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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0xfffffffffffffffe, 0x0, 0x0, 0x40000000000000, 0xfffffffffffffffd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:11:38 executing program 0: close(0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@hci, {&(0x7f0000000280)=""/245, 0xf5}, &(0x7f0000000040), 0x2}, 0xa0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/120, 0x78}], 0x1}}], 0x2, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='aio\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) 17:11:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ffd, &(0x7f0000e68000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffe80) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) socket$packet(0x11, 0x3, 0x300) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x80006, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xffffff7e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0xd909}, 0x100) [ 348.096597] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 17:11:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 348.477605] device nr0 entered promiscuous mode [ 348.541484] overlayfs: conflicting lowerdir path 17:11:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e21, @broadcast}, @vsock={0x28, 0x0, 0x1ffffd8ee, @reserved}, @hci={0x1f, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000015c0)={0x20000000}) r5 = fcntl$dupfd(r0, 0x406, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 17:11:39 executing program 3: ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) syz_mount_image$reiserfs(&(0x7f0000000b40)='reiserfs\x00', &(0x7f0000000b80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x3d}]}) [ 348.755154] overlayfs: conflicting lowerdir path 17:11:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x176}], 0x1, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc01812f4, &(0x7f0000000200)) recvmsg(r4, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000015c0)={0x20000000}) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000140)) setgroups(0x54b, &(0x7f0000000180)) pread64(r2, 0x0, 0x0, 0x0) 17:11:39 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000980)) semctl$SEM_INFO(0x0, 0x3, 0x13, 0x0) semctl$SEM_STAT(0x0, 0xe, 0x12, &(0x7f0000000140)=""/75) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x500, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 17:11:39 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000040)) ioctl$RTC_WIE_ON(r0, 0x700f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) r2 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000280)=0xfffffffffffffe03) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000340)={{{@in=@dev, @in6=@ipv4={[], [], @local}}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0), 0x0) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r6}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={r6, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1, 0x8001, 0x2, 0x8000, 0x9}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000200)={r7, 0x200, 0x5}, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 349.088570] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 349.135878] Unknown ioctl 19585 17:11:39 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x000Y\b/\xe5I\xdd\xdd/fu7\xc6{\x06\xa2\bW]\x05\x7f\xfa\xc3\xed\xbdA~\xb1\xb0+\x1dw{\x12\xd8p\xf9\xd0s\xc2jP\xdd\xca\x9e\x1f\xe8\xe3\xce\xc7\x05\xf7s\xd6\x19\xadj\x90N\\\xf3\x86\xbb\xa9}\x9feIM\xbb\xb7b\vc\xe1c\xf6~}\x0f\xa9\x92x&T\xe7\xc8o\xaa\x86\xfa\xee\xda`H\x87\v\x04b\xc5\x9f%\xd6N\vR^\x13\x84\xddE\xe9', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="175a6107302f7d6ae2"], 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) 17:11:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 349.235182] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 349.322173] device nr0 entered promiscuous mode [ 349.531110] kauditd_printk_skb: 2 callbacks suppressed [ 349.531126] audit: type=1804 audit(1575738700.226:238): pid=11912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir754341174/syzkaller.Lj1dbu/22/memory.events" dev="sda1" ino=17078 res=1 [ 349.799130] net_ratelimit: 26 callbacks suppressed [ 349.799138] protocol 88fb is buggy, dev hsr_slave_0 [ 349.809220] protocol 88fb is buggy, dev hsr_slave_1 17:11:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0xa0, 0x6, 0xfffc, 0x4, 0x0, 0x2, 0x0}) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) keyctl$chown(0x4, r6, r10, r8) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) keyctl$chown(0x4, r6, r12, 0x0) setresuid(r3, r5, r12) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) open(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c00)={r1, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000bc0)='/dev/sg#\x00'}, 0x30) sched_setaffinity(r1, 0x0, 0x0) r13 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x9) close(r13) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-0\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x8943, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81\n?\xfa\xff\x04\x00\x00\xbf\xef\xa9\xac\x03x\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') r14 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r14, &(0x7f0000ffc000/0x4000)=nil, 0x0) 17:11:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x2}) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x132341, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0x3ff) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="c1b4"], 0x2) mmap(&(0x7f0000004000/0x4000)=nil, 0x407100, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$VT_SETMODE(r5, 0x5602, &(0x7f0000000080)={0xe, 0xff, 0x53, 0xfff, 0x1}) [ 349.861730] Unknown ioctl 19585 [ 349.879135] protocol 88fb is buggy, dev hsr_slave_0 [ 349.884350] protocol 88fb is buggy, dev hsr_slave_1 17:11:40 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000840)=ANY=[@ANYBLOB="bd4dd2e0ae875909eb866ac9e807fd7a7c627a26133338b2bbf56bf3aa4f4329a6c85312f9e98f12303f8856430200c3fede60da569cdba181cb5172c02e0f32edd33d0852ea50c13a95fd0c2001204b689ba8bd2f751b86ec1f7960393d86d1ac1e6b986021db9dc116334c3666c6a6f71a8e3dd8a62a467197c3c31ff93c9ee3964cbda446a531af3d7d23e0d8b60fce25ae08d7815f1f764df7f4c8ffc36ff0af956cfa4589fb2adafbcbfcbba6fd4e58"], 0x1) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x100, 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x8, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}, @remote, @dev={0xfe, 0x80, [], 0x26}, 0x7ffff, 0x0, 0x100, 0x200, 0x4, 0x20004}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) syslog(0x0, &(0x7f0000000300)=""/120, 0x78) r6 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000130000000388010000000000950000000000000018240000625d8fd013680437a2c1c75f22b796967805bf6d60f7a8d9a80e33ebd1", @ANYRES32=r6, @ANYBLOB="0500000002000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0xd2, &(0x7f0000000640)=""/210, 0x0, 0x1, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x78) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r6, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r6, r8, 0x0, 0x10000) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000140)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:11:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000002440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 17:11:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 350.163967] audit: type=1804 audit(1575738700.866:239): pid=11938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir610645218/syzkaller.kCPy1H/75/file0" dev="sda1" ino=16625 res=1 [ 350.268972] audit: type=1400 audit(1575738700.946:240): avc: denied { map } for pid=11920 comm="syz-executor.3" path="socket:[47356]" dev="sockfs" ino=47356 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_dgram_socket permissive=1 17:11:41 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc01812f4, &(0x7f0000000200)) recvmsg(r4, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000015c0)={0x20000000}) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x4c, 0x2, 0x2c, "d4226cf0aacd02241e8f0702d13eafb8", "aec2d7b97824b4e05de0b3b8c2ff726266337e9e4165f519f52dd319ad2853cd54b4ff770f7d6e915b42aa850d9f4c3b8e5af8587e0660"}, 0x1a, 0x4) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) recvmsg(r7, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f00000015c0)={0x20000000}) r9 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="850000001300000003880100000000009500000000000000182c0000", @ANYRES32=r9, @ANYBLOB="ba75e27204b916fff9f65e2242ce77c63815a696f2d98962681896bb099e19f9d3920e4dcdceb211fc23db7d5c7338c8724153ebffadd6280ba0577f772defb82b6d7ac8e5a363d79953bf15b7d16d85786e513a"], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x78) r11 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r9, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r9, r11, 0x0, 0x10000) r12 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r12, 0xc01812f4, &(0x7f0000000200)) recvmsg(r12, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0xfffffffffffffd31, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000800000d4b750e9e7167cb251e8e0301a30e8ed2c311942585fe9b3c87b2fddc0d59849819a47bfd1b89604833698e74b540000000000000000000000000100", @ANYRES32=0x0, @ANYRES16=r9, @ANYRES32=0x0, @ANYRESHEX=r6], 0x5}, 0x1, 0x0, 0x0, 0x8001}, 0x44000) 17:11:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000080), 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000140)="295ee1311f16f4776710") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) close(r4) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r5, 0x4b35, 0xfffffffc) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) recvmsg(r6, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x1d2}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000000300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) recvmsg(r8, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0x31b}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000015c0)={0x20000000}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r6, 0x0, 0x9de8, r7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x5e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 350.313208] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 350.377694] audit: type=1804 audit(1575738701.076:241): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir669178483/syzkaller.MISGCX/18/file0" dev="sda1" ino=17092 res=1 17:11:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 350.543364] device nr0 entered promiscuous mode [ 350.599155] protocol 88fb is buggy, dev hsr_slave_0 [ 350.604342] protocol 88fb is buggy, dev hsr_slave_1 17:11:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000140)=0x3, &(0x7f0000000180)=0x1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x400) fcntl$setflags(r2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="006fdae95495358e000000e0002bee62eac5790be500"], &(0x7f0000003ff6)='G\x00', 0x5, 0x1014e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe81}, 0x48) 17:11:41 executing program 5: unshare(0x2040400) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000000), &(0x7f0000000040)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x78) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0xffffff7b) sendfile(r0, r2, 0x0, 0x10000) r3 = dup2(r0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfb}, 0x0, 0xffffffffffffffff, r3, 0xf) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x3, &(0x7f0000000640)={[{@default_permissions='default_permissions'}, {@nfs_export_off='nfs_export=off'}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto='xino=auto'}, {@nfs_export_off='nfs_export=off'}, {@xino_off='x@\x00\xa2\xcd\xbc\xe5f'}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_off='metacopy=off'}, {@lowerdir={'lowerdir', 0x3d, './file1'}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) r5 = creat(0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) ioctl$int_out(r3, 0x5460, &(0x7f00000001c0)) mq_notify(0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000000)={0x20, 0xff}) r6 = creat(0x0, 0x0) mq_notify(r6, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280)) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 17:11:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000640)={0x0, 0x0}, 0x10) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) recvmsg(r1, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000000bc0)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x40008020) sendmmsg(r1, &(0x7f00000001c0), 0x0, 0x4001) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15e, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x11}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGETKEYCODE(r3, 0x4b4c, 0x0) write$P9_RAUTH(r3, 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x483) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000100)={0x20}) write$P9_RAUTH(r4, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000500)={'nat\x00'}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f00000005c0)={0x30, 0x1, 0x1, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffff4}, 0x0) ptrace$getregset(0x4204, r5, 0x100, &(0x7f0000000180)={&(0x7f0000000040)=""/87, 0x57}) r6 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xffffffff, 0x401000, 0x4}, &(0x7f0000000580)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x10005}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="85000000130000000389028d00f0ffffff9400000000000000182c00002d1e6f9325ac5a4738bbaefe77f8cd372f6aa30c80f2b72cb733319c84ac1aae1ee1af9f2e45521ded8a96d58f71d9322f3cfb6a0a0506fe2dae77990a8a87a453783d11d7762b253d45b070170b8b2ec350e176dc77386fe16f042c051ba13ac31cd9662b82aafccbbda27205c7e1b5f9d1fdd170d0b1301a564165c6f3d16477dbe53c85d7951324ffa4fa29690e4800dced5e7c27d3ad591c1b6fba3230e92deaec066a3ebaf5161c4fd422eea4fa", @ANYRES32=r6, @ANYBLOB="4f000000020200002aab7362592ca12760562914f6213bc8cf1b"], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x78) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r6, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r6, r8, 0x0, 0x10000) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 17:11:41 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 350.922244] audit: type=1804 audit(1575738701.626:242): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir669178483/syzkaller.MISGCX/19/file0" dev="sda1" ino=17086 res=1 [ 350.999126] protocol 88fb is buggy, dev hsr_slave_0 [ 351.004271] protocol 88fb is buggy, dev hsr_slave_1 [ 351.026104] overlayfs: unrecognized mount option "x@" or missing value [ 351.073830] audit: type=1804 audit(1575738701.776:243): pid=11978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/135/file0" dev="sda1" ino=17074 res=1 [ 351.101068] protocol 88fb is buggy, dev hsr_slave_0 [ 351.101133] protocol 88fb is buggy, dev hsr_slave_1 [ 351.496923] bond0: Releasing backup interface bond_slave_1 [ 351.676137] audit: type=1804 audit(1575738702.376:244): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir669178483/syzkaller.MISGCX/19/file0" dev="sda1" ino=17086 res=1 [ 351.711129] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 351.720850] overlayfs: unrecognized mount option "x@" or missing value [ 351.766966] bond0: Releasing backup interface bond_slave_1 17:11:42 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) pread64(r2, &(0x7f0000000080)=""/45, 0x2d, 0x4) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000015c0)={0x20000000}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="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", 0xffffffffffffff2f) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x2f5}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 17:11:42 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x22100) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x111}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x14}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/115, 0x73}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x4c}, 0x400020e0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000015c0)={0x20000000}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8, 0x10, 0x3309f9861292d67b, r1}) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r4, 0x4b35, 0xfffffffc) fstatfs(r4, &(0x7f0000001600)=""/4096) mkdir(&(0x7f0000000040)='./bus/file1\x00', 0x0) rename(&(0x7f0000000300)='./bus/file1\x00', &(0x7f0000000140)='./bus/file0\x00') 17:11:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:11:42 executing program 3: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x80000000000000, 0xfffffffffffffd2c, 0x0, 0x180000, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'i\xe0\x90\xad85+g6\xa15L\xbb\x1eh,\xe9b\xf9}^\x8b\x8e\xf7S\x0e9\x86 \xda\xbb\x97\a\xc4{\xda\x95\x01U\x8d\xf7=)\x15\x03%\x82\xb3\x91X\x91\x90\x9e\xb8\xc9\x86\xaf\x9f\x18U\xb8v\x02\xb7|\xdf\xb5]\xbe\xd9T\x06\xf2\xe4\xc4\x04O#Sr\xf3\x00\xd8r:\xa8\x83\x85l\x96\x90\xf4\xe3\x06\xa2\\g\xafQ\xe3O\xcb\xc0p2h\xc2>_\x1dWv\xf7\xc4\xa8\xdf3\x99!\xec\xaa \x86F\xf7jG\xc1\xb2\x87\xf5:t~\x94\x9d\xec\xaf\xd0\xd6\x1dk\xf0:}\x12\x15e5\xa8\x80\xf6\xe7\xafO\xd0P\xd95k\xb8M\xed_\xa4\x82i\x11f\xcf_\x94\xb4\xa12\xe8\xc2\xe94\x02\x7f\xf7M\xec\xe9\xc4~ \x8d\xb8\xef\xda\x19t8\x04\xd7=W\xba\x11\x1f66\x95\x98\xcf&\x8fQ8.\x00'/226}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, 'i\xe0\x90\xad85+g6\xa15L\xbb\x1eh,\xe9b\xf9}^\x8b\x8e\xf7S\x0e9\x86 \xda\xbb\x97\a\xc4{\xda\x95\x01U\x8d\xf7=)\x15\x03%\x82\xb3\x91X\x91\x90\x9e\xb8\xc9\x86\xaf\x9f\x18U\xb8v\x02\xb7|\xdf\xb5]\xbe\xd9T\x06\xf2\xe4\xc4\x04O#Sr\xf3\x00\xd8r:\xa8\x83\x85l\x96\x90\xf4\xe3\x06\xa2\\g\xafQ\xe3O\xcb\xc0p2h\xc2>_\x1dWv\xf7\xc4\xa8\xdf3\x99!\xec\xaa \x86F\xf7jG\xc1\xb2\x87\xf5:t~\x94\x9d\xec\xaf\xd0\xd6\x1dk\xf0:}\x12\x15e5\xa8\x80\xf6\xe7\xafO\xd0P\xd95k\xb8M\xed_\xa4\x82i\x11f\xcf_\x94\xb4\xa12\xe8\xc2\xe94\x02\x7f\xf7M\xec\xe9\xc4~ \x8d\xb8\xef\xda\x19t8\x04\xd7=W\xba\x11\x1f66\x95\x98\xcf&\x8fQ8.\x00'}}]}) 17:11:42 executing program 2: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) inotify_init() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x78) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r0, r2, 0x0, 0x10000) accept(r0, &(0x7f00000002c0)=@nfc_llcp, 0x0) chdir(0x0) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(0x0, 0x0) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000019c0)='./file1\x00') uselib(0x0) pivot_root(0x0, 0x0) 17:11:42 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000003c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f627578e5a1de964bd2cf849060d61e46732c776f726b6469723d2e2f66696c65312c75707065"]) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') [ 352.058966] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 17:11:42 executing program 0: set_mempolicy(0x8003, &(0x7f0000000300), 0x9) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x74, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 17:11:42 executing program 1: syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @empty, [], {@mpls_mc={0x8848, {[{0xff, 0x0, 0x1}, {0x7150}, {0x5, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x5f07, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0xffff9, 0x0, 0x1}, {0x81}], @ipv6={0x9, 0x6, "ea8dc3", 0x0, 0x33, 0x3f, @dev={0xfe, 0x80, [], 0x17}, @mcast2, {[@srh={0x2, 0x0, 0x4, 0x0, 0x2, 0x88, 0x98, [@rand_addr="652c2739b76bb9bbe3f0a5f28f35ab09"]}, @hopopts={0x21, 0x0, [], [@hao={0xc9, 0x0, @mcast2}]}, @srh={0x6c, 0x0, 0x4, 0x0, 0x0, 0x8, 0x3, [@rand_addr="8435f43294747d6bc314d8dd7b283c4d", @ipv4={[], [], @remote}, @rand_addr="5609beb535c0a04e6171934e5896b9cb", @ipv4={[], [], @multicast1}, @mcast1]}], @udp={0x4e23, 0x4e21, 0x0, 0x0, [@guehdr={0x0, 0x1, 0x3, 0xff, 0x200, [0x80]}, @guehdr={0x0, 0x0, 0x2, 0x7, 0x100}, @guehdr={0x0, 0x0, 0x0, 0x6, 0x100, [0x100]}, @guehdr={0x0, 0x1, 0x0, 0x2, 0x100, [0x0]}, @guehdr={0x0, 0x1, 0x0, 0x8, 0x100}, @guehdr={0x0, 0x1, 0x0, 0x3, 0x100}], "33a516287c6a45b433ab4fc6b2db95f8361ab2797d276d6b274f4dc19ec241ffed3ee5788eff2652fc327a96"}}}}}}}, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x840, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000040)={0x2a, "972f9a2305b51f635a435f0387e7d05cf7fdbdfdc17afbf57a4e64b854d7983be02a9d9d21284e81d3cf13b1971a856cc057f473ccd5bc35a5d51336420fff422c0dc6b15bc16af5ec3808e11f39f35f1db4af66af16dc363c4a9623da4c0027089378bd1801bc8775907a7d1fe531ce90e8f3795abc419ca4411a03835cbed1"}) [ 352.213513] overlayfs: unrecognized mount option "uppe" or missing value 17:11:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000015c0)={0x20000000}) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc01812f4, &(0x7f0000000200)) recvmsg(r5, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000080)={0x2f, @dev={0xac, 0x14, 0x14, 0x21}, 0x4e20, 0x1, 'wrr\x00', 0x3, 0x8, 0x10}, 0x2c) ioctl$VT_DISALLOCATE(r2, 0x5608) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 352.372223] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 352.391780] overlayfs: unrecognized mount option "uppe" or missing value 17:11:43 executing program 1: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x18}, 0x100, 0xffffffff00000001, 0x3, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0xc) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@local, @broadcast}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000002340)={&(0x7f0000000180)=@caif=@util, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/231, 0xe7}], 0x2, &(0x7f0000001340)=""/4096, 0x1000}, 0x40000000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000005040), 0x400000000000025, 0x0) 17:11:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:11:43 executing program 5: pipe(0x0) close(0xffffffffffffffff) r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) set_mempolicy(0x0, &(0x7f0000000080)=0x3, 0x8) syz_open_dev$sndmidi(0x0, 0x100000001, 0x80) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @rand_addr="03000000856dbb4536049c00e60399f3"}}, {{0xa, 0x0, 0x0, @rand_addr="a9ca3f8f64cec90f9323ce892dee25e3"}}}, 0x108) r2 = socket(0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @rand_addr="03000000856dbb4536049c00e60399f3"}}, {{0xa, 0x0, 0x0, @rand_addr="a9ca3f8f64cec90f9323ce892dee25e3"}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r3, &(0x7f0000000500)=""/175, 0x5d) r4 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r4) rt_tgsigqueueinfo(r0, r4, 0x31, &(0x7f0000000140)={0x10, 0xffff, 0x401}) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfffffffffffffdef) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x80}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x891e, &(0x7f0000000100)={'veth0_to_bridge\x00'}) 17:11:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0x6) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4004c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffb, 0x10102) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17) unshare(0x40040400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000004c0)={0x140000000, 0x2, "fca352eb5e701a168824dffea630562387619789d16987dee8b2e371b25deeb1", 0x6, 0x449, 0x5, 0x20, 0x0, 0x0, 0x1f, 0x6, [0x4d, 0x6, 0x1, 0x1ff]}) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000180)=ANY=[@ANYBLOB="ded25f98a5296916372f5e5a13a2bb193bcc72a23116fb3f6391426b6944326e2c00000000"], 0xe}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40d09) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x0, 0x2}, {0x101, 0x3}]}, 0x18, 0x2) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffe0000000000, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000140)=0x1) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "0284570d6b5476744c0b4d14e9d413014960740dffe8997f0704867876ef3123"}) [ 352.637234] IPVS: ftp: loaded support on port[0] = 21 17:11:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 352.784187] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.852694] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:11:43 executing program 0: r0 = socket$inet6(0xa, 0x5, 0xf5) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d44008a7f70c9136c3286483d77bbe933c78f3b29e45c94781df4f5e35fa47f14f9ce01515881f49eed0b2700"/248], 0x10094) r1 = fcntl$dupfd(r0, 0xc0a, r0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000000)=0x1) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0'}, 