7f030853a4cbeac7f92429de76a807b233abd04951a293aba6ad6d29c9d8b1c3265addcb340b71ad47758eb16f8efa423f5"}, &(0x7f0000000300)=0x50) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r5, 0x8}, &(0x7f0000000380)=0x8) 02:52:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc0500002000000095000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="402300001000012164a0975ab1528904000000002000000000000002", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000212000800050000000000"], 0x40}}, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{{}, {0x1, 0x1}}, {{0x4, 0x1}, {0x4, 0x1}}, {{0x2, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x28) 02:52:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc0500002000000095000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x14, 0x20a201) clock_gettime(0x0, &(0x7f0000000080)={0x0}) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7, 0x7b, 0x1}, 0x7) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0245720, &(0x7f0000000300)={0x11, {r2, r3+30000000}, 0x9, 0x42}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100c, 0x0, 0x0, 0x0, 0x4, 0x8c, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x124) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000640)=""/148, 0x94}], 0x100000000000026e, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x6c00) pipe(0x0) creat(0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) r7 = socket$inet(0x2, 0x6000000000000001, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x8000000000000002, 0x0) ioctl$UFFDIO_WAKE(r8, 0x8010aa02, &(0x7f0000000440)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00\x00\x00\x00\x00\x00\x00\x00\xb9\xd9\xd3q\xa1h\x00', 0x0, 0x0, 0x28d, [], 0x0, 0x0, &(0x7f0000000100)=""/5}, &(0x7f00000002c0)=0x78) getpgid(0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r9 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'gretap0\x00'}, 0xffffffffffffff3d) ioctl(r10, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9f5, 0x0, 0xffff, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0xfffffffffffffffc, 0x0) r11 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r12 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'\xf4\xff\x96', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r11, r12) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000d40)="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", 0x352, r11) r13 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r13, 0x800000c0045005, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x1, 0x11, r13, 0x0) ioctl$KVM_REINJECT_CONTROL(r13, 0xae71, &(0x7f0000000380)={0x7f}) r14 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r14, 0x800000c0045005, &(0x7f0000000000)=0x7b) mmap$binder(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x1, 0x11, r14, 0x0) ioctl$KVM_REINJECT_CONTROL(r14, 0xae71, &(0x7f0000000380)={0x7f}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000700)=ANY=[@ANYBLOB="4ff8266803e516b8e857481a24e31a9c8860c3085e3820bf12bb546ebbdf03a8b80500002a0b6c5b1776d42841bd86af8f542100f827b1187be763faed5c46c9eb7ba6f79e570ba00152d321cd52f2b51faa8ace1b8660e5f1ac21ba6b2ed3aa716068513bf544f9f5a5f8d35fe1aaee90a0ec8071876c0ff5a8ef6eb50bf8de1c20b7dc517629993ed0f8f86e22f42030245dfbed9815944809f12a07bcb78e620b140647f120c1149b8e46c41a469e7aac3b", @ANYRESHEX=r11, @ANYRESOCT, @ANYRESHEX=r1, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r14, @ANYPTR64]], 0x0) 02:52:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x28ae, 0x4) preadv(r3, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000040)) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffef8, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000001d00050ad25a80640c6394fb0224fc0010000c400c00020005359fc137018003001700d1bd0000000000", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 02:52:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc0500002000000095000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 205.793599] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 02:52:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc05000020000000950000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) 02:52:09 executing program 5: prlimit64(0x0, 0x2, &(0x7f0000000280)={0x8, 0xfffffffffffffffc}, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000fe8000/0x4000)=nil) shmctl$SHM_STAT(0x0, 0xd, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000880)={'bridge_slave_0\x00', 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x0, 0x0, 0x4, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, "fe0f44", 0x0, "cd98e8"}}}}}}, 0x0) [ 205.978452] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 02:52:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000006110200000000000dc05000020000000950000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x70) 02:52:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) [ 206.150263] mmap: syz-executor.5 (8185): VmData 18661376 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 206.770520] device bridge_slave_1 left promiscuous mode [ 206.776011] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.810929] device bridge_slave_0 left promiscuous mode [ 206.816433] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.954208] device hsr_slave_1 left promiscuous mode [ 206.993493] device hsr_slave_0 left promiscuous mode [ 207.044027] team0 (unregistering): Port device team_slave_1 removed [ 207.054831] team0 (unregistering): Port device team_slave_0 removed [ 207.064883] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 207.114573] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 207.192633] bond0 (unregistering): Released all slaves [ 209.020869] IPVS: ftp: loaded support on port[0] = 21 [ 209.948802] chnl_net:caif_netlink_parms(): no params data found [ 209.981009] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.987519] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.994520] device bridge_slave_0 entered promiscuous mode [ 210.001866] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.008250] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.015263] device bridge_slave_1 entered promiscuous mode [ 210.033318] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.042998] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 210.058824] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 210.066129] team0: Port device team_slave_0 added [ 210.072067] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 210.079315] team0: Port device team_slave_1 added [ 210.085048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 210.092671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 210.143710] device hsr_slave_0 entered promiscuous mode [ 210.180468] device hsr_slave_1 entered promiscuous mode [ 210.221014] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 210.228095] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 210.242833] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.249333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.255979] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.262487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.290815] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 210.297057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.305670] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.314825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.322327] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.328943] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.339270] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 210.345784] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.354578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.362834] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.369382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.380008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.387772] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.394200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.410198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.417871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.427532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.440756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.448204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.458646] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 210.465353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.477942] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 210.485974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.493331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.503923] 8021q: adding VLAN 0 to HW filter on device batadv0