0xb) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYPTR], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="83755a8b7c9abd0b6d7982dfc9d8ffd41cdbc4a7956b05e0361b19f161b3a4c19859516522d5f3be67b3a35bc789cf00ee54a61c2b8c8eeb524ad1454c075bb62a12a085f41f221bea219d365ac692f98fcd65544faf2702bd843678c3caa842a7dd"], 0x1a000) [ 353.036765] IPVS: ftp: loaded support on port[0] = 21 17:11:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 353.064088] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.104153] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 17:11:43 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDRT(r2, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e21, @broadcast}, @vsock={0x28, 0x0, 0x1ffffd8ee, @reserved}, @hci={0x1f, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xc80db587) 17:11:44 executing program 2: setfsuid(0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0) poll(0x0, 0xffffffffffffff2c, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000480)=@filter={'filter\x00\x00\x00\x00\x00\x04\x00l\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/607]}, 0x2d7) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x79, 0x4, 0xd1, "f41ae63a3b1298d1a639d6b84f2cfb73", "537959777700367e6d95562e36a250e2c9b3209bcd6aaf3c577deed4c4cfd4472223fecf3d38dd9af13e4097c689a5cd9b73c97bf33c753753d27344b48b99488c936637678f6ef9763892512c5556ce0712a4631444be27038a956bebd24ad177e3962c"}, 0x79, 0x0) 17:11:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73019f21994c97bf952f"]) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x30, r2, 0x321, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x2, @bearer=@l2={'eth', 0x3a, 'hwsim0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4005001}, 0x4000000) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000015c0)={0x20000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_DMA(r6, 0xc0406429, &(0x7f00000002c0)={r7, 0x1, &(0x7f0000000100)=[0x80000001], &(0x7f0000000140)=[0x7ab43f8f, 0x8, 0x1, 0x200], 0x20, 0x2, 0x4, &(0x7f0000000200)=[0x939, 0x4], &(0x7f0000000280)=[0x4, 0xb091, 0x9, 0xbc5, 0x7, 0x7fff, 0xd0, 0x1]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={r7, 0x2}) 17:11:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x38}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r15}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r15}]]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r3, &(0x7f0000004180)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="b7b539a16ab134648c1a8a6058b08f7e0cd6b6fea4c70fd5314dcbf812cba3205bac278c66b2e3b5b20bb9ed7dfb60799f3a3c5ecc6571884539bb2a4c3ff90276c73b0a337ec45007c1823ac940e1394f84dea486263e4849a1a39c65d918b31b2f0a28317f540bed4cdb", 0x6b}, {&(0x7f00000001c0)="51f2a240bdf66c1b2e8e3798f508021ed92db2ffaf6ccea7849028adcb8e1831fd87b60538f79945853a34c39ce936a1c30af4412ba9af2f0d9a4742", 0x3c}, {&(0x7f0000000240)="6f4802b6c2f845f4c2fdace05fd9edd8af8d519ad06a28b954071eef8766735a669c648d9c3484f8d93f1a6e27f9dfa7652d7eba0c232cbf413be0b8abe501bb66e77b4046338e811fe4245732ce14f4781710f9be72c2f43e92d3c2cd167a74fb19fa60afac1293e55bac5ef1c833c596539f85003fb36b885c40c42fb04f5381e5818fb833f6ca958c8a978e7a9b9f06824786f5ce379d8555b6add01cd73079f6b257714dc42eaef9a95e927c41e3eebcaab6529f248bb73da52d5a9c6cd2a599fa215e4bbf1c00dc0a123464f57012dcf2dc990743d8b6d1512ba79e664e9b9e2c1ee2f589048c9b788b845187f9faad52b0d0cb60b035", 0xf9}, {&(0x7f0000000340)="4c4876f43c7c1b0742936cf766", 0xd}], 0x4, &(0x7f00000003c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@cipso={0x86, 0x19, 0x5, [{0x7, 0x11, "c33bad3b32df5c8dd2855edd5cfdd6"}, {0x0, 0x2}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6cc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x200}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="78f0", 0x2}], 0x2, &(0x7f00000014c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @dev={0xac, 0x14, 0x14, 0x26}}}}], 0x70}}, {{&(0x7f0000001540)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000001580)}, {&(0x7f00000015c0)="34d7f64a51533ab230241150d4082c1347247afd2ab6e93be565c4c073495f4ee608487abc", 0x25}, {&(0x7f0000001600)="e08bc3889de94e3c4acaf0a61e62f4ad2a399947d0cae5004a2ea01916ac811049e86b0ab7d234e96e41c68a73163e78f9e2057e99328d4df07e6c141c6a06e8600b1a3ebc4b2f11a08951182fa96ccbe07f033ba5cc71c933a6cbd8a6e4f7c1a65e958eb78f9dd854484dec55d55a1e4549e41c82f7b73fc87058e50736b4b79ebd22e95d439bee04a96e022041e307b0c8e4680df1704caec157ab59a3f51bcdf0f96437a108cb9d5bbec8e81c322dad464e35b25e361e1c9b24e1cc7c260b2e4df919d8d3d7cf3ea97c34f3135e00fa746836f5", 0xd5}, {&(0x7f0000001700)="0370ac81c89c6ddd2d8bc8f1e2bcc07ed4ac70", 0x13}, {&(0x7f0000001740)="d742acdbe4193bb80ce07ca3165e49da1cceead3fb532df67c21e60f8a67438ef8372a4d96d100ba03", 0x29}, {&(0x7f0000001780)="ff6047b6e37474b7e8273f7adc1b84220b26c852cbe6bb6ced74c117e82882bf212818565510e635497dd20288fc4c61a0e4b48422c2b8f67e6de80e6b29d341b7a1429e0f27dbe98411e8b01654013e2021e2", 0x53}, {&(0x7f0000001800)="f46c375288f7172377604a34385c18180563a657dce4439c5b0ccd100338b06f5fb69653ceb7a551b73cd1d3889a1fb358f97f130715ca62fd409664a60d8a337187bc66f122077c81a77f44a020c8b6f22a76aa7139f51f20cfa9dd30157ca4674ccee052d2d6458fea28b56da214a0c5f116954b11fc5105cfbf40dc2182b53b37", 0x82}, {&(0x7f00000018c0)="8ae9f6bda8e87a8f26388e41665a3a4e11e96dc42601a24af2f86bb5136eef341eea837dc135fa50370e25bfcbcc8c542e86449427c85b57133d89b89ee1e91fae9f11f27b6c5d7a0305fb0bcdbcc27ded2a2f4cfcbc4cde02913a75aaf5bcc731516f0494db5d34285a034d7b7f1b56374ab5f4c3e7d503374c3a61743154dcceb16183a25837cd6341e16b6076ee24bce186653deabe4a77d511fb0be23f8a6931341ac820ea7a0920117b79f5539efec946da0855017df56600325b3424df78defd09c9193d489dcf3191071673f68ffb5cc4cf93d519fa3f0e00d746f9a22878bd9079b5b114e5cc1b61", 0xec}, {&(0x7f00000019c0)="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", 0x1000}], 0x9}}, {{&(0x7f0000002a80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000004040)=[{&(0x7f0000002ac0)="0bdc19fdf5e5de2f6cccf4b1e35fc76ce5494402ac470d4cf2b67266f83e5503a66194bb2d1539300287127971937e30142eefb81539334bc0ae463f86cea9680d1269e243b572ed27f4e93101564a68875fcde510f87b5f35e19d36932211d8ea74ce31d8d0089843b8af9101425451e87431e45466256929a4c93c0daeae15d6cc20616d5100b7b5493b38afbcb46968ae32b4f26a710c2191300899b3fc3a109f3f7c74fbc1aa73e6abda8d3cd5b527496ffbee0b2a6b2254ea423be89acd6bba5413361f0ce89b1456f6e40b096c1f26c914ec38c6efe559a1e40eb2990b97db6946", 0xe4}, {&(0x7f0000002bc0)="99f45ca33e374b92e65da0bc9a27494b3156dfe11ea44c2edb7fe63098234b7a497a8cd12e3e24f5d73f95d272", 0x2d}, {&(0x7f0000002c00)="789ec11cdcb6a900243d2174f5683eafbca9df3c56406d06c956b9bfd0a299c038a0c89f2df457c5eaea188e3e364a41805c5bba1d375e713065dfd97420dd3c7fa0c10db3afd52e7cf46e671e7e2b3d37c0af9400d7d7c712b4e4aca1dcbe57b43be4d6291effbb03e6486653deca02bf9dbedaa6606010143eecea2389f26e4fd0e640", 0x84}, {&(0x7f0000002cc0)="e0508a35fc7df3cdc7a00fb4dfd37ce28491cc481e12448be8f83e3750753823bb596150cbac6b6e1e30469c49cb7b6c4bb09f5042", 0x35}, {&(0x7f0000002d00)="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", 0xfd}, {&(0x7f0000002e00)="d848d40fd956792a81227dbfb1afe05db4e2b3467e8f937e4c913928154598ed4b453810ad8301723e7a946e790f2cb06ea2b484a686b2731f526dc9045ae434d2022de01fefb18bb67d491c64dfa13971b6cdec37d9e24c9ab0dfa3de8c8a52dc45b06bf0301280bcb5c4728e910f6ac8b76c93946d76f98708037374546a901db400b3f4880277cedeba6ee3bf1ecf4e", 0x91}, {&(0x7f0000002ec0)="203383b6428212dff19fa4de77ab6b6771299a139a7e", 0x16}, {&(0x7f0000002f00)="d953154822102a8957fa45f6312733194273764e8f21db7b529f82881ae8bf1536c6cd92721e280135bfe63a2ffd", 0x2e}, {&(0x7f0000002f40)="0b157b8057516dc716aec392d617759938b4a6edac16adc24abca06f53b23b57b539025f108717e651728f5bec34e613ea14507607afb639b7893fc00e68e23aa14eac84c8f3707ac473cfd6c635a609125f8e5afa17e42a6586040ac3b380be9a15a8acd904fadea96dcd81a2397570c80264199e76ac9b5cfd3b55cd8baac1dccea27cfcadc301bc0ad6911232d159cbaef8bdea9aba67347c76ebb35fa37d563e37a182650933d6a11de0116e4d7dbb4a691392b47ce5701406962f63f010483988e4ff0fed636214701c4cb3307d8c053541b68dc859dab8fda3c6a3ea6a07162537784655f0f7a6a8ad0b5454", 0xef}, {&(0x7f0000003040)="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", 0x1000}], 0xa, &(0x7f0000004100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x80}}], 0x4, 0x20004005) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8d}, 0x98) 17:11:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:11:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:11:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffc000/0x1000)=nil) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000200)='./file0\x00', r1, 0x0) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000100)="3e4a27d5a43fc5224d47d943501465", 0xf}], 0x1) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 17:11:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="b405000000000000611018000000000000000000000000009500000000000000e219c77db2ea9212f3dfbca758fb4ed1d8fa04b29dddcbb37257278896783d4974cca08f51b4f2b0e4d0f5b657cf880395adad9b877533d526f7895487526f67eb3903e7930e96b17a7f45eca32e36fa667341e02c8440bf4b052d6b00aba69e0260f010eed77a31bdf7193f432f16ed16cfdc890150f10fee125b5791dce7d0c2a53523d61966d0859047ce294e89dae2e8459fb7a300568b467379955bfcb733c020de0198cd9422c4604ecb79a7c98e09a4ab78146d39f43fea4e2fa8b3ef5506fd266066e70747c22a"], &(0x7f0000003ff6)='G\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x78) 17:11:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x888d, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000300), 0x12) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48000040}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x18013be4}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x440}, 0x4048000) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000180)=0x2) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc01812f4, &(0x7f0000000200)) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) recvmsg(r6, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f00000015c0)={0x20000000}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000200)=0x0) lstat(&(0x7f00000004c0)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r9) lstat(&(0x7f00000004c0)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r10) getgroups(0x3, &(0x7f00000002c0)=[r9, r10, 0x0]) keyctl$chown(0x4, 0x0, r8, r11) lstat(0x0, &(0x7f0000000300)) 17:11:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="803025003804000019006400e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0) 17:11:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:11:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./bus\x00', 0x4e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16, 0x8}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r1, &(0x7f00000000c0)={0xffffffffffffff89}, 0x1f1) statfs(&(0x7f0000000100)='./bus\x00', 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc01812f4, &(0x7f0000000200)) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r4 = gettid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) recvmsg(r7, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000400)={0x2, 0x0, &(0x7f0000000080)=""/22, &(0x7f0000000300)=""/232, &(0x7f0000000240)=""/79, 0x1000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') sendfile(r3, r8, 0x0, 0x80040006) dup2(r2, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) tkill(r4, 0x1004000000015) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0x5, 0x80000000) 17:11:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x78) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r0, r2, 0x0, 0x10000) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r3, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0x10026}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/67, 0xffffff14}, {0x0}, {0x0}, {&(0x7f0000004580)=""/200, 0xcb}, {0x0}, {&(0x7f0000000440)=""/219, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xfffffffffffffe37}}], 0x20004582, 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) 17:11:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 354.111880] EXT4-fs (loop0): bad geometry: block count 1080 exceeds size of device (1 blocks) 17:11:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9000000010003b2400e625011000fffff0000000", @ANYRES32=0x0, @ANYBLOB="b56d08000000000008000a00", @ANYRES32=0x6, @ANYBLOB="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"/344], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x278bdfee, 0x80000) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x1, @empty, 0x7caf}, {0xa, 0x4e22, 0xffffffc0, @dev={0xfe, 0x80, [], 0xe}, 0x8}, 0x6, [0x259a, 0x7, 0x80000001, 0x8, 0x79a00000, 0x3c6, 0x5, 0x401]}, 0x5c) [ 354.283495] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 354.312142] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 354.369827] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 354.400266] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 354.478351] device gre1 entered promiscuous mode 17:11:45 executing program 5: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2f646576e0dafa8cb6438dd5"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) 17:11:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x11000, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000300)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc01812f4, &(0x7f0000000200)) recvmsg(r4, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000015c0)={0x20000000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f}, [@map={0x18, 0x2, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x8a, &(0x7f00000003c0)=""/138, 0x40f00, 0xd, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xc, 0x8d2, 0x3ff}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000340)=r6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7302}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}) getpid() r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'rose0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x4, 0x1, 0x7f, 0x1f, 0x0, 0xffffffffffff7fff, 0x60008, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x3, @perf_config_ext={0x0, 0x4}, 0x200, 0x3, 0x9, 0x5, 0x0, 0x7fff, 0x7}, 0xffffffffffffffff, 0x7, r8, 0x2) 17:11:45 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc01812f4, &(0x7f0000000200)) recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x80) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000540)={[], 0xff, 0x5, 0x1f, 0x0, 0x4, 0xd000, 0x3000, [], 0xffff}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="926504000d000000"], 0x25c}}, 0x0) 17:11:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:11:45 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000100), 0x250ce184) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) dup3(r1, r0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/114, 0x72}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000900)={0x0, 0x0, 0x2080}) r5 = gettid() tkill(r5, 0x14) 17:11:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) sendfile(r4, r3, 0x0, 0xedc3) 17:11:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x8, 0x8000}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000145ad174e37fe913c639ffb7b9d8768629941ff545b11dad965beb75759c15f94ff13493cb00332f34dd974e62477c252ccd232394b81e891a599b9cca35fc47dfb1ef977a336ea3d557c460b0bbb7f5bc3a0a127113fe2c01d7e05d612ef25f089f76c047e9b12190d7e89195a80d674c7e45bd5a0c40fe6120e2e06be3a5633ab3400"/149, @ANYRES16=r1, @ANYBLOB="120728bd7000fcdbdf250c000000300004001400010062726f6164636173742d6c696e6b00000c00010073797a30000000000c00010073797a3000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000091}, 0x4008000) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) setregid(0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x224040, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 355.027298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12146 comm=syz-executor.1 [ 355.159771] net_ratelimit: 24 callbacks suppressed [ 355.159796] protocol 88fb is buggy, dev hsr_slave_0 [ 355.170609] protocol 88fb is buggy, dev hsr_slave_1 17:11:45 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x7) getpgrp(0x0) lstat(&(0x7f0000000240)='.\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r4, &(0x7f0000ffd000/0x3000)=nil, 0x1800) timerfd_create(0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$FIBMAP(r5, 0x227a, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$FIBMAP(r6, 0x227a, &(0x7f00000002c0)) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x227a, 0x0) r7 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$FIBMAP(r7, 0x227a, &(0x7f00000002c0)) r8 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$FIBMAP(r8, 0x227a, &(0x7f00000002c0)) fstat(0xffffffffffffffff, 0x0) setresgid(0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, 0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000300)={{0x5, 0x0, 0x0, r3, r9, 0x0, 0x2}, 0x0, 0x400, 0x101, 0x1000000}) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) rmdir(0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r10 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r10, 0x7fff) sendfile(r1, r10, 0x0, 0x8040fffffffd) 17:11:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 355.239159] protocol 88fb is buggy, dev hsr_slave_0 [ 355.244531] protocol 88fb is buggy, dev hsr_slave_1 17:11:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) init_module(&(0x7f00000000c0)='\x00', 0x1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0xfffffffc) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000)={0x7fffffff}, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:11:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x8, 0x8000}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000145ad174e37fe913c639ffb7b9d8768629941ff545b11dad965beb75759c15f94ff13493cb00332f34dd974e62477c252ccd232394b81e891a599b9cca35fc47dfb1ef977a336ea3d557c460b0bbb7f5bc3a0a127113fe2c01d7e05d612ef25f089f76c047e9b12190d7e89195a80d674c7e45bd5a0c40fe6120e2e06be3a5633ab3400"/149, @ANYRES16=r1, @ANYBLOB="120728bd7000fcdbdf250c000000300004001400010062726f6164636173742d6c696e6b00000c00010073797a30000000000c00010073797a3000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000091}, 0x4008000) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) setregid(0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x224040, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 355.399115] protocol 88fb is buggy, dev hsr_slave_0 [ 355.404309] protocol 88fb is buggy, dev hsr_slave_1 17:11:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'\b\x00@', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = request_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='keyring\x00', r3) keyctl$negate(0xd, r2, 0x7f, r4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'\b\x00@', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) r7 = request_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='/dev/dlm-monitor\x00', r6) keyctl$read(0xb, r7, &(0x7f0000000300)=""/108, 0x6c) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc01812f4, &(0x7f0000000200)) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) recvmsg(r8, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f00000015c0)={0x20000000}) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@null, @bcast, 0x4, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @null, @bcast]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x3, 0x0) socket$isdn(0x22, 0x3, 0x22) 17:11:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='net/sockstat6\x00\xcf\xb7Pg\xdb\x88j\x17\xad\x9f\xd9#\x01\xddWs\xfdF#]\xf9\x97\xad\xa6%./B\xb3E\x05V\x97\xebZQ_\xc4\x06]N\x11\xbeyu_\xc4\xedx]V\"\x06\xcd\x8f\xca\xbb \xc7o1\t5dl\xb0\xcaE\xb8\xceS;\\\xe2Lt\x9e\",\xdc\xbe$\x1e3:I_\v\x8d\xdas\x9e\x1bA\tC\xc5\xdf\xdb\xb8\xf2\x84\xf9$t\xf8}HX\x8b=7\x18\xce') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x4) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x485, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0xfd, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x20002200b, 0x2, 0x0, 0x5, 0x0, 0x6}, 0x0, 0x9, 0xffffffffffffffff, 0x2) syz_open_dev$loop(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000d52ff0), 0x0) close(0xffffffffffffffff) socket(0x1, 0x0, 0x4) setsockopt(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000080)={0x3, 0x2}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000300)=0x2015805c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xffffffffffffff1a) [ 355.733967] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 0 transid 0 /dev/loop2 [ 355.828519] BTRFS error (device loop2): superblock checksum mismatch 17:11:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x482880) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x8, 0x8000}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000145ad174e37fe913c639ffb7b9d8768629941ff545b11dad965beb75759c15f94ff13493cb00332f34dd974e62477c252ccd232394b81e891a599b9cca35fc47dfb1ef977a336ea3d557c460b0bbb7f5bc3a0a127113fe2c01d7e05d612ef25f089f76c047e9b12190d7e89195a80d674c7e45bd5a0c40fe6120e2e06be3a5633ab3400"/149, @ANYRES16=r1, @ANYBLOB="120728bd7000fcdbdf250c000000300004001400010062726f6164636173742d6c696e6b00000c00010073797a30000000000c00010073797a3000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000091}, 0x4008000) unshare(0x20600) socket$inet_udp(0x2, 0x2, 0x0) setregid(0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x224040, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x801, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 355.885149] BTRFS error (device loop2): open_ctree failed 17:11:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000240)={0x8000, 0x4, 0x48, 0x7ff, 0x8}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000000140)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xfffffffffffffde7}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f00000001c0)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1a}]}, 0x24}}, 0x0) [ 355.959157] protocol 88fb is buggy, dev hsr_slave_0 [ 355.964367] protocol 88fb is buggy, dev hsr_slave_1 [ 355.986629] audit: type=1326 audit(1575738706.686:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=12203 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0x0 17:11:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) recvmsg(r1, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e22, 0x4, @rand_addr="6300c0784ae27d7d6503d02e7bf4c4eb", 0x3ff}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x8}, @in6={0xa, 0x4e24, 0x40, @mcast2, 0x23}, @in={0x2, 0x4e20, @loopback}], 0x88) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) semop(0x0, &(0x7f0000000080), 0x49) [ 356.039132] protocol 88fb is buggy, dev hsr_slave_0 [ 356.044319] protocol 88fb is buggy, dev hsr_slave_1 [ 356.435436] netlink: 'syz-executor.0': attribute type 26 has an invalid length. 17:11:47 executing program 1: syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 17:11:47 executing program 2: perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[], 0x0) open(0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)) write$P9_RREADDIR(r2, 0x0, 0xe850f50af522f5d) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@local}}, 0xe8) close(r3) r4 = socket$inet6(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@local}}, 0xe8) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@local}}, 0xe8) close(0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in6=@local}}, 0xe8) close(r8) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)={@local, 0x55e6, 0x1, 0xff, 0x0, 0x0, 0x1}, 0x20) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r10 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r10, 0x400, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x89a1, &(0x7f0000000180)={@remote, 0x27}) ioctl$sock_inet6_SIOCADDRT(r11, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) sendmsg$can_raw(r10, &(0x7f0000000300)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=@canfd={{0x4}, 0x16, 0x3, 0x0, 0x0, "337c58eef63ed8872c57e0e1d1675d06371dd2c6deac5e554abb552b6bda03ab4883f77b51d51ebeb6592059bbd1a3b8c106e56c52156fa40ef1ddd43f3d1e77"}, 0x48}, 0x1, 0x0, 0x0, 0xc}, 0x20000000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="002e628c"], 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x1f, {0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x400, 0x0, 0x4, 0x800000b}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, 0x7f, 0xd0ec, 0x6, 0x9, 0x20}, &(0x7f0000000100)=0x98) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='security.ima\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="05001400000007ff0000a0ef6a9cc40a177ba0ff47738a5012607ddb10714ce475999e340ef20fc8c3bcc6f17565d35e88db04aa977c4aaec771e8f11d020cf97bfc23470938fce4cb114ffd9386b51779f9a76f8ac32dbba316f130c222821c1b64eef5d6c2c1c5605df97e72473c008af1dca82405073c1cffb011264451953d601c2dc05559b1ccd337db112edfe61b5b3c4dbe08a91f8382df4891d9a2c8423385976eaeac8b33c24d850ad4a973b79c83999209e38b137401800000750ba844dcb9d6cf53d5a3d94abdc23711d1db9780d6962f95203ace308ed2d303d167bdd8384da83c034cd7e11d559359c735c07cca86aa95bf2cf1e20dfc2967a675a9a3affe3bbaf7a670630d714a75460725ea58af661e3ef1f25525593fa4e09a801478b939"], 0xa, 0x2) 17:11:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:11:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) pipe2(&(0x7f0000000340), 0x4000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000340), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340), 0x4) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./bus\x00', &(0x7f0000000400)='./bus\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x240, 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0x4b3}, {&(0x7f0000000ec0)=""/114, 0x72}, {&(0x7f0000000980)=""/43, 0x2e1}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/111, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000000500)=""/154, 0x7c}, {&(0x7f0000001300)=""/232, 0xfffffffffffffe71}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) writev(r3, 0x0, 0xfffffffffffffee8) unshare(0x40000000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40000) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x841, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000300)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x928}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000180)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, &(0x7f0000000100)=0x54) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) 17:11:47 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="056465763d2e2f66696c65312200"]) syz_read_part_table(0x5, 0x7, &(0x7f0000001500)=[{&(0x7f0000000000)="e3e6e2131e13740105b557c0a947d0a4d0e0c75c3e77bcb8bbd34ebbeb590f12723f25d5238c3916d6472325ca36166b725cccfb570c522fccfe73001b628afef3b651de084f745aa2c4e460a5b026e844ae78649ac3c349e7efedd832645849ff5b165b6c220ed7f552c73f7c20ee0b1f14e6374d846969d42eb5bdb70d1be06440948092fa889ce9f3bab9e84a9f34254b5942c92a307bc59fa747a08610a0db0a9450f8f3c1cb74c0d4ae6f864845d2bc292cf951e11efc13f0f2c6704e5523", 0xc1, 0xfffffffffffffff7}, {&(0x7f0000000140)="80edfce48e1cc54e1cacea1f3d48bcf92c6c0dccf932fad044da4fe73cae534ec1474c0eb79bcd5b0768685080f9c4beef1d205ccbb580a8ef9248c12e8b7d04758af23bfada25a14ab1f36b47c6708c", 0x384, 0x6}, {&(0x7f0000001680)="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", 0x9d, 0xff}, {&(0x7f00000001c0)="91a900d982b0bc5e112808fb33573554e0fb77371424fcfc457b31666f2ba115178f98e4085f7743b17e4b5c6529b663a91465b7f34be15a42fc09d24c0896bcb961e1fe0784614121aebfb5c73c3c", 0xfffffffffffffffb, 0x1}, {&(0x7f0000000340)="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", 0xfa, 0x8001}, {&(0x7f0000000440)="44928dc8d0174ddafa6a73e1b789f8d455355f93906fe1afea00d51d7447687e9f32b7981539f8b2adca0bcf5c5ac73e1485e54313038630f0e7562aad9e1759f6a78c084a97e29f524a5046654a5bd6bc909028578d9528dd0a25b0f9160d0ab0034ab6fb2da01ca6b9dc321b24a7a754b3384e9cbc8a8e60e05995cb6e9414f9509e82bd743801c3dc4fa1f83487d90a017f5e20d725", 0x97, 0x5}, {&(0x7f0000000500)="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", 0x1000, 0x1f}]) 17:11:47 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) recvmsg(r1, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x5, 0x8001, 0x1, 0x0, 0x0, [{r2, 0x0, 0x2}]}) [ 356.788448] audit: type=1326 audit(1575738707.486:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=12203 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0x0 [ 356.792441] netlink: 'syz-executor.0': attribute type 26 has an invalid length. [ 356.867315] IPVS: ftp: loaded support on port[0] = 21 [ 356.896876] IPVS: ftp: loaded support on port[0] = 21 17:11:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:11:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000001c0)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x4a59, 0x4, 0x8}, {0x200, 0x0, 0x0, 0x6}]}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480), 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000000)={[], 0x3, 0x2, 0x0, 0x0, 0x8, 0xf000, 0x917a4b36bb6feca7, [], 0x2}) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 17:11:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='umask=00000000000000000000000,euid=', @ANYRESDEC=0x0, @ANYBLOB="2c0000acef7e533fd3f9fe947590e0883d60bf9ffe1a530d8a48cfdb"]) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000a, 0x10, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) [ 357.341417] hfs: unable to parse mount options 17:11:48 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x7, 0x80) ioctl$SIOCNRDECOBS(r0, 0x89e2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) fcntl$setstatus(r2, 0x4, 0x800) syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x5, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000100)="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", 0xfe, 0xb7}, {&(0x7f0000000480)="33d3ef8e09b9982d6be7243f9df5d33de068101d7be81a63ef53a2d23ee304da7118e626bbdcfc5b9109b73111a08955efe0345e63de350e23f0fda0f5493507511c614ba28d06163a6ce82ae7513289b4c57655f7b5782ee0b6902021dea31f8c006e29f6716f850943daa7bc7ca69980fb7f69058913a217b915ab657f63106f68c75270771cdc64780d800055369996d0", 0x92, 0x3}, {&(0x7f0000000080), 0x0, 0x1ff}, {&(0x7f0000000380)="3cca97bfe3825bded5d3d8424c305c2f7d2480454e531ec87588114efad2875d7e0feda0819b9f2ba7e0c6b404ddc1e01de6252d437fc681a87179f3edd57827d789074494ea141401006a9353704efbe95b345cb92b17445d5145eb7ebe7b058e2490e197189df66b8ae7e802a559413aa95c5e18ec7beff4ffdc1c1c319b198a6c947a4904e909b4b0d3f304a7dfbe57c417d70b356479bcdab77c9017771b28d06df87c244dc38827918aa53b2f88e6c62d3984048fed40050d3ad502cfe11f089345d95b555bce9971", 0xcb, 0x400}], 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB='lockproto=dlm,lockproto=lock_nolock,commit=0x0000008000000009,statfs_percent=0x000\a\x00\x00\x00000000000,spectator,smackfstransmute=:,euid=', @ANYRES64, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB]) 17:11:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 357.614806] gfs2: commit mount option requires a positive numeric argument [ 357.637091] gfs2: can't parse mount arguments 17:11:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/19, @ANYRES32=0x0, @ANYBLOB="0100000000000000080015000000000008000d0003000010"], 0x3}}, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x29) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r5}]]}}}]}, 0x38}}, 0x0) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) recvmsg(r7, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f00000015c0)={0x20000000}) write$ppp(r6, &(0x7f0000000400)="503e4ce29cbd871cb44746ea371af0cd8a4839489f4e81d30b75c5c78e72d2062ff262463487f4ce1ea94c11e5ac8e83a25d5962d1c23040e478903c1af7b370969563336d6871e4758020f5565bf62272578944c0cf3bc947cf9402a652dfeeb98a", 0x62) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', r5}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={@rand_addr="2b6ba4718ad66218b0392ad6454cd805", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x7, 0x9, 0x2262, 0x400, 0x7fffffff, 0x2, r9}) r10 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc01812f4, &(0x7f0000000200)) r11 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc01812f4, &(0x7f0000000200)) recvmsg(r11, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f00000015c0)={0x20000000}) accept4$tipc(r10, &(0x7f0000000300), &(0x7f0000000380)=0x10, 0x800) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0819cb000000000008001b00000000d720d0b0b504ade3ae920008000d000000000058c5ad68b73210a8c817bee57c399d0b0d76c924bab9983c5dae3a8b05a10feabccc0b4656166270f881dadccaf6b17be45041c145716d8a8da5eacfc6f39a872c413bb883db311b82c362cdfe3b665dc435a63d5530199553494f6a1cbddaab6897720623c1717206fe0f6016be560bb47d3337aefec43f5a84ec1964b391ea8312cd85443ddc93708ce3f4ba735ac8a0357d348c197a528e6858ffeb1cbc76010a306153f018ae52449ca8c685f87c6d39bc174c5a7a11ee86b0f10ae138e5c82cf66f2314b7bbb6086ee440929f"], 0x30}}, 0x0) 17:11:48 executing program 0: fallocate(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) keyctl$session_to_parent(0x12) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000380)={0xf1fb9131f8704894, 0x70, 0x81, 0x0, 0x80, 0x0, 0x0, 0x5, 0x2000, 0x16, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffff8, 0x8, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x7d7d, 0x8, 0x7, 0x3, 0xf1, 0x3}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) connect$tipc(0xffffffffffffffff, &(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x10) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x1) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xc550b05ee4c9b48d) [ 357.914592] IPVS: ftp: loaded support on port[0] = 21 [ 357.950686] audit: type=1804 audit(1575738708.646:247): pid=12275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir754341174/syzkaller.Lj1dbu/39/file0/file0" dev="loop0" ino=9 res=1 [ 358.098409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:11:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:11:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x23f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc01812f4, &(0x7f0000000200)) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) recvmsg(r6, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f00000015c0)={0x20000000}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r5]]) [ 358.632837] audit: type=1804 audit(1575738709.336:248): pid=12287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir754341174/syzkaller.Lj1dbu/39/file0/file0" dev="loop0" ino=9 res=1 [ 358.796036] 9pnet: Insufficient options for proto=fd [ 359.005974] device 00 left promiscuous mode [ 359.765481] IPVS: ftp: loaded support on port[0] = 21 [ 360.199125] net_ratelimit: 26 callbacks suppressed [ 360.199134] protocol 88fb is buggy, dev hsr_slave_0 [ 360.209279] protocol 88fb is buggy, dev hsr_slave_1 [ 360.279134] protocol 88fb is buggy, dev hsr_slave_0 [ 360.284324] protocol 88fb is buggy, dev hsr_slave_1 [ 360.999116] protocol 88fb is buggy, dev hsr_slave_0 [ 361.004239] protocol 88fb is buggy, dev hsr_slave_1 [ 361.399175] protocol 88fb is buggy, dev hsr_slave_0 [ 361.404501] protocol 88fb is buggy, dev hsr_slave_1 [ 361.479135] protocol 88fb is buggy, dev hsr_slave_0 [ 361.484279] protocol 88fb is buggy, dev hsr_slave_1 [ 361.592144] IPVS: ftp: loaded support on port[0] = 21 [ 362.280873] chnl_net:caif_netlink_parms(): no params data found [ 362.567176] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.573896] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.581764] device bridge_slave_0 entered promiscuous mode [ 362.588984] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.595517] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.604547] device bridge_slave_1 entered promiscuous mode 17:11:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat(r1, &(0x7f0000000040)='./bus\x00', 0x234000, 0xbfb76780c034bdb1) openat$cgroup_subtree(r2, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) open(&(0x7f00000009c0)='./bus\x00', 0x4040, 0x10) acct(&(0x7f0000000140)='./bus\x00') [ 362.621716] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 362.632362] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 362.737886] audit: type=1800 audit(1575738713.436:249): pid=12308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17009 res=0 [ 362.769157] audit: type=1804 audit(1575738713.446:250): pid=12308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/145/bus" dev="sda1" ino=17009 res=1 [ 362.817404] bridge0: port 3(gretap0) entered disabled state [ 362.941798] device gretap0 left promiscuous mode [ 362.946758] bridge0: port 3(gretap0) entered disabled state [ 362.999320] audit: type=1804 audit(1575738713.696:251): pid=12308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/145/bus" dev="sda1" ino=17009 res=1 [ 363.013828] Process accounting resumed [ 363.039231] audit: type=1800 audit(1575738713.716:252): pid=12308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17009 res=0 [ 363.294133] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 363.301758] team0: Port device team_slave_0 added [ 363.307369] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 363.314953] team0: Port device team_slave_1 added [ 363.322756] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 363.330569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 363.621183] device hsr_slave_0 entered promiscuous mode [ 363.659553] device hsr_slave_1 entered promiscuous mode [ 363.710299] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 363.717189] device bridge_slave_1 left promiscuous mode [ 363.722965] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.750228] device bridge_slave_0 left promiscuous mode [ 363.755890] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.811350] device bridge_slave_1 left promiscuous mode [ 363.817044] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.860019] device bridge_slave_0 left promiscuous mode [ 363.866094] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.559441] net_ratelimit: 20 callbacks suppressed [ 365.559451] protocol 88fb is buggy, dev hsr_slave_0 [ 365.570109] protocol 88fb is buggy, dev hsr_slave_1 [ 365.639184] protocol 88fb is buggy, dev hsr_slave_0 [ 365.644735] protocol 88fb is buggy, dev hsr_slave_1 [ 365.799161] protocol 88fb is buggy, dev hsr_slave_0 [ 365.804285] protocol 88fb is buggy, dev hsr_slave_1 [ 366.439145] protocol 88fb is buggy, dev hsr_slave_0 [ 366.444367] protocol 88fb is buggy, dev hsr_slave_1 [ 367.239126] protocol 88fb is buggy, dev hsr_slave_0 [ 367.244606] protocol 88fb is buggy, dev hsr_slave_1 [ 370.231614] device hsr_slave_1 left promiscuous mode [ 370.292381] device hsr_slave_0 left promiscuous mode [ 370.333484] team0 (unregistering): Port device team_slave_1 removed [ 370.343930] team0 (unregistering): Port device team_slave_0 removed [ 370.356294] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 370.424159] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 370.501649] bond0 (unregistering): Released all slaves [ 370.593277] bond2 (unregistering): Released all slaves [ 370.599269] net_ratelimit: 16 callbacks suppressed [ 370.599275] protocol 88fb is buggy, dev hsr_slave_0 [ 370.599333] protocol 88fb is buggy, dev hsr_slave_1 [ 370.630895] bond1 (unregistering): Released all slaves [ 370.685909] device hsr_slave_1 left promiscuous mode [ 370.732914] device hsr_slave_0 left promiscuous mode [ 370.772832] team0 (unregistering): Port device team_slave_1 removed [ 370.786905] team0 (unregistering): Port device team_slave_0 removed [ 370.797541] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 370.834068] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 370.904162] bond0 (unregistering): Released all slaves [ 370.954895] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 370.972005] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 371.007547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.016239] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 371.027761] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 371.036937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.045593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.058978] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 371.066063] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.075683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 371.082852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.091958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.100296] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.106666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.114102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.123158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 371.132226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.140894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.150880] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.158162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.167416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 371.176352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.187547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 371.196655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.208432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 371.217964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.227101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.235691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.246610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 371.254346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.262846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.330840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 371.399244] protocol 88fb is buggy, dev hsr_slave_0 [ 371.404400] protocol 88fb is buggy, dev hsr_slave_1 [ 371.410034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.417943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.472022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 371.484912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.493208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.508814] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 371.515738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.545457] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 371.553939] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 371.568619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.576201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.596722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.639179] protocol 88fb is buggy, dev hsr_slave_0 [ 371.645079] protocol 88fb is buggy, dev hsr_slave_1 [ 371.742770] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "dev=./file1"" [ 371.769140] protocol 88fb is buggy, dev hsr_slave_0 [ 371.774802] protocol 88fb is buggy, dev hsr_slave_1 [ 371.799184] protocol 88fb is buggy, dev hsr_slave_0 [ 371.804725] protocol 88fb is buggy, dev hsr_slave_1 [ 372.063557] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "dev=./file1"" 17:12:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x28}}, 0x0) 17:12:02 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) gettid() tkill(0xffffffffffffffff, 0x33) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x408000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000015c0)={0x20000000}) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff), 0x0, 0x80, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a36ae36"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 17:12:02 executing program 0: socket$alg(0x26, 0x5, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x5d235ecb52746e27, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mISDNtimer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1300000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 17:12:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:02 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x1d7) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000240)=@in={0x2, 0x4e20, @empty}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='A', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x40) 17:12:02 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1d030000530d000000001600000014000100100001007564703a73797a3100000000"], 0x28}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100108000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x268, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcd59}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x157}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x118d9e88}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0xffffffffffffff7b, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x77}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x8}, @TIPC_NLA_PROP_WIN]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x30000014}, 0x20000000) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r3, 0x0) r4 = accept(r3, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x80) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) recvmsg(r8, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$TCSBRKP(r8, 0x5425, 0x1) r9 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc01812f4, &(0x7f0000000200)) recvmsg(r9, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r10, &(0x7f00000015c0)={0x20000000}) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f00000002c0)=@buf={0x5a, &(0x7f0000000240)="57bcb8b5ada522592330ab77d6502147e76de38a6c1bd1db2ee4a5b7f1cbfa75dfe92a5cdaeb7804af945b77902d5252136b5f7f2b4c4295b91b79ea117e370b16f42622cbdace32e67ae26c9e2ff9269abeec66e86e5a78ffe9"}) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) r11 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc01812f4, &(0x7f0000000200)) recvmsg(r11, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r12, &(0x7f00000015c0)={0x20000000}) finit_module(r6, &(0x7f0000000180)='ppp0\x00', 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") write$binfmt_elf64(r4, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) 17:12:03 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = inotify_init() r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x96) 17:12:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x10000000000000ad, 0x2, [{0x38d, 0x0, 0x14d564b}]}) [ 372.314004] ceph: device name is missing path (no : separator in [d::],0::6®6) 17:12:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 372.464179] ceph: device name is missing path (no : separator in [d::],0::6®6) 17:12:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a0000000610"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x10000000000000ad, 0x2, [{0x38f}]}) 17:12:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 17:12:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = creat(&(0x7f0000000180)='./file1\x00', 0xb6) r1 = socket$inet(0xa, 0xa, 0x40) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0xc00c038, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x400000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x7, 0x8000, 0x0, 0x1, r2}, &(0x7f0000000240)=0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x550b, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x101040) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x3, 0x800000000, 0x0, 0xff, 0x62160555, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000], 0x0, 0xc00}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17:12:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 372.870564] bridge1: port 1(syz_tun) entered blocking state [ 372.877353] bridge1: port 1(syz_tun) entered disabled state [ 372.885755] device syz_tun entered promiscuous mode 17:12:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/368]}, 0x1e8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:12:03 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0505405, 0x0) 17:12:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x10000000000000ad, 0x2, [{0x48}]}) 17:12:03 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socket$inet6(0xa, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0x12c, 0x33) 17:12:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/368]}, 0x1e8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:12:04 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 17:12:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x0, 0x30}, &(0x7f0000000140)=0x18) 17:12:04 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r1 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/185) shmctl$IPC_RMID(r1, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000003640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/138, 0x8a}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) r6 = creat(0x0, 0x8) r7 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r7, &(0x7f00000027c0), 0x0, 0x0, 0x0) fallocate(r5, 0x8, 0x2000000004005, 0x0) fcntl$dupfd(r6, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x9}}) setitimer(0x0, &(0x7f00000001c0), 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup(r8) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000005) r10 = dup3(r9, r8, 0x0) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000080)={0x0, 0x81ff}) write$UHID_INPUT(r10, &(0x7f00000015c0)={0x8, "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", 0x1000}, 0x72b) write(r10, &(0x7f00000003c0)="f1289f6ca2f082714b557592f553a94d0990f517cebf0f3c1044f53080348799728e84d18f49a513790b4cbec40c0c446805ba94e26eb8a5fb43824bc2930cd7b473ebc2207200a43310044f06925eb56aa9e56c3133e918fdc48f2332836e957dd583e36c28994431b3447a8ec98cf57d77b3b78c60162494a4cea00992a4893bc1a8d4890b2a69cf4cfa502f4df77130c0afc8e6626da7b09e9b3b8222b47a9bc5af99b2424aa64593e5de46b0566cea877053a7dd629f4eb14305c75802876f6c80e3af1bf3aa", 0xc8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002380)=ANY=[@ANYBLOB], 0x0) 17:12:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/368]}, 0x1e8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:12:04 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) creat(0x0, 0xb6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3, 0x800000000, 0x0, 0x0, 0x62160555, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000], 0x0, 0xc00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x3, 0x0, 0x4, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:12:04 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0x10000026f) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 17:12:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x40000010}]}) 17:12:04 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/368]}, 0x1e8) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:12:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:04 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) creat(0x0, 0xb6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3, 0x800000000, 0x0, 0x0, 0x62160555, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000], 0x0, 0xc00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x3, 0x0, 0x4, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:12:04 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = creat(&(0x7f0000000180)='./file1\x00', 0x0) r1 = socket$inet(0xa, 0xa, 0x40) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0xc00c038, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x400000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x7, 0x8000, 0x0, 0x1, r2}, &(0x7f0000000240)=0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x550b, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x800000000, 0x0, 0xff, 0x62160555, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000], 0x0, 0xc00}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000780)={"54abec7338595f275a2292c45ff078f1cbbf04241d1c3421ec9bf61b2221bc18246e74f0001e36735c2ad340bf94ad2a35cfc5d0953a3b2bfd41e2e051c6765447395415a9b05dffbe957e300168dc46f8377130fd28e50a805a6005ab6167da65430e3fcc214d7893c6d91026b5f5192f346a367dbc8ae5df0fd099b4e7a6dadd7f555b203f504eda86e0e8d8c5f319604db5a686750d03bf3a67210063e9a17ca0a1ccd80a7d57cb034b828b784b14c9e5dd70ca358c6819c3df7f4443dced6d9a56bb54eac6538cc61c5e9ef3bda9feeb62cbe4f0e1d1c7f6cbbcada85dbb247b0551773f0734e6f4733db49c22e497557c2f74bfa0e4af9b6228643f180d9f9e1e2bcdf0c35a5b8c388e728b574a066e190800db7b42573f534b8f60e8f756dc4d8dec7ad58b0474fc002851b265cc72099d43115828ac723e73009150fcf7196b4133e2988d4b0fc459e57293afef8837fa0d5d24b984a95cb4bdc48fc9c6e73ebee6b1a3239b2c0eef7c751ccb9f2dcdc3c69173db48df6b5d6e59e6465283de675a8d053e7f3abf86f43006a5a0c6225a589c12583e767b9d817f17bf690444a18e6f8a35b2cb4b60c191efbb16393560b568ee6c82bed918aa4a34b575ac9966b395aafa7fc3b7f467b484eb7d2617e0a240e8acbc2a7e02b650f7d1be52f462be20faa32dd88eb041e2c46b24ed7ab79c10f05296f5461f4ebda25dd7b9908da4be62b0871b169016fab8aae31c7ba45e5b30b7556a062999f43d2dbb9995d2d5de72ffe885bf6bce45caa470933c0906807da75cd38533d8f16d875452c543b259e78215011d2be638eab023513cfe0693d3107e17cfc87e038fc7d1db232d15307fe1d2a818d0a4bde2c53d221111ffa646514dd1fbd3c011b058f79c6fb0a31857ea309018bf72180a434611195c975cf5e285777231b6f158ecaf212183600379fe9762277c13cb6cde9cc0178b883fd1f210180e599f8eb33d33a9ff0f70db1de485b2f2434f2707bf9a54bb6aff687c515c430d5087f4d53a57adf7c97a06dcc61d7733a93dc505d57d8d5c83bf83e345a979307d708756c3f0f1c53a28883b665fda239019f32fc6f07d700d05023e9ef5b66d4b6be57ffd6fe39703fd4eed61535568f47ee51eff8290618e8387d0ba0d00c5bc4585d2d85688af46bb1da08bf42901634cb10e6b03ee276c16980090b59f3c57b428ae0a7ede758c781e2a5a8585e903adde0a0a281a7779a59067d82985655d9138b75042970e11aee4b95b8bcf232473767cca0139b2c2fb40045c6e031950c314015db2524c3f2fe941f249d158a44aa14774e61b2ee185bdfea8f317e440a39533c6db7ffd3c2b626c1e1e088bcebc59526b016cc6a0e4b766c3f00f619d366e5a4378bc15f805a6fb8c9400"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17:12:04 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x62160555, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:12:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) 17:12:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2}) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000080)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1, 0x0, r5, &(0x7f0000000000), 0x20000}]) io_submit(r6, 0x20000000000000dd, &(0x7f00000006c0)) io_submit(0x0, 0x0, &(0x7f0000000040)) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643d6f03b8ff39388f71d4d5186ca2c53273be4e1a439d167748588d85e0541a5dfbef32db23ab8513594b26384c3ad0f8c6955eb83004a02a7ec2d3f8cc5372b8020a1723b1ee5deeba472b1fa8993147bd90171849f4e0306f552c3a626b3ef85dd312210e47146a84b19138b98796a09052b8a0357dc9dd64008514466fdcfbfd4f1d75efdfa1d86deadeb544c2b841f113980fa17946236d00a14806a70735d4a316000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r11 = dup(r10) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8b28, &(0x7f0000000000)='wlan0\x00') r12 = socket$inet6(0xa, 0x2, 0x0) close(r12) r13 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x42) ftruncate(r13, 0x200006) sendfile(r12, r13, 0x0, 0x8000fffffffe) sendto$inet6(r13, &(0x7f0000000340), 0x0, 0xa63fe1404823d293, &(0x7f00000001c0)={0xa, 0x2, 0x4, @remote, 0x8016}, 0x1c) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16=r13, @ANYRES16, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESDEC], @ANYRES16=r11, @ANYRESHEX=r4, @ANYRES16=0x0], @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) r14 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r15 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r16 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x20000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d390cbcbbe9710d3ebf0f501d86cd951d28603f33d1e1d39508cb7156e4e85db6c53364ef0ab3e5d89070585ccf7fd0f7f0a684d77fad80abe0418f8cf01630e013555f236a3d79df72d0d9d50390d6c29b00e006", @ANYBLOB=',']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES16=r8, @ANYRES16=r7, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYPTR, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX], @ANYPTR64, @ANYRES16=r9, @ANYRES32=r14]], 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="000ee0c95336ccaafbb509"], 0x2) r17 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r18 = dup(r17) ioctl$PERF_EVENT_IOC_SET_FILTER(r18, 0x8b28, &(0x7f0000000000)='wlan0\x00') 17:12:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:05 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) creat(0x0, 0xb6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3, 0x800000000, 0x0, 0x0, 0x62160555, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000], 0x0, 0xc00}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"54abec7338595f275a2292c45ff078f1cbbf04241d1c3421ec9bf61b2221bc18246e74f0001e36735c2ad340bf94ad2a35cfc5d0953a3b2bfd41e2e051c6765447395415a9b05dffbe957e300168dc46f8377130fd28e50a805a6005ab6167da65430e3fcc214d7893c6d91026b5f5192f346a367dbc8ae5df0fd099b4e7a6dadd7f555b203f504eda86e0e8d8c5f319604db5a686750d03bf3a67210063e9a17ca0a1ccd80a7d57cb034b828b784b14c9e5dd70ca358c6819c3df7f4443dced6d9a56bb54eac6538cc61c5e9ef3bda9feeb62cbe4f0e1d1c7f6cbbcada85dbb247b0551773f0734e6f4733db49c22e497557c2f74bfa0e4af9b6228643f180d9f9e1e2bcdf0c35a5b8c388e728b574a066e190800db7b42573f534b8f60e8f756dc4d8dec7ad58b0474fc002851b265cc72099d43115828ac723e73009150fcf7196b4133e2988d4b0fc459e57293afef8837fa0d5d24b984a95cb4bdc48fc9c6e73ebee6b1a3239b2c0eef7c751ccb9f2dcdc3c69173db48df6b5d6e59e6465283de675a8d053e7f3abf86f43006a5a0c6225a589c12583e767b9d817f17bf690444a18e6f8a35b2cb4b60c191efbb16393560b568ee6c82bed918aa4a34b575ac9966b395aafa7fc3b7f467b484eb7d2617e0a240e8acbc2a7e02b650f7d1be52f462be20faa32dd88eb041e2c46b24ed7ab79c10f05296f5461f4ebda25dd7b9908da4be62b0871b169016fab8aae31c7ba45e5b30b7556a062999f43d2dbb9995d2d5de72ffe885bf6bce45caa470933c0906807da75cd38533d8f16d875452c543b259e78215011d2be638eab023513cfe0693d3107e17cfc87e038fc7d1db232d15307fe1d2a818d0a4bde2c53d221111ffa646514dd1fbd3c011b058f79c6fb0a31857ea309018bf72180a434611195c975cf5e285777231b6f158ecaf212183600379fe9762277c13cb6cde9cc0178b883fd1f210180e599f8eb33d33a9ff0f70db1de485b2f2434f2707bf9a54bb6aff687c515c430d5087f4d53a57adf7c97a06dcc61d7733a93dc505d57d8d5c83bf83e345a979307d708756c3f0f1c53a28883b665fda239019f32fc6f07d700d05023e9ef5b66d4b6be57ffd6fe39703fd4eed61535568f47ee51eff8290618e8387d0ba0d00c5bc4585d2d85688af46bb1da08bf42901634cb10e6b03ee276c16980090b59f3c57b428ae0a7ede758c781e2a5a8585e903adde0a0a281a7779a59067d82985655d9138b75042970e11aee4b95b8bcf232473767cca0139b2c2fb40045c6e031950c314015db2524c3f2fe941f249d158a44aa14774e61b2ee185bdfea8f317e440a39533c6db7ffd3c2b626c1e1e088bcebc59526b016cc6a0e4b766c3f00f619d366e5a4378bc15f805a6fb8c9400"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x3, 0x0, 0x4, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:12:05 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local, 0x80, 0x0, 0xff, 0xd, 0x8672, 0x9}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)="c88b0d8dfbda8b1daa336e618d716ac94b750e196c42424766191f3c38161dede63ba6699f54c3b0c425c31df09e31e8cdbe6c9ee468561328418cf6a015d43d808c5e4748d0765cb63b282cf9e629d860ab8165d33a5368aec355161a0ef645dec3c5e7fa2e90cb7f99c3e110961f02d986281fb60394569fcb6dfbd3efbec599044ce3752f051ca9912ae505468284d0ee0882682ea30dc46ec6fd18119f6847d191afa5350436354ff88074058a035df09c62912beaa184301e43126993fbfb20c771b886e2d60878768e467c810e2df12faa3881a5e463e7697e22e17b163b74b47338fa1f42d38cc594e986e8a868a58cd86e8f81d19ae941404890bf9c2fee3ea075df72e2099f886e26c7e08f0ec22ebe7ad8fe4a8ad0a93976794fe16a87d19027a3c92722714b3dd7aeee4b58a7f6ce34010486bed638534f53c4262fa8fa136056d411ed784c44dcb645911e668cafa2e319da09d9544d6272a45b564f8204a93b276610c9058df681ef1a9838f0648b98334af98fe289cfa4a0075eaf442138c60efa76bb72d34675fbf460de01633813dcdeadd181f8504deba2e649f3212ab3877286fc45ee180bd133a626568353764adbf4bb3737f2205dbe02febb4c97563a2e2ddbe27e62c4eced24f74b2d30d15352e0da8350b409cc7e439bb1ca130049e4edc0db4d2e4c7629c2e605c0ac6e1868174ad9969e9dc50c8bd67780853c3a8429adace254d1a37975fc809b63f4aa639818dc0c8a0145225c5dd1129603f4559ca55e3b609751bf3a41698e12d483e1063fb523af53a9782c6b6ce1b2785427ffc20c66cf5224e354cb2d836168b008d7b6d9641589d40d1d2bf4888a2d01c40d773ae2becd3bf0d16468ef47eb838e7f2f053ea4146ed5553fa18fb94f49f86fbdadd227008d6ec6ca4d298a8ed9363c02b112e81ab27b81be254a34af6f9319d6fe7adf79264c4d68aec75c7e1b3535db1360fc0f50b0f66c0e51b2e442c974b89d47ce112236442b1d72502baddafa9bd6b56d218a86f271dbc15c35eefde30abf8896378d9d6c4c1e19f8b60d0d53b4bdf45fcdb4befb5395abf5b0a54db710cb4d9c28a022fc273808ac6fdebfb547f1bf4ce7cc9e9a3c6d392146cab2db0ea622890c1073138c070a943ce8583c0624811cdcad8d34efb5a2893116576dccd49eaa97fb121db843db70344aee11400355f68eef53d1926ca362d34abaa76025002cf618e2d04bea6e6088778c94b7b0b05b0eaea678a3f590921012a6ffcb6cddec925fc77c4c0dd691bdd507cea711fc26ec27bc17c0deae7f5ea0c7ae88468dc82eabd1e20e6ec72d4e89786c6e2361ec83d57c9bd06c570283e42bff3a690ae1eb29e9e9e6d099e9e62e3c5957416cec6f1981e6894d56395f2623956d6e1c2b6815eb64f3d414d438149bce650310d582d974e6606d48cd8028930a99a2d6ff31005be451d7e9223f8c9a09ef48be6ef9e7a321b874d05fe69e0b9a97c6538439d5f096e6699e0b7498ab8c5f5f5b2b568a540fc5561a0add21d618185452cd9306707439af6210a19a2ea14762733b70a486e89539c917abb8749cbe2357269a086450522ed0970d36e2d2836cb0027218753fa25e817255dd1431f2f21148adcde9e8e132086416f219e5b4ef1c30950b8c33e92dc04ee6e4d5cadb0ee04f4acf7b8845443f163067787e88ed5c169c3cc8fdd696f8f42f1296efa750e22e2874a7e104bfb3438612645b05790d1f50c17f288b768ae933de9ef9062a696c79dddf4c33b2d7e51295622547805736dde397aa893d09c343cc2e71cddfe289fbce26dc9527c9c7e9b65e6f1df99fe550e1f6c7f3a289cd64090052a63616d091302bcf3f2ac5fb0cc099a6704c33740ebfc76271a7c5d3f9727cb54ce7f693b9f3f6a02dde4fd117eb748ad60cb320815101c30ae5a412b5ef513e6d94ff9cdc92a0ae219de538f56a6dbb8e7d703ff239a2a0be8c4f1661bf12f079a5f6bc12e52b0147acf2bd5aad1a1a55730eedf63a02d89e84bb397b6d60e5ba539ab42ca7294477c49ef499d4f616cd30056f3e9ea10ef4e8a71260ea0ed9a38919532f7e0d14e745f7806bbba64da057acf0ddceec4bd69552c4562c112fc8e265a07e183ecb36610747bf3aad460a0350559336f5a02ae1323685da44eb6cd54885e2afc6a518516b574cbb389d952ecc665f786af649ec2a4dab15b599d827db8b0e3acbdd988d8c6ffba0635894122285e91217b41c95632422305606148d779c8af923bb36857bfee89540e1b85cbd786c2dda560e76acd0faabf50e2dac0ce420dd36539af307e49e4ff840872c03f98380b45923f1fdccd701050481e201a914e3cf880a5c97c4af0c4c7250d5d14c4666f5f05861b7cfde30c6336ea840a2f466af3c8700945dd4a90fa8482e8e0a58b290be7e40dc49ad0d71b43a25569f78a3eef43cc47fb44943bd9246548b8c6ba4beaf7268b84c5e80ec9940b2a059bec6b6ce7ddef968b76f12c61fe412fbac0b4b27f9f6b0ed2c94058854eb529a250fbe3ae469f8639efe58cdd8c9ece5c1abac9d3c10459b69e2abdfed775df4da07596fb6fd2fb05f1070bb12e6462b4c8d6256542376bf4e999a6a82fe7f9c63c95f4a67f47a76ba84559d866cc4558021a3adf93f48beca16070ec19be6b946920a6f7ed83d9586581a1208cd915dc617a529f624c06cee9fa29f779efc942aaf4ff383e8ed0a8c70a77651b5561068dc454130cf3090362cc2995946688b3f3c0723cfa733cebb52bb9d3f22c9c2f3f529b9212c124a4c25e87d3d47ca6b9df961b15b6379d2b41bc90032aa6449d81a44ad808cdbe1735c3336383c109d7297a6055c642512fa789a420c4fa09694c09f5453391875d61855cc19b9993fa2d550c2ec97ea49c222aad2b8595b9139c71eb3228b7b594dacd7fc56f21c1b64cebf93e23391b15610304c379a683bc3c752300408c185dc7140389d7887c5438a5998b85b6a35fafbe0a56dd25313d25869892c9a2b0050fe6fc272cff1a60546c7bcfe6597957a03b39c3c8e014631b189545ca826e9ab3cf2f339e358a09891f53eb68393bb0c52f737b29a23e6a741646c88e60c0f3ae377bc03c951e10a8c987cc7abce1826770d7bf617bed4b91a9315997c772d79b061e9494c06ea9f2948c4ac2911b19a456670a940414eeb515284a3592f50d3b9204ae23454792ca8a34e0917518aeec0ce840b098856046788fe6713340343c0ab09eb4df194fc43fc2654e796ec1ee6c09efba7c3f2f13393ce02c8e0975634d6e4f80ff9d33528bb5b78a23fc59c0a3e1d50e17e88c0237e32fc9b80ef3143a970fed7f426017996cf0ffe7179f5ee375f1db07333d08fb2538e684996c9ff833491c06d792390934ef225fdc9fea9cc488b5eb5b252b1e304cc4400007726e2a1149a83dc4d8b203f518c5886f91bf805d9800fa42efae849612d42e255a7bc7935323687af068bcb61035dc6949081fd28c81fd103ad3992bc106a992f2d85cf17dcd00567c38912eed712fe8694c269b6dbaacc0144533fe86c9500513de5de0ea6d56bfd3b44d66c9163bcc07b2f71003944bc5672ead31e3aa887b6b15928ca7395c8930b8b58a69ae1ef56fe5deb2bb410e48926fd1e536732e3120763fde6c61360eb53e5ef327b9a95b21f34088f5c58d2ee79d53be85384b321d0417659617ff1206628da9721ae7a67cc86b6c09e6e89e7a1cee908277347914bbb5019b7ef160821519eea79b10bb974d23c8eed51a7404144b5da6e7e4a76d5a5233ba87a19811245c6385df65710a8721a3c7cd546a4a0bb2448121235f73954957d6045532f8893a0a5cb623ddd354c294c894508e01990b8668d03aec50452f4cd1a6e2417ca6938f753a5e59ce2cac25d182302b6f117e6ba14c0bd3b7887fc4d0e7b425ef7820ac27c28a25248749778328c7cac61a7cdbd78a09da03737333b521a4e49eeeeb17fec52ceffc42d4f3f89484ee2272024d51dc85ba0b8e8a738329eb00ed2eaa9476519cd2979770d3d2714feb23ed7894862cb6e4ed36a173ce3d6857a92c8df5339de7274f0544c80e2b88358a96490edcc25f13a13d67103b1326bcde3c723d19f14922e52e9b7f8dda9e14a9bf05467cb1107408f58ca4b87c186cffc9dbc5819341a55b5f3f605b9303a3dff444161b84c279aba1970f231a3d7bf3a6fcb23b98c07242f997246f19416e2e1db2209ee622c3d606adeeaba026899736782dd63570257924cdd5382cdc1d6fbcf367cf8541d0c7f84de5de0f5718ed7306872139abad9337e617d5db3aa3d4740e337055e7e4a0fc2a9c9aeb93c83382d09d11a3f352d213560fb5b231dfc8281aac1ea8581fc8494442c108faf116b390ffbe71c4ef063219e82e2ffa0f56212d216dd656a0a0e5785b41392123af615441aac1f8ce97e446a5081a02cf76466e619fcc09424ce181fc015aa4c8ee3010a2acfbc7cf098fe01261496bc91ca021b8b03822799914fcf7d0c3e94342f8b22cf0260c4277498e727a359af00a5388510dccd55eb962c4d5884aa50a165d9db630f32b4f42170d90f60ba8a788e2478f396011d52e080b22936079c373480c59cbafa1ba00f9cf8cb3b6143aadd2841f15baecdd8fdb58785cd9c4ed31bc10794724f64c57e99c15b322799114afb797b844892f42dc9fbc2c3b0e232d1e8e6af9a423bb496390f320fb6995614f09396d5c804398015037a6a803be866bb78fd67d02264c647f25d4f1346a02952f423bca457c777606fadfe245d97786dd44e3f80b8b37ea6cfb741903e73e2c4d2bdbb4abfc420b280bc6ad0e91be516e6d36ccbbf59511d57a908648c73af08d728f32b5c34d8403634c4c4a58f7b744a80a4d1aba0119f8df7920af0d30cb8d4859b70ae97918bd5cafd28d441c8848bbeee4f424540e3ad2f100803f906f5c7a788006dc7ca92748a41cc876e40b1f51707282f703c97788fd21851382788e890adc23aabf8dae8808cc2313f479a805b25760383cbf4bb41b608d94e175c22bfe09aea1edfef8cf2ff09e6d481151e32088c6dc28d9f0fed56d993c40df4f1d411c67f9c1e7523c93578500cbe96cdf6edd72096865e6886472c5636b79d37715184dca1e9a5a4d252c1a11dd192c407be767e8a46d8ddcc60a861a5d85ba4d9adbecac776286f7e717d1376a1eb95edfcf078e1fa81aedce088cc6c9c8fd8d059eec744ed954a6838b776f8adbe04be45421bbf5577c2193365b907a14e8a28e60fdbb9f89653a089a445e6e851d280a4275a2ddcfcdc576a2a2039a8af9e887f8373105e5fa3c3d95c96e7fb1120976304f105c6ccb98821fe5d52705b3cf99a2ec2c1bf0c1484cd674d81c34a57eaf171eaaf43e0028cda3cc2d677cdaa5d297b619aaf184c3fec07a93f27f3bf31f1958f0b8fb8feedac898275f8f908b53325df4d4240c846f4f211c745d390acce2d678f3917405f2b78222d35ff8828a5bbaf1d4c0de4362396ff71f8be31aac1b64a5a3baa01d7f9ecd2eb194a0e4950516bab53419ba07c42db338dbe0b3f1ce9726101855a7e350ad3276734826ab6012af8f6fdfb195c1c703327158d3fa07b538e8cdff29a7b7f579f4aa2e2c0639c0a931fc424c13d91fd3174759dcaa89ec25a5fc74e9430c81827abbb0e8dca64ec7bdf5cb94627544505508e820b543fddc42eb508ab2766d046f0d23913c2c038c945fd007d4dc68ed9c6bbdce1ca46cfd3604d03a68fbe3a593997") socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x100) r1 = socket$inet6(0xa, 0x0, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f00000000c0)='security.SMACK64\x00', 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@ipv4={[], [], @multicast2}, 0x0, 0x6c}, @in6=@ipv4={[], [], @empty}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8}]}, 0x140}}, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000002c0)=@generic={0x0, 0x1, 0x4bd}) syz_emit_ethernet(0x0, &(0x7f00000003c0)=ANY=[], 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) open_by_handle_at(r0, &(0x7f0000000200)={0x93, 0x9, "99ac6cc1a27d5c485c48f000af35ef9a48325f5d599e034340b934f7c226ed1110de62951be4bbd09a5e462b39502d633d6e08d8606a2298cc215cb76ac7b65bae9fa93e7b11074f9a3efde417ce1a7e1145acd5294ac79c00e1e0c05301387c16d6be13f94b632ff1791006e8277e931d069b8591d6244f8ff7851791be342b7041d798b0565f834345b2"}, 0x120301) listen(r3, 0x0) syz_emit_ethernet(0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa192bce5e2dfb86dd6000000000ef0600fe8000000000000000000d00000000aafe88000000000000000000000000000100", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b002000090780000fe14f989d7e1bd81acdf18df1d44d8727cfb8ae11e030c00"], 0x0) syz_emit_ethernet(0x2, &(0x7f0000000340)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="50054167c56d93510a68a6d5767a61f2118645af77166c28913a2b27"], 0x0) 17:12:05 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000000)=""/149, 0x95}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000018c0)=""/152, 0x98}, {0x0}], 0x2}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r5, 0x0) poll(&(0x7f0000000000)=[{}, {}], 0x2, 0x80) shutdown(r6, 0x0) shutdown(r3, 0x0) [ 375.159995] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=12543 comm=syz-executor.5 17:12:06 executing program 5: socketpair$unix(0x1, 0x80000000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/116, 0x74) 17:12:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000000)=""/149, 0x95}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000018c0)=""/152, 0x98}, {0x0}, {0x0}], 0x3}, 0x3e) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r5, 0x0) poll(&(0x7f0000000000)=[{}], 0x1, 0x80) shutdown(r6, 0x0) shutdown(r3, 0x0) 17:12:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x4001) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) memfd_create(&(0x7f0000000600)='+lo.cpusetvboxnet1&\x00', 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETLINK(r2, 0x400454cd, 0x483) memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000100)) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x80, 0x3, 0x1000000000008}}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0xfffffe38) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc73abd2af0096c31) write$P9_RCREATE(r4, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x60, 0x2}, 0x8}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = memfd_create(0x0, 0x0) write(r5, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10, r5, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000280)={0x60, 0x8332b35885fd7c18, 0x4, {{0xffffffff, 0x67, 0x1, 0x3, 0x36d, 0xfe0, 0x4, 0x9}}}, 0x60) signalfd(0xffffffffffffffff, &(0x7f0000000040)={0x5}, 0x8) 17:12:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, &(0x7f0000000080)=0x12c, 0x33) lseek(0xffffffffffffffff, 0x800002, 0x0) 17:12:06 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nbd(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) request_key(0x0, &(0x7f0000000040)={'\xdf\xfc\xff'}, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:12:06 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x62160555, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 375.959141] net_ratelimit: 24 callbacks suppressed [ 375.959149] protocol 88fb is buggy, dev hsr_slave_0 [ 375.969348] protocol 88fb is buggy, dev hsr_slave_1 [ 376.039117] protocol 88fb is buggy, dev hsr_slave_0 [ 376.044350] protocol 88fb is buggy, dev hsr_slave_1 [ 376.119161] protocol 88fb is buggy, dev hsr_slave_0 [ 376.124480] protocol 88fb is buggy, dev hsr_slave_1 [ 376.200407] protocol 88fb is buggy, dev hsr_slave_0 [ 376.207795] protocol 88fb is buggy, dev hsr_slave_1 17:12:07 executing program 5: creat(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x0, 0x800000000, 0x0, 0x0, 0x62160555]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:12:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:07 executing program 2: syz_emit_ethernet(0xd5, &(0x7f0000000300)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x9f, 0x0, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local, [], "ba8a968a8c108fd4713b8bf1b11a1fd6e5ad28b0a3ea32933115aef1b4220febe2e0840834bf70ac4197079bbfa18b9c7d245897bb5fbe1e77fc2adfd2d94dc7acdcd6ea466390e65356a01409fa120aaef7ee0821f7ab37d7d89b929e281c9914437819aefdb3534e1430e419a27a"}}}}}}}, 0x0) 17:12:07 executing program 3: 17:12:07 executing program 1: 17:12:07 executing program 3: 17:12:07 executing program 2: 17:12:07 executing program 5: [ 376.839119] protocol 88fb is buggy, dev hsr_slave_0 [ 376.844419] protocol 88fb is buggy, dev hsr_slave_1 17:12:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x10000000000000ad, 0x2, [{0x122}]}) 17:12:07 executing program 1: 17:12:08 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(0x0, 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:08 executing program 3: 17:12:08 executing program 2: 17:12:08 executing program 1: 17:12:08 executing program 1: 17:12:08 executing program 2: 17:12:08 executing program 3: 17:12:08 executing program 2: [ 379.208771] IPVS: ftp: loaded support on port[0] = 21 [ 379.383436] chnl_net:caif_netlink_parms(): no params data found [ 379.529194] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.536076] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.543466] device bridge_slave_0 entered promiscuous mode [ 379.662253] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.668627] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.676322] device bridge_slave_1 entered promiscuous mode [ 379.806223] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 379.816717] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 379.832665] device bridge_slave_1 left promiscuous mode [ 379.838171] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.880261] device bridge_slave_0 left promiscuous mode [ 379.885925] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.999119] net_ratelimit: 20 callbacks suppressed [ 380.999125] protocol 88fb is buggy, dev hsr_slave_0 [ 381.009344] protocol 88fb is buggy, dev hsr_slave_1 [ 381.799129] protocol 88fb is buggy, dev hsr_slave_0 [ 381.804526] protocol 88fb is buggy, dev hsr_slave_1 [ 382.199142] protocol 88fb is buggy, dev hsr_slave_0 [ 382.204347] protocol 88fb is buggy, dev hsr_slave_1 [ 382.279127] protocol 88fb is buggy, dev hsr_slave_0 [ 382.284243] protocol 88fb is buggy, dev hsr_slave_1 [ 382.359267] protocol 88fb is buggy, dev hsr_slave_0 [ 382.364433] protocol 88fb is buggy, dev hsr_slave_1 [ 383.181019] device hsr_slave_1 left promiscuous mode [ 383.242489] device hsr_slave_0 left promiscuous mode [ 383.294495] team0 (unregistering): Port device team_slave_1 removed [ 383.305336] team0 (unregistering): Port device team_slave_0 removed [ 383.315683] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 383.353354] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 383.439194] bond0 (unregistering): Released all slaves [ 383.505894] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 383.513303] team0: Port device team_slave_0 added [ 383.519979] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 383.527420] team0: Port device team_slave_1 added [ 383.533525] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 383.541646] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 383.600981] device hsr_slave_0 entered promiscuous mode [ 383.639465] device hsr_slave_1 entered promiscuous mode [ 383.680014] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 383.687282] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 383.706168] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 383.740218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.752938] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 383.860571] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 383.870531] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 383.876618] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.883608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 383.891273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.901257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 383.909337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.917334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.926065] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.932507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.941706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 383.949432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.956709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.967054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.974891] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.981299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.991999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 384.000216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 384.011887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 384.019356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 384.033329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 384.040975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 384.051904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 384.065240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 384.072518] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.080475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.088373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.105144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.116232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.127371] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 384.136184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.145134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.161115] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 384.168979] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 384.175837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 384.183809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.196280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.211067] 8021q: adding VLAN 0 to HW filter on device batadv0 17:12:14 executing program 5: 17:12:14 executing program 1: 17:12:14 executing program 3: 17:12:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(0x0, 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:14 executing program 2: 17:12:14 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:15 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x6000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x2f, 0x0, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "11fb64", 0x0, 0x0, 0x0, @remote, @ipv4={[], [], @multicast2}}}}}}}}, 0x0) 17:12:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4004ae86, &(0x7f0000000000)={0x0, 0x2}) 17:12:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x10000000000000ad, 0x2, [{0x38f}]}) 17:12:15 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) timerfd_create(0x9, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:15 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2, 0x0) dup(0xffffffffffffffff) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 17:12:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(0x0, 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:15 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xc0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x409, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000340)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x100010005}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x78) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r0, r2, 0x0, 0x10000) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x18}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251}, 0x48) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000040)=0xfff) 17:12:15 executing program 2: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000000dc", 0xa}], 0x8904, 0x0) [ 384.917733] audit: type=1804 audit(1575738735.616:253): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir786973469/syzkaller.uVG0t2/17/file0" dev="sda1" ino=17185 res=1 17:12:15 executing program 3: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x0, 0x6}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/122, 0x7a}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000015c0)={0x20000000}) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0xf) r5 = dup2(r1, r1) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0xe8fbc2, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r5, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000180)=""/99, &(0x7f0000000080)=0x63) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x9, 0x7, 0x7fff, 0x0, 0x4, 0x21c1, 0x9e65}, 0x1c) r7 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r7, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x1, 0x0, 0x5}) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/130) socket(0x10, 0x80002, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) r8 = getpid() r9 = getpid() r10 = getpid() rt_tgsigqueueinfo(r10, r9, 0x16, &(0x7f0000000100)={0x0, 0x0, 0xfffffffd}) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x388, 0xb8) ptrace$pokeuser(0x6, r8, 0x388, 0xfffffffffffffffe) memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20b81) write$9p(0xffffffffffffffff, &(0x7f0000000200)="9f00ebc3ef1b6238e622ebe15e155bc96b5eb9bf3297323a5231009924bb1c8586b63c8ddd1881059772a039c55cfeec7b996364cdebe59a694b56c00d6a7f8ddf6376ee5fa175ddb1a59fb48727bf82215d78269138a87dbaa7c7f2760908a4205e0b86b311da170d5349f13301b1e37fc2c79de081ff6b7432549ffbea05f86bd12c1ec592daa2d75333ca84356d1e", 0x90) 17:12:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:15 executing program 2: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_setup(0x0, &(0x7f0000000040)) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc01812f4, &(0x7f0000000200)) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x20000000}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @rand_addr=0x10001}}, 0xd65, 0x3, 0x8, 0x7, 0xff}, &(0x7f0000000180)=0x98) 17:12:16 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 17:12:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000013", @ANYRES16=0x0, @ANYBLOB="0000000000000000000007000000240002000800030000000000080007000000000008000400000000000800070000000000180001001400030088"], 0x3}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x4) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) recvmsg(r8, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000015c0)={0x20000000}) r10 = dup3(0xffffffffffffffff, r7, 0x0) write$binfmt_elf64(r10, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6c, 0x89, 0xfd, 0x9, 0x100, 0x1, 0x3e, 0x8000000, 0x23e, 0x40, 0x107, 0x2, 0x1000, 0x38, 0x1, 0x1, 0x3be8}, [{0x4, 0x7, 0xd8c, 0x8, 0x8, 0x5, 0x69, 0x8}], "4b05d969afe2ecd3f0cb6334956b8307b41b9361a22b3bcd894f8da5c8b6e05d5d2294d7ac2931464171d7aacc23e8e2013dae1ea2669730e0e7ad634387328ba4aa060c0fdb5e81f6cd4d5b7284c01b69c92d876615eebd62241a24cf492077a16c264d14a1099e55987f2ed842185175aef2c5016a192680088db3932117aa447f7fa108983641e440a375221d087392fb053519e997178cf8", [[], [], []]}, 0x412) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) fsetxattr(r5, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000080)='vmnet1\x00', 0x7, 0x3) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 17:12:16 executing program 2: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@swidth={'swidth', 0x3d, 0x6}}]}) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000100)='./bus\x00', 0x2, 0x0, &(0x7f0000000140), 0x75a3ea8a460aaddc, &(0x7f00000002c0)={[{@hash_rupasov='hash=rupasov'}, {@barrier_none='barrier=none'}, {@jdev={'jdev', 0x3d, './bus'}}, {@balloc_border='block-allocator=border'}], [{@uid_gt={'uid>', r0}}, {@dont_hash='dont_hash'}, {@appraise_type='appraise_type=imasig'}, {@fowner_lt={'fowner<', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'swidth'}}, {@measure='measure'}, {@appraise='appraise'}, {@appraise_type='appraise_type=imasig'}]}) 17:12:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:16 executing program 5: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x16, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) [ 385.690702] XFS (loop2): sunit and swidth must be specified together [ 385.815292] XFS (loop2): sunit and swidth must be specified together [ 385.823837] audit: type=1804 audit(1575738736.526:254): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir606415832/syzkaller.GUUm3A/3/file0" dev="sda1" ino=17195 res=1 17:12:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:16 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x0, &(0x7f0000000000), &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r1, r3, 0x0, 0x10000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, r1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = getpid() tkill(r4, 0x9) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r7, 0x0, 0x1420000a77, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="220000002100070700be0000090007010a", 0x11) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 386.106214] audit: type=1804 audit(1575738736.806:255): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir606415832/syzkaller.GUUm3A/3/file0" dev="sda1" ino=17195 res=1 17:12:16 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x7, 0x1, 0x3f, 0x2, 'syz1\x00', 0xfffff800}, 0x0, [0x280000000, 0xcde, 0x8000, 0x200000000000, 0x400, 0x0, 0x8001, 0x44, 0xaa, 0x1ff, 0x8, 0x80, 0x9, 0x4, 0x8, 0x4, 0x77, 0x5d, 0x10000, 0x7fffffff, 0x80, 0xfffffffffffffff8, 0x4c9, 0x7fffffff, 0x1000, 0x3, 0x6, 0x1, 0x7, 0x0, 0x4, 0x4, 0x5, 0xb89, 0x7, 0x3, 0x2, 0xffffffffffffffc3, 0xdae6, 0xfff, 0x20, 0x3, 0x100, 0x8, 0x7, 0x6, 0x1f, 0x0, 0x401, 0x20, 0x4, 0x1f, 0x7, 0x80000000, 0x3, 0xfffffffffffffb86, 0x1, 0x1ff, 0x5, 0x5, 0xd000000000000000, 0x4, 0x6, 0x7f, 0x4, 0x7, 0x1f, 0x9, 0x610, 0x3ff, 0xd5, 0x10000, 0x100, 0x7d50, 0x1, 0x10000, 0x7, 0x5, 0x5, 0xffffffffffffffff, 0x459, 0x6, 0x5, 0x6, 0x3, 0x401, 0x401, 0xf798, 0x100000000000000, 0x280, 0x7, 0x200, 0x8, 0xfffffffffffffff8, 0x9, 0x3, 0x200, 0x8, 0x7, 0x6, 0x9, 0x56bf2220, 0x101, 0x5, 0x7, 0x2, 0x4, 0x9, 0x7f, 0xf6, 0x1, 0x0, 0x4, 0x2, 0x1ff, 0x2, 0x3e, 0x7fff, 0x7, 0x531, 0x0, 0xfffffffffffffffd, 0x8000, 0x9, 0x40, 0xbe4, 0x5, 0x8], {0x77359400}}) 17:12:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 386.239801] audit: type=1804 audit(1575738736.936:256): pid=12772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir184612749/syzkaller.cEVCqJ/136/file0" dev="sda1" ino=17171 res=1 [ 386.359500] net_ratelimit: 22 callbacks suppressed [ 386.359509] protocol 88fb is buggy, dev hsr_slave_0 [ 386.369938] protocol 88fb is buggy, dev hsr_slave_1 [ 386.399791] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 386.425734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12777 comm=syz-executor.2 [ 386.439161] protocol 88fb is buggy, dev hsr_slave_0 [ 386.444327] protocol 88fb is buggy, dev hsr_slave_1 [ 386.519260] protocol 88fb is buggy, dev hsr_slave_0 [ 386.524423] protocol 88fb is buggy, dev hsr_slave_1 [ 386.542775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12777 comm=syz-executor.2 [ 386.599155] protocol 88fb is buggy, dev hsr_slave_0 [ 386.604303] protocol 88fb is buggy, dev hsr_slave_1 [ 386.614389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12777 comm=syz-executor.2 [ 386.627220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12777 comm=syz-executor.2 [ 386.640082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12777 comm=syz-executor.2 [ 386.652714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12777 comm=syz-executor.2 [ 386.665434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12777 comm=syz-executor.2 [ 386.678789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12777 comm=syz-executor.2 [ 386.692841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12777 comm=syz-executor.2 [ 386.705414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=12777 comm=syz-executor.2 [ 387.249162] protocol 88fb is buggy, dev hsr_slave_0 [ 387.254320] protocol 88fb is buggy, dev hsr_slave_1 17:12:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) recvmsg(r1, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x3, 0x1, 0x7f, 0x0, 0x101}, 0xc) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x18140, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0xb740, 0x9, 0x4, 0x1000, {r3, r4/1000+10000}, {0x5, 0x2, 0x3, 0x3, 0x1f, 0x0, "7eba4276"}, 0x9, 0x1, @userptr=0xffffffff00000001, 0x4}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1000, @remote, 0xe0}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0xbbe, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, 0x0, 0xedc0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 17:12:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)=""/226, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000140)=0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f00000000c0)) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x800, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x14) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d0) 17:12:19 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 17:12:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) r0 = socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0xfffffffc) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0xfffffffc) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r7}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r7, 0x4, 0x2, 0x1c}, &(0x7f0000000040)=0x10) r9 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x78) r11 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r9, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r9, r11, 0x0, 0x10000) r12 = socket$inet(0x2, 0x4000000805, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) r14 = dup3(r12, r13, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r13, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r14, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r13, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r14, 0x84, 0x7a, &(0x7f000059aff8)={r15}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r15}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000140)={r15, @in={{0x2, 0x4e21, @remote}}, [0x1, 0xffff, 0xd7, 0x10000, 0x2, 0x100000001, 0x3, 0x4, 0x10, 0x100, 0xe, 0xffffffffffffffff, 0x2, 0xff, 0x4d]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={r8, 0x66f4, 0xfffffff9, 0xa42, 0x81, 0xae7, 0xb, 0x0, {r16, @in={{0x2, 0x4e20, @multicast1}}, 0x7, 0x6c3, 0x46, 0x4a, 0x7}}, &(0x7f0000000300)=0xb0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r17 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r17, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r0, r17, 0x0, 0x80001d00c0d0) 17:12:19 executing program 2: socket$inet6(0xa, 0x3, 0x6b) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1f, 0x200000) ioctl$TIOCSCTTY(r0, 0x540e, 0xfff) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000004c0)=""/148, 0x94}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/231, 0xe7}, {&(0x7f0000000700)=""/65, 0x41}], 0x7, &(0x7f0000000800)=""/4096, 0x1000}, 0x1f}, {{&(0x7f0000001800)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001880)=""/205, 0xcd}, {&(0x7f0000001980)=""/153, 0x99}, {&(0x7f0000001a40)=""/106, 0x6a}, {&(0x7f0000001ac0)=""/196, 0xc4}, {&(0x7f0000001bc0)=""/2, 0x2}], 0x5, &(0x7f0000001c80)=""/145, 0x91}, 0x1}, {{&(0x7f0000001d40)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001dc0)=""/35, 0x23}, {&(0x7f0000001e00)=""/208, 0xd0}, {&(0x7f0000001f00)=""/7, 0x7}, {&(0x7f0000001f40)=""/50, 0x32}, {&(0x7f0000001f80)=""/207, 0xcf}], 0x5, &(0x7f0000002100)=""/226, 0xe2}, 0x1f}, {{&(0x7f0000002200)=@pppol2tp, 0x80, &(0x7f0000002400)=[{&(0x7f0000002280)=""/114, 0x72}, {&(0x7f0000002300)=""/142, 0x8e}, {&(0x7f00000023c0)=""/63, 0x3f}], 0x3, &(0x7f0000002440)=""/70, 0x46}, 0x10000}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000024c0)=""/170, 0xaa}, {&(0x7f0000002580)=""/164, 0xa4}, {&(0x7f0000002640)=""/84, 0x54}, {&(0x7f00000026c0)=""/49, 0x31}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/244, 0xf4}, {&(0x7f0000003800)=""/229, 0xe5}, {&(0x7f0000003900)=""/232, 0xe8}, {&(0x7f0000003a00)=""/35, 0x23}], 0x9, &(0x7f0000003b00)=""/188, 0xbc}, 0x6}, {{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000003bc0)=""/36, 0x24}, {&(0x7f0000003c00)=""/41, 0x29}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/99, 0x63}, {&(0x7f0000004cc0)=""/213, 0xd5}, {&(0x7f0000004dc0)=""/194, 0xc2}, {&(0x7f0000004ec0)=""/94, 0x5e}], 0x7, &(0x7f0000004fc0)=""/173, 0xad}, 0x8}, {{0x0, 0x0, &(0x7f0000007200)=[{&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/244, 0xf4}, {&(0x7f0000007180)=""/67, 0x43}], 0x4, &(0x7f0000007240)=""/21, 0x15}, 0xffffffff}, {{&(0x7f0000007280)=@nfc_llcp, 0x80, &(0x7f0000008580)=[{&(0x7f0000007300)=""/253, 0xfd}, {&(0x7f0000007400)=""/4096, 0x1000}, {&(0x7f0000008400)}, {&(0x7f0000008440)=""/245, 0xf5}, {&(0x7f0000008540)=""/54, 0x36}], 0x5, &(0x7f0000008600)=""/178, 0xb2}, 0x4}], 0x8, 0x41, &(0x7f00000088c0)={0x77359400}) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000015c0)={0x20000000}) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDRT(r4, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e21, @broadcast}, @vsock={0x28, 0x0, 0x1ffffd8ee, @reserved}, @hci={0x1f, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5}) ioctl(r4, 0x1000008910, &(0x7f0000000180)="0815b5055e0bcfe8fbb7b0bb7b3000") r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={[], [], @remote}}, 0x1c) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) sendto$isdn(r5, &(0x7f0000000140), 0x8, 0x0, 0x0, 0x0) 17:12:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0xa9) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000000)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00', 0x5) 17:12:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 388.609956] audit: type=1804 audit(1575738739.306:257): pid=12804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir786973469/syzkaller.uVG0t2/19/file0" dev="sda1" ino=17205 res=1 [ 388.762173] audit: type=1800 audit(1575738739.466:258): pid=12820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17218 res=0 17:12:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="25bca274769e62000000000095e06126873d8e6a5c8802a9d8aea872943afd874e2f98b579a7086270146d0e0206e73ba8c63cd7cfc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='grpjHuo4a=./file0,\x00']) 17:12:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:19 executing program 5: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') mkdirat(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) ftruncate(r1, 0x0) 17:12:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000a0001"], 0x3}}, 0x0) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) r9 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc01812f4, &(0x7f0000000200)) recvmsg(r9, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f00000015c0)={0x20000000}) r11 = socket$inet(0x2, 0x4000000805, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = dup3(r11, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7a, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r14}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000080)={0xfff9, 0xa, 0x0, 0x8, r14}, 0x10) recvmsg(r7, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r15, &(0x7f00000015c0)={0x20000000}) mq_getsetattr(r6, &(0x7f0000000040)={0x100000000, 0x149, 0x8, 0x1000000004, 0x9, 0x3, 0x401, 0x1800000000000}, 0x0) r16 = socket$inet_udp(0x2, 0x2, 0x0) close(r16) socket(0x10, 0x80002, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r16, 0x0, 0x4ffe0, 0x0) [ 388.848630] audit: type=1800 audit(1575738739.466:259): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17218 res=0 17:12:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x1e, 0xc, 0x6, "a91adb40372f817af0f01d20cc6aa4bf", "9f31341aa9b158a022"}, 0x1e, 0x1) move_pages(0x0, 0x496, &(0x7f0000000040)=[&(0x7f0000002000/0x1000)=nil], &(0x7f00000000c0)=[0x0], &(0x7f00000000c0), 0x0) [ 389.033281] EXT4-fs (loop2): Unrecognized mount option "grpjHuo4a=./file0" or missing value [ 389.085189] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 17:12:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0xfffffffc) sendmsg$nl_generic(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2a8104}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xc4, 0x27, 0x10, 0x70bd2c, 0x25dfdbfb, {0x1e}, [@nested={0x9c, 0x3f, [@generic="87a6c88003676919d8715539ee08a685b702f5c58c6d057a6767917320c64e5a9e20b3460a6319669d0f07903f0bef3a08e4977a660834abc099e5693ba1af81b87d7bcc6a9fafb916a61c7b37bf880f2bc45ac4829b79f315a598d0792b60568718e88a64132813512463148d8845a04a8ee71fd13ca2d07aa1722d6611eda035a3d3f2265a982c8899ac4451bc1144027b66bf617d"]}, @typed={0x14, 0x7d, @ipv6=@mcast1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x400) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000280)=0x1, 0x4) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x8c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c420}, [@IFLA_LINKINFO={0x6c, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x5c, 0x2, [@gre_common_policy=[@IFLA_GRE_PMTUDISC={0x8}], @gre_common_policy=[@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_TTL={0x8, 0x8, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x8, 0xf, 0x8}, @IFLA_GRE_PMTUDISC={0x8}, @IFLA_GRE_ERSPAN_DIR={0x8}, @IFLA_GRE_OFLAGS={0x8, 0x3, 0x3}, @IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_IFLAGS={0x8, 0x2, 0x3}, @IFLA_GRE_OKEY={0x8, 0x5, 0x7}, @IFLA_GRE_IGNORE_DF={0x8}]]}}}]}, 0x8c}}, 0x4002001) 17:12:19 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 389.309476] audit: type=1804 audit(1575738740.006:260): pid=12849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir786973469/syzkaller.uVG0t2/19/file0" dev="sda1" ino=17205 res=1 17:12:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x1e, 0xc, 0x6, "a91adb40372f817af0f01d20cc6aa4bf", "9f31341aa9b158a022"}, 0x1e, 0x1) move_pages(0x0, 0x496, &(0x7f0000000040)=[&(0x7f0000002000/0x1000)=nil], &(0x7f00000000c0)=[0x0], &(0x7f00000000c0), 0x0) 17:12:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='./file0\x00') socket$packet(0x11, 0x0, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r1) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000340)={{0x2, 0x4e20, @rand_addr=0x8000}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x8, {0x2, 0x4e24, @empty}, 'ip6_vti0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r2) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x900002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getroute={0x14, 0x1a, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(r1, &(0x7f0000000600)="6bf56afc50a0e93aa38d0facf12695984e76406b06a8fcaea5bfde971649c8b91c3a66895a3758bddd5cf922e9a70e0eace50a5f2209b0ebec191932b8055134ac", 0x41) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={0xffffffffffffffff, &(0x7f0000847f95), 0x0}, 0x20) poll(&(0x7f0000001580)=[{0xffffffffffffffff, 0x500}, {0xffffffffffffffff, 0xb041}, {r0}, {}], 0x4, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') fchdir(r3) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000500)=0x0) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000004c0)='./file0\x00', r4, r5) syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x40000000, 0x689}, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x2, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x8dffffff00000000, 0xfe03, 0x0, 0xfffffff5, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x608], {0x0, 0x6, "c5961e", 0x4, 0x0, 0x0, @mcast1={0x5, 0x1, [0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @ipv4={[], [], @remote}}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) [ 389.443097] audit: type=1800 audit(1575738740.096:261): pid=12814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17214 res=0 17:12:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc62c37f3cc4045e5}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="be9bbdba3747d21329bb75", @ANYRES16=r2, @ANYBLOB="da7b27bd7000fcdbdf25010000000000000002410000001000137564703a73797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x7fffffff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625df083002000000408478c2fdffe8cd918b035041291559f3ee3a46069062af9680d512f4d8a5c51817c3ff01a1f61eeaa8b6639ce7f16a3785445d8f244f6be479ffffffffff8756ea7d486588272169d8b90f1d7106f577"], 0x77) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 17:12:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xe3c, 0x0, 0x0, 0xfffffffffffffe5b) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x2000, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r2}, {r3, 0x8020}], 0x2, &(0x7f0000000200)={r4, r5+10000000}, &(0x7f0000000280)={0xffffffffffffff01}, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x50, r7, 0x80000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x1004cc], 0x12000}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000003c0)={0x0, 'lapb0\x00', {0x4}, 0xb95}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000340)=""/123, &(0x7f0000000000)=0x7b) ioctl$KVM_RUN(r8, 0xae80, 0x0) 17:12:20 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000007ffff0f007268"], 0xb) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x801, 0x0) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f00000000c0)=0x3ff, 0x4) 17:12:20 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000540)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) open(0x0, 0x0, 0x10b) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000000)={0x3, 0xca, 0x40, 0x4, 0x6}) [ 390.030064] audit: type=1804 audit(1575738740.726:262): pid=12888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/163/file0" dev="sda1" ino=17210 res=1 17:12:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000200)="26f4b81b018ee86766c7442400891a00006766c74424020e5000006766c744240600000000670f011424f53e36670fc7e84848b80b0000000f23c80f21f866350800e0003e0f35f30fc730660f3834930000baa100ec0f01c5", 0x2bc}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23}}}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 390.167274] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 390.175860] FAT-fs (loop2): Filesystem has been set read-only [ 390.185704] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 17:12:20 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:21 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$key(0xf, 0x3, 0x2) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x3, 0x1, 0x0, 0xfffff000}) 17:12:21 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000001c0)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00\x06\x00\x00\x00\x01\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, &(0x7f0000000140)=0x54) 17:12:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') r0 = dup(0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x800448d2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup(r1) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000140)=""/26, &(0x7f00000001c0)=0x1a) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 17:12:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x501003, 0x0) read$char_usb(r2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f000001d000)={0x3, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0xfdef) syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) 17:12:21 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x80) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) flistxattr(r1, &(0x7f00000002c0)=""/197, 0xc5) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)="c5b7538512078a830832fd2574223428b8ea5890252e6406fc337c3a3a5e74b6e5261eafe3f97cb8d7a0c464e043022c8dff4deb33166ce4be6d0f3b5d9e9bfbc47ef68b76f87dde5fae8750946ccfc4e90465f5bf3498ab6415d8cdce46a587376af011911036bd4cb9d869c6b813563cf521b07213f0a40ae65129b10864f90da54e46", 0x84) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) sendto$inet(r2, 0x0, 0x0, 0x4041800, &(0x7f0000deaff0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffdd3) sendto$inet(r2, &(0x7f0000000540)="c340", 0x2, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/87, 0x57}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x268, 0x0, 0x0) 17:12:21 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957ab364bf68e6faa53367f05f4ad61421349f2f11e931e7d6", 0x60}], 0x4, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x4440, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000100)=0x14) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r1, r4, 0x0, 0x10000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x4, 0x3, 0x0, {0x8, 0x101, 0x8, 0x6}}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 17:12:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 391.039266] audit: type=1804 audit(1575738741.736:263): pid=12935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir184612749/syzkaller.cEVCqJ/143/file0" dev="sda1" ino=17202 res=1 17:12:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000018002f07010000000000000000000000697179533cc5d6d93fa748dbd858d7ea46e51ac4e442c1d294c2f23a78f184b526e46c9d2385f058e1b5a676c6512ee15472c856b5787b0bc78cf0e888062d095bb3fb482f5007c96dd9d10f339fa40a574e2ef249c50ef0bcebf93ab3bb53addf3914f7af5e334b1c376f0a6a174e844a6ce383f8cfe60242f0499a3a981cf75516fc6469a4c1e44dfa423f9da36c8a3ac9d23a0d3d5ff715f24ea29c673e1847c72ed53e417dfe73b46d791b46543d212ff0d51128"], 0x14}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 17:12:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="50ed3fee492048086bc771d78173e725662400f10afc634885c21965889afee50f22f393591fed55927e0c8b3d566ae1dfd5a82f0d7eff923d869d0b7bc02d5b464cccc841fa8cd2c54a1ee9ad0ea881d4457fc7574e447e1c9ac8923027b1125754502a0a963c03564b716c044a11d62302cb3e274761a63be3b768229821e29f9c1853690bec0612e6b4f9ffe813135ca2bb7370df30172b05ef053f9d9fc8f1d17240439f87fc5a4bb58d49"], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='squashfs\x00', 0x0, 0x0) 17:12:21 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 391.399131] net_ratelimit: 22 callbacks suppressed [ 391.399140] protocol 88fb is buggy, dev hsr_slave_0 [ 391.409328] protocol 88fb is buggy, dev hsr_slave_1 17:12:22 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40101, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) syz_mount_image$nfs4(&(0x7f0000000700)='nfs4\x00', &(0x7f0000000740)='./file0\x00', 0x4, 0x2, &(0x7f0000000840)=[{&(0x7f0000000780)="e9f9a5711bd70ffd526e36cd8703790e22e815e9fb35b18b739221bd5cb2f9e4b2db813d8b", 0x25, 0x8}, {&(0x7f00000007c0)="d574a93fc93116bad98783ffb1c662875d441f5d9e27d0e6c26338ef842e6b5a77fe198ff5aabbdab9ad50d68800088425980dfad4d95d91e6a0632f5f", 0x3d, 0x8}], 0x800000, &(0x7f0000000880)='/dev/vsock\x00') sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x3) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) fsetxattr(r5, &(0x7f0000000300)=@known='trusted.overlay.impure\x00', &(0x7f00000000c0)='#posix_acl_access:\x00', 0xffffffffffffff63, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) recvmsg(r8, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000015c0)={0x20000000}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r15, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r12}]]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', r15}) unshare(0x40000000) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x2000) r16 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$kcm(r16, &(0x7f0000000c80)={&(0x7f0000000400)=@rc={0x1f, {0x6, 0x6, 0xac, 0x6, 0x2, 0x4}, 0x8}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000480)="e623e20e5a2263d3e03f5b5c4ee2a176d3521188e9b7174981513243943f8ffea4ba3cfe11ad5870d2d5ace22ceac5dd71f0313bcb38938b6327ac600dbea556cc5cc3bcdf2e39a94a4252af900228c8a37bd3a89cc81f23ff7a4ed859ac238da810f0f22b767a7a788599a20600d5dc438d5a7c050dd54fd20f17cd4340874a3fc4f58d9b2d3ddeb7181bcf8bedf912a5f0bd397b920c9927dadcf690fc8dd6d3b97d26ceaf35ca052f6c1ee03bd91bb0266b8312462643117a1130238ee118697f65aff40db38448fadfaeb79d6c2de8", 0xd1}, {&(0x7f0000000580)="783c8a2951ccff8eaeca6f13fc6e64400ef7d66dc2ce00b4fc0bbcd44a6090e6569cf8f320d80b12ca1bc30970b311e9bae779015c5cf75abf57e31d08017c345e66770d0992791ce9e1816403826a97a569b322a128a454ac1d0e90f1f6620092e3f04b06079018cf3ec8377e7caa57a6aa6445192c5b3b1f1cf15360ec51222d19460fac8a6c9405045c77655a9fd657aa13b601e053ac8a87b2b90526d1087580764b53a608b83375650adb93c7a7e1820c507a9683b18ed5b8b971d7a5adf1408b56c8e28e0d0ae18188f7df2affb6a3fd52234ea86c7d36af047a36422d75cbf2ec7117e0558598351f51bfa975", 0xf0}, {&(0x7f0000000680)="a1f2ef76c1d0e57dcc73a8", 0xb}], 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x568}, 0x44044040) [ 391.733318] IPVS: ftp: loaded support on port[0] = 21 17:12:22 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 392.199119] protocol 88fb is buggy, dev hsr_slave_0 [ 392.204305] protocol 88fb is buggy, dev hsr_slave_1 [ 392.457179] IPVS: ftp: loaded support on port[0] = 21 17:12:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x2001) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000300)={0x600, 0x60000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "abb4291ede5e270dd3f0a272134e83bbe886c41fc6faced4210500000000000000ffffff7ffff7ef0900020000d14704000000000000000000000013003e00", "141f2b09000000000000002850c94200ffff0000230000000000000200", "50202492dc9d00ce000000e5000000000000000000e3ffffffffffffff00"}) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @random="c8b703909a83", [], {@generic={0x198e, "2192384d02ab8a5ac4091a36f8d59b13c2e8d90a9d6b20c9d6cebebb0866165ccaf11073d90de1d105cc011472656752dc70421d9479433c8a53e7865bbbab06fd56b5681769335f89f4c17dcfe53821ff60b83cef0e120c6d7c0f2231af275920f74cef09088b3ecbb870caa292cd0f9bbc9c695cb8dafd5ed4a4ad785035095ae07ed865540c0d54f72a00313a01b77dc2d2eabb38bf299057473d706932eebc5b2cc967cc37"}}}, 0x0) 17:12:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000780)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x80, 0x0, 0x0, 0xfca}]}) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = dup2(r5, r4) ioctl$CAPI_GET_MANUFACTURER(r6, 0xc0044306, &(0x7f0000000000)=0xfffffe00) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 392.609144] protocol 88fb is buggy, dev hsr_slave_0 [ 392.614534] protocol 88fb is buggy, dev hsr_slave_1 [ 392.682775] protocol 88fb is buggy, dev hsr_slave_0 [ 392.690133] protocol 88fb is buggy, dev hsr_slave_1 [ 392.760129] protocol 88fb is buggy, dev hsr_slave_0 [ 392.766593] protocol 88fb is buggy, dev hsr_slave_1 [ 393.865216] IPVS: ftp: loaded support on port[0] = 21 [ 394.331553] chnl_net:caif_netlink_parms(): no params data found [ 394.503200] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.509925] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.516906] device bridge_slave_0 entered promiscuous mode [ 394.680592] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.686984] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.694180] device bridge_slave_1 entered promiscuous mode [ 394.710548] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 394.718694] device bridge_slave_1 left promiscuous mode [ 394.726510] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.773918] device bridge_slave_0 left promiscuous mode [ 394.781131] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.759117] net_ratelimit: 16 callbacks suppressed [ 396.759126] protocol 88fb is buggy, dev hsr_slave_0 [ 396.769323] protocol 88fb is buggy, dev hsr_slave_1 [ 396.839125] protocol 88fb is buggy, dev hsr_slave_0 [ 396.844263] protocol 88fb is buggy, dev hsr_slave_1 [ 396.999147] protocol 88fb is buggy, dev hsr_slave_0 [ 397.004263] protocol 88fb is buggy, dev hsr_slave_1 [ 397.639162] protocol 88fb is buggy, dev hsr_slave_0 [ 397.644319] protocol 88fb is buggy, dev hsr_slave_1 [ 398.002025] device hsr_slave_1 left promiscuous mode [ 398.064303] device hsr_slave_0 left promiscuous mode [ 398.104111] team0 (unregistering): Port device team_slave_1 removed [ 398.115085] team0 (unregistering): Port device team_slave_0 removed [ 398.125920] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 398.166070] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 398.253894] bond0 (unregistering): Released all slaves [ 398.303159] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 398.322628] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 398.331085] team0: Port device team_slave_0 added [ 398.336699] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 398.344117] team0: Port device team_slave_1 added [ 398.350000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 398.357875] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 398.423530] device hsr_slave_0 entered promiscuous mode [ 398.449161] protocol 88fb is buggy, dev hsr_slave_0 [ 398.454257] protocol 88fb is buggy, dev hsr_slave_1 [ 398.469449] device hsr_slave_1 entered promiscuous mode [ 398.510105] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 398.517377] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 398.535870] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 398.567820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.612847] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 398.628440] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 398.638125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.651673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.661964] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 398.668058] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.685656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 398.697931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.707563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.716104] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.722517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.732619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 398.740367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 398.748139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 398.757093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.776261] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.782708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.798510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 398.806435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 398.818336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 398.825736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 398.846828] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.855023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.879005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.890340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.900852] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 398.907961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.916802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.925160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.946439] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 398.953447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.964023] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 398.970682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.977395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 398.993435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.087077] device nr0 entered promiscuous mode [ 399.235579] device nr0 entered promiscuous mode 17:12:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000640)="3232ce2774e7a3797748648d", 0xc, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000022, 0x0, 0x27) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x1f, 0x40, 0x4888e0bf92702b3a, 0xffe0, 0x100, 0x7f, 0x4}}, 0x50) 17:12:30 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:30 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000580)=""/157) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="850000001300000003880100000000009500000000000000182c0000", @ANYRES32=r2, @ANYBLOB="0000000002000000e0dc43bb22f7e2eb39feca9617267fbb33406733314575"], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x78) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r2, r4, 0x0, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDRT(r5, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e21, @broadcast}, @vsock={0x28, 0x0, 0x1ffffd8ee, @reserved}, @hci={0x1f, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x38}}, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000140)={@remote, r8}, 0x14) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=unix,'}) 17:12:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 399.390922] audit: type=1804 audit(1575738750.096:264): pid=13012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir184612749/syzkaller.cEVCqJ/146/file0" dev="sda1" ino=17243 res=1 17:12:30 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc01812f4, &(0x7f0000000200)) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) recvmsg(r1, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000015c0)={0x20000000}) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) preadv(r3, &(0x7f0000000e00)=[{&(0x7f0000000680)=""/152, 0x98}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f0000000c40)=""/129, 0x81}, {&(0x7f0000000d00)=""/128, 0x80}, {&(0x7f0000000d80)=""/106, 0x6a}], 0x7, 0x1) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xc0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x8, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100008, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10080003, 0xb, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x10005}}, 0xfffffffffffffc29) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x78) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x200000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7472616e733d756e69782c63616368653d667363616368652c616e616d653d242f707070309270707031757365722c63616368653d667363616368652c63616368653d6c6f6f73652c6163636573733d", @ANYRESDEC=r6, @ANYBLOB="2c64656275673d3078303030303030303030303030303030392c6163636573733d757365722c706f73697861636c2c6673757569643d00000000004000002d363338382d263730002d5a6500322d01646300636367662c75e9643c", @ANYRESDEC=r7, @ANYBLOB="2c6673636f6e746578743d756e636f6e66696e65645f752c726f6f74636f6e746578743d73797361646d5f752c736d61636b6673726f6f743d295b76626f786e6574306b657972696e671c2c7063723d30303030303030303030303030303030303034332c736d61636b66736465663d47504c002c736d61636b66736465663d47504c2c6d61736b3d5e4d41595f57524954452c726f6f74636f6e746578743d73797374656d5f752c00"]) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r4, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) r9 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc01812f4, &(0x7f0000000200)) r10 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc01812f4, &(0x7f0000000200)) recvmsg(r10, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f00000015c0)={0x20000000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000002600)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}, 0x8000}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x3ff, @mcast2, 0xfffffffe}, @in6={0xa, 0x4e24, 0x69, @remote, 0xb14a}, @in6={0xa, 0x4e22, 0x200, @remote, 0x1}, @in6={0xa, 0x4e20, 0x661a, @empty, 0xaf}], 0xbc) sendfile(r4, r8, 0x0, 0x10000) r12 = dup(r4) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r12, 0xc0884123, &(0x7f0000000000)={0x1, "ce60429706b4accda1a2a430f224934d223ede1a9556185de801de4f78c8b9fdf7530f7ecb81a091c2ce02382d93548664096410a16674d6cc7548a7ec35ce91", {0x10001, 0x40}}) syz_emit_ethernet(0x40, &(0x7f0000000380)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x5d, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x88be, 0x1e, 0x0, [@guehdr={0x2, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr={0x1}, @guehdr={0x1}, @guehdr={0x1}], "ab2e"}}}}}, 0x0) r13 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r13, 0xc01812f4, &(0x7f0000000200)) r14 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r14, 0xc01812f4, &(0x7f0000000200)) recvmsg(r14, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000500)=""/50, 0x32}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r15, &(0x7f00000015c0)={0x20000000}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r13, 0x8510e000) [ 399.608582] 9pnet: p9_fd_create_unix (13027): problem connecting socket: ./file0: -111 [ 399.662522] audit: type=1804 audit(1575738750.366:265): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/1/file0" dev="sda1" ino=17257 res=1 [ 399.773075] 9pnet: p9_fd_create_unix (13037): problem connecting socket: ./file0: -111 [ 399.879254] 9pnet: p9_fd_create_unix (13034): problem connecting socket: ./file0: -111 17:12:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0815b5055e0bcfe87b3071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfd06) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x78) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r3, r5, 0x0, 0x10000) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f00000002c0)=""/77, 0x4d}], 0x2}}], 0x10, 0x0, 0x0) 17:12:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@gid={'gid'}}]}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000015c0)={0x20000000}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000)=0x10, 0x4) 17:12:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) 17:12:30 executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[]}}, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000140)=0x1e) pipe(0x0) 17:12:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000002640)=0x5, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) r7 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 17:12:31 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 400.295867] audit: type=1804 audit(1575738750.996:266): pid=13060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir184612749/syzkaller.cEVCqJ/147/file0" dev="sda1" ino=17255 res=1 17:12:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) 17:12:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:31 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x7, [0x1, 0x2, 0x2, 0x0, 0xc6, 0x7, 0x0]}, &(0x7f0000000140)=0x12) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x16c, &(0x7f0000000080)={&(0x7f0000000280)=@getsa={0x13c, 0x12, 0x800, 0x70bd2b, 0x25dfdbff, {@in6=@local, 0x4d4, 0xa, 0x32}, [@offload={0xc, 0x1c, {r3, 0x3}}, @tfcpad={0x8, 0x16, 0x47}, @algo_aead={0xa0, 0x12, {{'rfc7539(ecb-camellia-asm,poly1305-arm)\x00'}, 0x598, 0x0, "13dfa7ffce325778d0bdd88c3d0fd6d4182e407217eb019b4b99b03ef4525619a69a75a36f8d6b13d044acd4bfb22392a56f8a6ad180e209a6b8c361b2890dae7c2b26d4b23bc7e4940cbe1d5a870e8ccbf1efa1dbb7df93c46e454579724d2a1fc8f23e254b9cd4bc72a40b06b369af89c14775b0841f7fc2df7a404af3493d10bde8cf11e3587eb192df195b20110af0a27b71b079923ed39d2324337c3ccacb20d99eca22d89d0e6948ea23edee9c9b85ac"}}]}, 0x13c}}, 0x800) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r4, 0x4b35, 0xfffffffc) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f00000001c0)) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x75) write$P9_RLINK(r0, &(0x7f0000000180)={0x7, 0x47, 0x8}, 0x7) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 17:12:31 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x2e) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x0) ptrace$peek(0xffffffffffffffff, r3, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000408001) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x101, 0x4) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x300) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, [0x8, 0x1f, 0x0, 0x9]}) 17:12:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x288000, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) pipe2(&(0x7f00000000c0), 0x800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="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", 0x1000) fdatasync(0xffffffffffffffff) [ 401.014388] selinux_nlmsg_perm: 1396 callbacks suppressed [ 401.014403] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=13089 comm=syz-executor.3 17:12:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:31 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffc) write$P9_RWSTAT(r0, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x494}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc01812f4, &(0x7f0000000200)) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) recvmsg(r6, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f00000015c0)={0x20000000}) splice(r1, &(0x7f0000000000)=0xffffffff, r7, &(0x7f0000000080)=0x6, 0x8, 0x8) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) dup(r8) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) [ 401.198067] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2119 sclass=netlink_xfrm_socket pig=13106 comm=syz-executor.3 17:12:32 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="2cc40c0ee2") write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x4, {0xfffffffd, 0x1d9, "c0462661e506c6aaffa6dd7b3c188b0aaf15a98b3fb93a40abc0db7d4a41bdce11b0530c979bc939176f84af2f514bbb0c967908c514104c705e5b26e6bef359b8e18be05e91cd183154bddb52677d9423dba83914e5c638bd6daaa8198eedcac28c857ca9085fcc3584f25dbbc814eaf1a8ff083be72710fd51e863e81490a8d03f5e6401822aa859ca6e504189df2b5e435d894b31ebcf4dfcce49be40148e70625b3389ab0091f4015f3fcc75b75a534fec4cb4e416ce67efbdef4890fc7f98a40ac2facf3a73e21e0ecaadcef0ea36f20a6fccd53b8ea56020d95dfa2629e95a6bb286eef2e09731d17ba5e54e23ea999ff75040a1e5a20972782c798c99", 0x61, 0x3f, 0xc, 0xb6, 0x9, 0xfa, 0x2, 0x1}}}, 0x128) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000000)={0x8, 0x8, 0x7, 0x0, 0x1f}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff9f, 0x0, 0x0, 0x36d) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, 0x0, 0xfffffffffffffec1, 0x0, 0x0, 0xff08) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:12:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000015c0)={0x20000000}) ioctl$SIOCRSACCEPT(r1, 0x89e3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r4, 0x4b35, 0xfffffffc) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000000)=[0x100], 0x1, 0x18, 0x5c7, 0x8, 0x9, 0x3, {0x6, 0x72, 0x3ff, 0x2f, 0x40, 0x3, 0x0, 0x2, 0x1000, 0x2, 0x5, 0xd274, 0xe65a, 0x3, "8204e7412cfd3789881298df4815662265de8ff3b2a575d11438eaf19911f5ef"}}) syz_mount_image$iso9660(&(0x7f0000000300)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@nocompress='nocompress'}]}) 17:12:32 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000180)={0x2, 0x0, 0x2, {0x0, 0x0, 0x1ff}}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r1, r3, 0x0, 0x10000) getsockopt$inet6_dccp_int(r1, 0x21, 0xdcaf6a5342a91b83, &(0x7f0000000100), &(0x7f00000001c0)=0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x80, 0x9d, 0x3, {0xa, @pix_mp={0xfffffffb, 0x5, 0x6a993e5f7b7cee75, 0x8, 0x3, [{0x1, 0xbbc}, {0x2, 0x8000}, {0x0, 0x6}, {0x8, 0x42b}, {0x0, 0xffffffff}, {0x1, 0x401}, {0x3, 0xfffffff9}, {0x8001}], 0x1, 0x9c, 0x5, 0x2, 0x5}}}) 17:12:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 401.621438] audit: type=1804 audit(1575738752.326:267): pid=13130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/4/file0" dev="sda1" ino=17265 res=1 17:12:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/169, 0x1f7}], 0x1, 0x7) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 401.799793] net_ratelimit: 26 callbacks suppressed [ 401.799838] protocol 88fb is buggy, dev hsr_slave_0 [ 401.811089] protocol 88fb is buggy, dev hsr_slave_1 17:12:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000200)={@multicast2, @local}, 0xc) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) recvmsg(r8, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000015c0)={0x20000000}) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000080)=0x1, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r10, r6, 0x0) dup3(r0, r2, 0x0) 17:12:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc01812f4, &(0x7f0000000200)) recvmsg(r4, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000015c0)={0x20000000}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000040)=0x0) move_pages(r6, 0x8, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000240)=[0x0], 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x80000) tee(r7, r9, 0x1ff, 0x16) sendfile(r1, r8, 0x0, 0x10000) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000140)=""/223) r10 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$l2tp(r10, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r10, &(0x7f0000005fc0), 0xa9, 0x0) 17:12:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:33 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:33 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r7}, &(0x7f0000000300)=0x20) getsockname(r4, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x5246, 0x0, 0x8001, 0x1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r1, r8, 0x0, 0x10000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7fff, 0x0, 0x8000, 0x80000001}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={r9, 0x2}) r10 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc01812f4, &(0x7f0000000200)) r11 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc01812f4, &(0x7f0000000200)) recvmsg(r11, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f00000015c0)={0x20000000}) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x80}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = fcntl$dupfd(r0, 0xc0a, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) 17:12:33 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$cgroup_int(r3, &(0x7f0000000400)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) splice(r4, 0x0, r5, &(0x7f00000000c0), 0x9, 0x0) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) recvmsg(r6, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r10}, &(0x7f0000000300)=0x20) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r11, 0x500e, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYBLOB="4a00000075c703e9f6ef413ee9d62185a5e6b3404613081887678ae565381424db4407a884ff89b690a10aaa57b802e2437611cca29e4771c65359d9e227f4410f2a6982aa0fc0e59c99f6808425"], &(0x7f0000000080)=0x52) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="00000100140000000200000006000000000000c0ffffff7fff0700000e91c54b0eff6c509c6ef5afbe9254d6b21c4497d36bb773eb76c540572beaa5bd8782d08e735e91390b93106534c97aa6c3dc02b86cfd9a0df77bc9aafcd3dad6ebc471f1f0892dc7578c02706ebd5720fd4980d6df213d575f5800c123b69550ac43bca64027d95b896656c98b4c61912d81541d730f07808435cf54a59651f4f5"]) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x3e) recvfrom$unix(r2, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) 17:12:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) bind$netrom(r3, &(0x7f0000000140)={{0x3, @bcast}, [@default, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) timerfd_create(0x0, 0x81000) sendfile(r0, r1, &(0x7f00000001c0), 0x20002000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x82, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/13, 0xd) add_key(0x0, 0x0, &(0x7f0000000640), 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 402.400404] audit: type=1804 audit(1575738753.086:268): pid=13154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/173/file0" dev="sda1" ino=17268 res=1 [ 402.485934] audit: type=1326 audit(1575738753.166:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13163 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0x0 [ 402.599822] protocol 88fb is buggy, dev hsr_slave_0 [ 402.606141] protocol 88fb is buggy, dev hsr_slave_1 17:12:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 402.695678] audit: type=1804 audit(1575738753.296:270): pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir606415832/syzkaller.GUUm3A/17/file0" dev="sda1" ino=17272 res=1 [ 403.009116] protocol 88fb is buggy, dev hsr_slave_0 [ 403.014254] protocol 88fb is buggy, dev hsr_slave_1 17:12:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 403.079193] protocol 88fb is buggy, dev hsr_slave_0 [ 403.085711] protocol 88fb is buggy, dev hsr_slave_1 [ 403.101759] audit: type=1804 audit(1575738753.806:271): pid=13158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/173/file0" dev="sda1" ino=17268 res=1 17:12:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x3000010, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="c51cf1c735e9dd445cb04fd981e872d1248d77f81cff4d0c683e581e6974073a2fea4c8d9ff05b93972669099502824e77dd5de9f6ad7c325839c174427d0456b374a4a4824f0d684f06460e8f503e0dccec8d5221dfd14f5a15d036e3c4d7"], &(0x7f0000000380)='.', 0x0, 0x5012, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="7aad7b26db214b810efde46bea90c91eeed969de005467e8478228e610d5c040c68ad7ff65130aa37a89373dbb0276d3fc86a5f33729611a77e3958cb9da0882b270319c217ce189ee394502b7587c506dff75fd71bb2a1570bcb163510e92cb3dc1370295fe70ce4768f4d33b286fd4f8d99b516836ae2548e1b8fc090be31aa3757481429d3b0c80cfe546a779d4fa8986aa2e03883e354f79a6b4bbdf0fc55349bc28d35a999b05a82d5cf189ac6c078fe196a9d3cca8f73a15ce207d50058c3f0eb57ab665c6eb03f94cee02bc86574f052ff7db70285f43a2614cd944a4fbbf1958"], &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x1ab, 0x0) [ 403.239194] protocol 88fb is buggy, dev hsr_slave_0 [ 403.244394] protocol 88fb is buggy, dev hsr_slave_1 17:12:34 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 403.270179] audit: type=1326 audit(1575738753.976:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13163 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0x0 17:12:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x0, 0x2, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd1e}, 0x48) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc01812f4, &(0x7f0000000200)) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) recvmsg(r1, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000015c0)={0x20000000}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:12:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000180)={{0x0, @multicast1, 0x0, 0x0, '\x00', 0x4, 0xffffffff, 0x3a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x109b, 0x2000, 0x1, 0x0, 0x9}}, 0xfffffda1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) recvmsg(r1, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x564, 0x2, 0x0, 0x4, 0x0, 0x1ff}, &(0x7f00000000c0)=0x20) ftruncate(r0, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 17:12:34 executing program 5: r0 = socket(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e1}, 0x6e) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)) 17:12:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000001300000003880100000000009500000000000000182c0000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x78) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x2000, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r2, r4, 0x0, 0x10000) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc01812f4, &(0x7f0000000200)) recvmsg(r5, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xbc, "ad8f9a7cefa7ca13b5e6f29b6bb5b8eb84ebcc185d1f8bfe9f3d6a5d907ec6098dcd47ee59ee9dbf2a6d7cd504b0a29b0fa7d3174a9e0c2887867799d00dc3fdc44090cd2474dc2242c4154c5d3e6bf0278a7ae3d9b253ffc4fcba251ec4942ce438adfc71cd6e53ef260a00b00b2cbaa8d7bf2377e896ab9cc8b99fe7e2a608452e7264177849d172739fb76a4ba17a685a4d4660ae85d5d54dd66ad7e8224d1e490399246c4324c0dd934ccd85ec578498b665ec9879ef96cd4013"}, &(0x7f0000000000)=0xc4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={r6, 0x0, 0x20, 0x9, 0x6}, &(0x7f0000000240)=0x18) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) r9 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc01812f4, &(0x7f0000000200)) recvmsg(r9, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f00000015c0)={0x20000000}) ioctl$RTC_WKALM_RD(r8, 0x80287010, &(0x7f0000000340)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000002c0)="2ef2260f07b9b80800000f3265660f38823df68fffff0f01cf3ef2640f015d1f440f20c03503000000440f22c00f22e666baf80cb8bd6fb283ef66bafc0cb007ee0fc7b4f40f080000f4", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000280)={0x3, "7cc40e46d4a48889356ae54e0360ae26909a9c702587fc74a6e7f7234ebe151d", 0x1, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17:12:34 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x20802) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) write$vhci(r0, &(0x7f0000000140)=@HCI_EVENT_PKT={0x4, "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"}, 0x1001) 17:12:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0026000000e8bd6efb210009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e21, @broadcast}, @vsock={0x28, 0x0, 0x1ffffd8ee, @reserved}, @hci={0x1f, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000100)) 17:12:34 executing program 5: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc01812f4, &(0x7f0000000200)) recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000740)=""/246) [ 403.687542] audit: type=1804 audit(1575738754.386:273): pid=13222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/6/file0/bus" dev="ramfs" ino=52983 res=1 17:12:34 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:34 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffb, 0x10102) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40d09) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') bind$alg(0xffffffffffffffff, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000000)) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000015c0)={0x20000000}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000080)) syz_open_dev$video(0x0, 0xffe0000000000, 0x0) [ 404.192560] IPVS: ftp: loaded support on port[0] = 21 17:12:35 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:35 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x78) r10 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r8, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r8, r10, 0x0, 0x10000) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f0000000380)=""/15, 0xf}, {&(0x7f0000001400)=""/73, 0x49}], 0x3, 0x0, 0x0, 0x20000001}, 0x4002000) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) recvmsg(r7, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r11, &(0x7f00000015c0)={0x20000000}) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000100)=""/164, 0x0, 0x1800, 0xfffffff8}, 0x18) 17:12:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x8083) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0xed, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x442}, 0x0) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc01812f4, &(0x7f0000000200)) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) recvmsg(r6, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f00000015c0)={0x20000000}) fsetxattr(r7, &(0x7f0000000140)=@random={'os2.', '/dev/audio#\x00'}, &(0x7f0000000240)='\x00', 0x1, 0x2) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000000c0)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffd1, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00(\x00', @ANYRES32=0x6, @ANYBLOB="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"/320, @ANYRES32=r8], 0x6}}, 0x0) 17:12:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:35 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0xa, &(0x7f0000000240)={[{@uni_xlateno='uni_xlate=0'}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_lower='shortname=lower'}], [{@hash='hash'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:12:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'netdevsim0\x00', @ifru_data=&(0x7f0000000040)="c9d7f68847bb402f7d8059ee537a0bcf5ca7a3c13a7f248a80f89fdbc4765a45"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x78) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r3, r5, 0x0, 0x10000) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000080)=""/243) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000200)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 405.025753] FAT-fs (loop5): Unrecognized mount option "hash" or missing value [ 405.027934] IPVS: ftp: loaded support on port[0] = 21 [ 405.153553] FAT-fs (loop5): Unrecognized mount option "hash" or missing value 17:12:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 405.216516] kauditd_printk_skb: 6 callbacks suppressed [ 405.216529] audit: type=1804 audit(1575738755.916:280): pid=13299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/178/file0" dev="sda1" ino=16913 res=1 17:12:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0xb31002, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc987) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r4, &(0x7f0000000140)={'\x04yz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\n\x00\x00\xfe\xff\xff\xff\x05\x00\x00\x00\x05\xbf\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x294], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 17:12:36 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000080)={0x7, 0xf3f, 0x81, 0x0, 0x3}) sendfile(r1, r0, 0x0, 0x20000072439a6b) 17:12:36 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xfea4, r1) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 17:12:36 executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'vlan0\x00', 0x40}) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setattr(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b34, &(0x7f00000001c0)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x00\x00(\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r3 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000340)={'L+', 0x7}, 0x28, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x78) r7 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r5, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r5, r7, 0x0, 0x10000) fchmod(r7, 0x1) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x0) 17:12:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000015c0)={0x20000000}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0xc, 0x0, 0x6, 0x184800, r2}) syz_read_part_table(0x4800000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000c00000a00000000ff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) 17:12:36 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) listen(r1, 0x0) connect$netlink(r1, &(0x7f0000000680)=@unspec, 0xc) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x78) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r2, r4, 0x0, 0x10000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000000)=0xfffffffffffff0a5) [ 406.032141] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. 17:12:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 406.147870] audit: type=1804 audit(1575738756.846:281): pid=13362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir184612749/syzkaller.cEVCqJ/156/file0" dev="sda1" ino=16594 res=1 [ 406.193978] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 406.229193] loop5: p1 p3 17:12:37 executing program 1: pipe(&(0x7f0000000600)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000007001e000000000033d78529c4"], 0x0, 0x15}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="850000001300000003880100000000009500000000000000182c0000", @ANYRES32=r4, @ANYBLOB="00009faf484400004d0af45845e728eafe43096ab58a3e2c7534f87a8cce54780800046b1f916d56eca15a7c29804b6e3f983235adee8ac53425b7ca86ac6649daa413425976606e7982d4f7ab8ce2e7e360ea4405406f7fbe174d1f7633cbd7473b7208f8d1ceebdd427fad0d3132731f059b"], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x78) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r4, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r4, r6, 0x0, 0x10000) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) recvmsg(r8, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000015c0)={0x20000000}) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f00000004c0)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r11) fchownat(r6, &(0x7f0000000100)='./file0\x00', r10, r11, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x4a99000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:12:37 executing program 3: accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) connect$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x2}}, 0x10) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000380), 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ftruncate(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r5}, &(0x7f0000000300)=0x20) r6 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4a5, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @map={0x18, 0x1, 0x1, 0x0, r6}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/181, 0x0, 0x1, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x78) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r6, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r6, r8, 0x0, 0x10000) r9 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc01812f4, &(0x7f0000000200)) recvmsg(r9, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) r10 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc01812f4, &(0x7f0000000200)) r11 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc01812f4, &(0x7f0000000200)) recvmsg(r11, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f00000015c0)={0x20000000}) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r13, 0x4b35, 0xfffffffc) r14 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r14, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r14, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) shutdown(r14, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES64=r8, @ANYRESOCT=r9, @ANYRESOCT=r12, @ANYRESHEX=r13, @ANYBLOB="10d91b74aa0a9f083b8426813a3dd52cebec49372cee7cae073c6d9ee779b4a647dd0a6f96fd77a116a85b741770cc2f38e8705d6b1ba95ffb04ec776cdea7e142a0913a9dfe342e75f30b02a8c1012130b431733a000000000000000000", @ANYRES16=r3, @ANYRESHEX=0x0, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYPTR64, @ANYPTR, @ANYRES64=r14], @ANYRES64=r2]], 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r16 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r15, &(0x7f0000001400)="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", 0x300) socket(0x10, 0x2, 0x0) setuid(0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x3}]}, 0x18, 0x1) sendfile(r15, r16, 0x0, 0x10000) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xc550b05ee4c9b48d) 17:12:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x31, 0x80000) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) [ 406.451155] audit: type=1804 audit(1575738757.156:283): pid=13375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/179/file0" dev="sda1" ino=17121 res=1 17:12:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:37 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r3}) close(r2) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 17:12:37 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 406.659155] audit: type=1804 audit(1575738757.136:282): pid=13378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/9/file0" dev="sda1" ino=17089 res=1 17:12:37 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00\x84<1\x03\x9c+]\xb1t\xf45\x9f\x1b\x85\x15\xde\xd8\xe0\x17\xd9\xae\x1d8\x88\xa1\x9c\x9bc\xde_\xddf\xdc\xf0z2\xf1\x9e\xef\xadsx]\x92N\x92$\x8b\xf7\xe0n\x1e\xd5[\xb2P\xbe\x0f[.\x97\xed\xf4\xc9A\xa2#8\x81\x9ff\xba\x8c;\x14\xc4\x84\xc0t\xcf\xbake\x14tr/f\xdb\xd4\x0fc#\xa1\xe0\x80\x12\x92\x98q\xa2\x8b\xact\x03N\xfd?I\xbc\x1f\x1c\xd9U\xd7\x19N\xb5j@\xff\xb7\xe8I\b\a\xaf;]\a') syz_genetlink_get_family_id$SEG6(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$tipc(0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, &(0x7f0000000240)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x106080, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000040)={0x8, 0x8}) setns(r0, 0x0) alarm(0x0) 17:12:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000000)) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @dev}, @FRA_DST={0x14, 0x1, @mcast1}]}, 0x48}}, 0x0) [ 406.924094] audit: type=1804 audit(1575738757.236:284): pid=13375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/179/file0" dev="sda1" ino=17121 res=1 17:12:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r4}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:37 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x03\x11&\xe8\\\x19\xd8\x87o\xb0i\xddi_t-\xfc\xd7\xa8\x9a1{-\xbf!\xd9\xfe\x8b\xf4O!Y\xf4o\xef\x90\xcf\xce\xe7\xfa\xce\xb0\xa02\x19\x93\x1a%CZ\xca\x81\x00\\\x1d\x1c)42\xb2\xdd\xd1\x87|\xe1X\x1aby\xedo\xa2+z\xf6i$\x84s\xd2eT\xd0\xd1g\xc0\x8c8,TQ\xa8Bz\x96:\xdaq/\xd1\x98\x93\xafyu\xccV\x99\x87\xce\xd5Q\xab;OOPr:i\xd2\xb3-i\x00\xbc\x19M\"\xd5s\x85\xa7Bo|\x95\xd0\xbc\xbc-\x80lS\t-H\x86Y\xe2\xde\xd4K\\\x1dF\x87b\xf2y=\f\x12\x8aw\xfc\x17\xa69/w\xeaH\x80\x90.\xf4\xbf:\x95!RO\x0f\xf3\x02\x01\xa0)\x8bL/\x81Zo\x0e\v<\xf1_\xd3\xde\x0eB', 0x0) pwrite64(r0, &(0x7f0000000040)='o', 0x1, 0x100000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x116) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x54e3039d5385f2e2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10000000000000, 0x0, 0x80000000000000, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 407.148264] audit: type=1804 audit(1575738757.276:285): pid=13375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/179/file0" dev="sda1" ino=17121 res=1 [ 407.179170] net_ratelimit: 17 callbacks suppressed [ 407.179178] protocol 88fb is buggy, dev hsr_slave_1 17:12:37 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000080)=0x597d69fb) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r3}]]}}}]}, 0x48}}, 0x0) [ 407.239186] protocol 88fb is buggy, dev hsr_slave_0 [ 407.244373] protocol 88fb is buggy, dev hsr_slave_1 17:12:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r4}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r4}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x2f, 0x2}) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0xf, r2, 0x0) [ 407.318179] audit: type=1804 audit(1575738757.346:286): pid=13375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/179/file0" dev="sda1" ino=17121 res=1 [ 407.399136] protocol 88fb is buggy, dev hsr_slave_0 [ 407.404329] protocol 88fb is buggy, dev hsr_slave_1 [ 407.517059] batman_adv: Cannot find parent device 17:12:38 executing program 3: ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000160000040000000300000005450000d000000007000000000000000000000004"]) socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r1, r3, 0x0, 0x10000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e21, @broadcast}, @vsock={0x28, 0x0, 0x1ffffd8ee, @reserved}, @hci={0x1f, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5}) r4 = dup2(r0, 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x8100210, r4, 0x96c09000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @dev, 0x6}, 0x1c) splice(r5, 0x0, r6, 0x0, 0x100000002, 0x0) 17:12:38 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 407.639153] protocol 88fb is buggy, dev hsr_slave_0 [ 407.644485] protocol 88fb is buggy, dev hsr_slave_1 [ 407.662027] audit: type=1804 audit(1575738758.366:287): pid=13443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/182/file0" dev="sda1" ino=16609 res=1 17:12:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r4}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[{0xc8, 0x0, 0x0, "7e7aad83a8f2a6e7367feb37f9d35745156a419f973180ae93470f1a3dda3fba7af698194ed085c59353620a0585cbe10ffd84cffe86650e6c7b17e60a3e03567e6d1819c86d794522e0aa754e3d88ea6a081420dc64abc041953aad7dafb4ca2e67aae0b8cc7620c38ca14c6239098493bd6e730ebbb3b0919439bcf1912bc8435effff2058eadc2fa2902ae4efa7c9b4a823470d24678b13ed6436ad2c5248ccce4c9ec36a49e367f66475d846179766"}, {0x48, 0x0, 0x0, "5a83bba0c7c956e4018bb1df6a56d296c94aac5f33f947cc88dd63338a9b109402331200094f00cf090909be68b3786d92"}, {0x18, 0x0, 0x0, '?'}, {0x50, 0x0, 0x0, "3c455944b496262555857324337c026d188a27d7a2b304af224bdb4ae5a38263c7162197942c92dd0de77ccffb8cc8fd77d35cc5ba4d3c88d8"}, {0xe0, 0x0, 0x0, "62ea8ae3206e3a327f906c752f2d79ead17d717f06c1c3fb0a9601ec3331c3574eaac90e1f2acf212821514564e0b216cda45e42a8d5c425c367ea724b441b3b57379fe74cd240cdd79f16d83642f6fa88d3cdf1813f7b6a1d544699c04be8e7d51a52c34853b233459c2660c01c69d399b54b4d25f42b199b78a54e95236c0fb9b52daea59496bfec657fc4dec6737979a505180e97c2b19660f88cdf81cd56ac6afc7ec1d876500302a44e7a9501e3029ff373cab1847dbbf534776f815b2c5762899d7bc5f101ec"}, {0x2b0, 0x0, 0x0, "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"}], 0x508}}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e261f0965cac635000002000fb8010000000f01d985030000640f08c4c2e5b958aa0fc729", 0x30}], 0xaaaaaaaaaaaab96, 0x0, 0x0, 0x52) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) 17:12:38 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) io_setup(0x1f, &(0x7f0000000000)=0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r1, r3, 0x0, 0x10000) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400000, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x7, r1, &(0x7f0000000040)="368eb7241d908bbc6adcd900a43107838d6a9447e1947c239e6fb0794c35a3892e2ff28d7b0bc7cb479a", 0x2a, 0xffff, 0x0, 0x2, r4}]) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000e00100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001080000000000000100008000"/192]) close(0xffffffffffffffff) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/49) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 17:12:38 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="ff077fb65790000017594a92bab186131ed79c6eccba75aecd1acd083f194b5c00000000000000008943f23149c42db95460be6f21e10c37affcc821abf6e9f8366d4b36c26278a4d15c61c897667280e11b29a57305b4429b7d6e6ac7b6e99c11cf94a4ef797ca404b9560be46ddfffbf670298d9d4b3bc15cf7d03136d2a37723a99f20c00991e7610881dc6c461c453bbd754eb1aeba20de0e158867f5eb289"], 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000100)) 17:12:38 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 408.039177] protocol 88fb is buggy, dev hsr_slave_0 [ 408.044312] protocol 88fb is buggy, dev hsr_slave_1 [ 408.056265] audit: type=1804 audit(1575738758.756:288): pid=13475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/11/file0" dev="sda1" ino=16849 res=1 17:12:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 408.264921] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing 17:12:39 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 408.335451] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted 17:12:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x6c0d, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000400), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000300), &(0x7f0000000780)}, 0x20) [ 408.452888] audit: type=1804 audit(1575738759.146:289): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/11/file0" dev="sda1" ino=16849 res=1 17:12:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={[{@barrier='barrier'}, {@nobarrier='n\xf8h\xfc~\xa2\x9eF\xf5'}], [{@euid_gt={'euid>'}}]}) [ 408.720833] hfsplus: unable to parse mount options 17:12:39 executing program 3: set_tid_address(&(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r1, r3, 0x0, 0x10000) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "7cd973fe104334e3", "43506e7689f7d00f43a2d6a901c825af", "f8e8b2f0", "93de724771fed4d0"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) open(0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRESOCT]) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f0000000340)=0x6f6) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000240)={0x9, 0x3}) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x73, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 17:12:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) socket$kcm(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x9, 0x1ff, 0x2000000c, 0x1ff, 0x0, 0xffffffffffffffff, 0x9c41, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000400)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 17:12:39 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x13000000, &(0x7f0000000980)=[{&(0x7f0000000000)="240000004f0007031dfffd946fa2830020020a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0xfffffffc) connect$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) [ 408.839128] protocol 88fb is buggy, dev hsr_slave_0 [ 408.880834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:12:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:39 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)="89d05bed14472262d6b034033f9f4c71274cad4c7971cc3f0765de93214022b246e0553de4cb02ddf1f3d0fca00f4cd7a9f0ff2a46e9cdd51b97a563d30b516e4be0530bd907f863d211995e1600311b27e5362c98bae93968303fabd15b9677ca67f401", 0x64, r0) 17:12:39 executing program 5: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f00000009c0)=""/264, 0x108}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000540)={{0x5, 0x2, 0xeb, 0xfffffffc, 'syz1\x00', 0x5}, 0x1, 0x4, 0x712, r0, 0x4, 0x0, 'syz0\x00', &(0x7f00000004c0)=['/dev/snd/pcmC#D#p\x00', 'posix_acl_accessproc@keyringeth1em1md5sumem0\'+$\x00', '/dev/snd/pcmC#D#p\x00', '\x00'], 0x55, [], [0xfffc, 0x4, 0x401, 0x9]}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000015c0)={0x20000000}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x527ca3f780ccefd2}}, 0x20) r6 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x3, 0x162a6b665cb222c1) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r6, 0x80184151, &(0x7f0000000480)={0x0, &(0x7f0000000380)="5d92f39dcda3394cee84431d90eaa7bd83f29cd84292f64614b82a69b4c21b73d2a32e00c4b3e6eceb012d8f4d06725c024b62be72ba0a26c67d8c9e50c9525ec47e6590075db4294d73f2797c29bf2f8e2a231c8902e540f4978c73435ea8e836f11e20dd2f8b228474425967f3cfbc7301e31742ebb05ee8facc3924f180ba72de0d01f0a241f934648e2b80c964a995e0dcd126bc988d18c7033fb8c651ffe01af4769e796308b6817ae11f1d7f5e544c", 0xb2}) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5}}, 0x10) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000440)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x200, 0x4, 0x2, 0x3ff, 0x0, 0x2, 0x6, 0x3, 0x6, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd, 0x10000596, 0x6], 0x10f000, 0x1400}) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r7 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) [ 409.098410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 17:12:39 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:39 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='1/'], 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc00, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000140)={0x7, 'bridge_slave_1\x00', {0xffffffff}, 0x400}) 17:12:40 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xd0d1a9634216a28d, 0x0) write$apparmor_exec(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='exei \'\x00'], 0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x70d, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x8, 0x11, 0x5}]}, 0x28}}, 0x0) [ 409.265275] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.272075] bridge0: port 1(bridge_slave_0) entered disabled state 17:12:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:40 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc01812f4, &(0x7f0000000200)) recvmsg(r0, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500006110040000000000ad0000000000000095000000e5000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 17:12:40 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e21, @broadcast}, @vsock={0x28, 0x0, 0x1ffffd8ee, @reserved}, @hci={0x1f, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x80, 0x0, 0x0, 0x3}, {0x3, 0x50, 0x6e}]}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}, {{&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x0, @dev, 'vcan0\x00'}}, 0x80, 0x0}}], 0x2, 0x0) 17:12:40 executing program 1: r0 = open(&(0x7f00003b6ff8)='./file1\x00', 0x100000000804c1, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') r3 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x78) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r3, r5, 0x0, 0x10000) syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x8001, 0x800) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f0000000180)={{0x2, @addr=0x5}, 0x8, 0xffffffffffffffc1, 0x61a3}) 17:12:40 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 410.027177] netlink: 'syz-executor.2': attribute type 17 has an invalid length. 17:12:40 executing program 5: vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffcb5, 0x100, &(0x7f0000001880)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000015c0)={0x20000000}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0xfffffffffffffe34) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) shutdown(r1, 0x1) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xffffffffffffff47, 0x0, 0x0, 0x1a) [ 410.095367] netlink: 'syz-executor.2': attribute type 17 has an invalid length. 17:12:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:40 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @empty, "0010000000080800"}}}}}, 0x0) r0 = socket(0xa, 0x802, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 17:12:40 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x9) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850011001900000003800000110000000000000000000000182c0000", @ANYRES32=r0, @ANYBLOB="0000000002000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x78) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r0, r2, 0x0, 0x10000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r4, 0x4b35, 0xfffffffc) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000040)={0xe}) prctl$PR_SET_PTRACER(0x59616d61, r3) write$P9_RREAD(r0, &(0x7f00000000c0)={0x83, 0x75, 0x2, {0x78, "27c6d0b8f943d842d35b2e095e11a74898259a2be6dd91c4be728124a2dabb1f22b9750bc80ed0bf2752e60b8f672998094c1f16f2466210b703b734197fdeb360c65827014b5796fedf8b3b9f39c226f4193bbb2cfd9c13768691add0db398a572f0ca2157e99a1d7f9a5a4eb98cba753974a30f3af6854"}}, 0x83) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") 17:12:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'gre0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, r3}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r4, 0x5, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc01812f4, &(0x7f0000000200)) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc01812f4, &(0x7f0000000200)) recvmsg(r6, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f00000015c0)={0x20000000}) setsockopt$CAIFSO_LINK_SELECT(r7, 0x116, 0x7f, &(0x7f0000000100)=0x6, 0x4) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0300ffff", 0x6}], 0x2) 17:12:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 410.335934] kauditd_printk_skb: 5 callbacks suppressed [ 410.335948] audit: type=1804 audit(1575738761.036:295): pid=13579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/17/file0" dev="sda1" ino=17286 res=1 17:12:41 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x1c}, 0x10) signalfd4(r0, &(0x7f0000000280)={0x80000000}, 0x8, 0x81c00) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="850000001380000003880100000000009500000000000000182c00d83cf65c6a40648955b044fc60f200b20f6ca92b86ef078e1e8437c2fb8a4d69a548aceb447f376ef81c9c26c2b992f266340660c5ea2f90f26260bce3a38d0642ae172049b9d7ad2ba36278b66ad983b1b28c0a7e557da2a5ef1b3dc7100140e29884536180205bcbd5360a2693d41d304367e47eb03a6ad1713dcd67c653156ab708b7fc34e9c40ab51592a5297a83f8a7b83b1894ab0486307547993928c7289f14fbf728955b087589bca85ce626e1d9d4e3ca07874ef56cd65822a96f91b05f81c08a37ee4f5eeed1b1368aee", @ANYRES32=r1, @ANYBLOB="0000000002000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r1, r3, 0x0, 0x10000) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000300)) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 17:12:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) r4 = getuid() setreuid(r3, r4) syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x7fffffff, 0x5, &(0x7f0000001400)=[{&(0x7f00000001c0)="fe3ae873519c61d2147540b318f56445a73d5df7d131ff9bf236de17be13b682ec80c209f6b9b3645c4f6e68ef78609e121add7004115a34aebaf32c8417bf", 0x3f, 0x7f}, {&(0x7f0000000200)="2d7f0bf8600df1223f9fc6f5240c396ab9279456e28be1a2439eb4fb7dab5f7286f325da91122c5a67fefb730162058b5b55df9dff6a84dd3452f82369c77ed84e4f2b6e581e416ab05f2d30e75fc740e4b8840625b60dee0c418d86880141a0bc3fd7748e9025ea154745087ce48af18c87c9c47319c6cc14f4967f19cfcf13ac29344e", 0x84, 0x1}, {&(0x7f00000002c0)="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", 0x1000, 0xc263}, {&(0x7f0000001580)="896e114c45255148b2822aabde72d6949aeae3247b8d0f205249899bb42c1802ec3d8b6996ae16a86287821d56b67e5c92b0d5741f5c234105d48268a8e72027a5929e3967fc3efdb0b79791b069810697fe823875a69da1d9c0c86735accf2a041b8d87b04116de9635afa5f1f69d122e98591992a6234f3ab4a092a6f10b07dec91c54ac49e369ed37e19d54ec", 0x8e, 0x97}, {&(0x7f0000001380)="683408dee910a01e1a9768d557368d339be073ccb8ef0f6ea2a927f70e0f4db05a6402d82d7660057929a58d1e60d58280f586fb185bc5ac543928ad2377bfe41daa7d404d1388d0179d615f4efbd231b69dc2d70a10f37edc3cccf6b1642081356d89d3843ddf5cdd1240c8b1c8c79613b9bc2e6f4a", 0x76, 0xff}], 0x2004030, &(0x7f0000001480)={[{@nobarrier='nobarrier'}, {@part={'part', 0x3d, 0x6}}, {@barrier='barrier'}], [{@permit_directio='permit_directio'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '(.vboxnet1vboxnet0GPLcpuset@&keyring'}}, {@euid_eq={'euid', 0x3d, r3}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@permit_directio='permit_directio'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, 'nfs=nostale_ro'}}]}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r5, 0x4b35, 0xfffffffc) accept4$alg(r5, 0x0, 0x0, 0xc0c00) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f00000000c0)="240a63244713e09457a14ded7e159cb86d36b591f00b3b12ca14de9b279bf7", 0x1f, 0x2400009c, &(0x7f0000000100)={0xa, 0x4e22, 0x200, @loopback, 0x200}, 0x1c) 17:12:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 410.707776] audit: type=1804 audit(1575738761.406:296): pid=13599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir184612749/syzkaller.cEVCqJ/165/file0" dev="sda1" ino=17290 res=1 17:12:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x26c}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020b005697687c061a01020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a00eba99c10cb73"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 17:12:41 executing program 0: syz_open_dev$sndpcmc(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="10000000070000002000000000000000"], 0x34, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x10240, 0x8) mount(&(0x7f0000000200)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='securityfs\x00', 0x412, &(0x7f0000000300)='workdir') getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000140)=0x14) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x2, 0x0) [ 411.293193] overlayfs: conflicting lowerdir path [ 411.936799] device syz_tun left promiscuous mode [ 411.952477] bridge1: port 1(syz_tun) entered disabled state [ 412.008513] overlayfs: workdir and upperdir must reside under the same mount 17:12:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x22345f9df7274b36, 0x2, 0x10000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000000c0)=0x3ff) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:12:42 executing program 0: syz_open_dev$sndpcmc(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000080)=0x4) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000015c0)={0x20000000}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000100)={0x7, 'veth0_to_bond\x00', {0x69a}, 0x3}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002f00815be00f80ecdb4cb90407486516080003001400000012000014c2ed3c001500cd5edc2976d153b4", 0x2e}], 0x1, 0x0, 0x0, 0x13010000}, 0x0) 17:12:42 executing program 5: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) 17:12:42 executing program 2: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000077000)=""/133, 0x2800) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20}, 0x19) listen(0xffffffffffffffff, 0xfffffffffffffffd) syz_emit_ethernet(0x6e, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60d8652b00142f000d8100000000000000000d00000000aafe800000f645d91d1c64c630b45b5263cc2a35b20000000000000000000000aa00004e205ed2e77ed3b24e1dc647341f622bec9a83b57b17138390aa4b7eef150b0363da4e2f89e09781411b336348a109bb3d71760332602a4d1768e701000080dc2e643df908ff31038008252a889b2767c02f722872826580c0ec21d052080821abb56c819f6c0f55566ab9fd28c2940d8e8814deaa0b6d2028bd0062e78a98f727d7406589b3a3bef16dda18e8c5cf882fab09b0ed1830aeafc97e25b5c2a21e26af7fdb9c3467252dc2e5ffa86337cb4a4a4fffb678c515fdfdcc65f2518087306f2a27e2108c3ca5653ca926e54c6060d9555c02ae54f24473f0cd768e18370d25af46fd995cc49f40659f12475b8aca289f6e6f85fd741a5e3cd8b171cd2dbc34b218b8a664dd47c63f6776bafb602572020cf85189571eba4779fdd7717ae3c8f2a3a56fe30aa2ba178e54e1f371a6fb2ed98d2cb487752c39", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$unix(r0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x20, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 412.199170] net_ratelimit: 20 callbacks suppressed [ 412.199179] protocol 88fb is buggy, dev hsr_slave_0 [ 412.209325] protocol 88fb is buggy, dev hsr_slave_1 17:12:43 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffff9c, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd'}]}, 0xfdef) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:12:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'\b\x00@', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r1, 0x3b, 0xc5}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'cryptd(xcbc-aes-ce)\x00'}}, &(0x7f00000000c0)="55b85c612403a6571f761609f5d034d63bd3675dc1650b2b6103eb331c3cddf560106e045386f2fd8ee84fb1804d4b296930205d90c88a8b1442be", &(0x7f0000000200)="4d2b6f6ad3b206f3d83f293ce76c5b8dc31abc1225c282622e629c1512afd04f13dfd866740890110b3d13f3bbee8532a5ff355362a550b83f3c73294f18e91d334ecaba36019e8c6bd5c17b33c3698e926f07f4be4dbbcde991e3c6b21e3149fbb3da4b411f71a5990411872af076798c1989742cfe935d282974d29f94d7ced5fab0ceab9fab6b29783ad8033aab1557eb9054f5a339bf5f8cd17aff9accb202635e3c09b0d16a9ca5184e5f6db35bede6aeef03763cb3c5bca9f6a3089f65477124f0bf") flistxattr(r0, &(0x7f0000000140)=""/133, 0x85) 17:12:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:43 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x3f) ftruncate(r2, 0x200004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 412.647780] device nr0 entered promiscuous mode 17:12:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x17) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0xfffffffc) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x6) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) r5 = socket(0x2, 0x803, 0xff) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r6 = dup(r5) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8000fffffffe) 17:12:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000580)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2800, 0x0) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "50b1794e041d1a9b3140b31bdcddbe1c47ca2109"}, 0x15, 0x2) write$UHID_INPUT(r0, &(0x7f00000015c0)={0x8, "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", 0xfffffffffffffde9}, 0x10000005c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) fadvise64(r0, 0x0, 0x0, 0x4) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 17:12:43 executing program 1: clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r1, r3, 0x0, 0x10000) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000040)={0x100, 0x5, 0x16, "3c89b3b8bb2866fb3e024829e73637bc4db53f84c300732087ae150c18c249b641a500723b7f51a3c8e5c53beed6f15b55357c729134151f6808f883", 0x13, "da83bc5b7edbaba45fd6ca4a9d22b865633a6a4c5f06e392b59dd7740cd221cda990f50f2b989ae696983ef72010e4a40e6e7e89e657b52aa558855b", 0x8}) ptrace$setopts(0x4206, r0, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2e) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r4, 0x4, 0x200000086) r5 = gettid() tkill(r5, 0x3b) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) [ 412.955023] audit: type=1804 audit(1575738763.656:297): pid=13680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir606415832/syzkaller.GUUm3A/32/bus" dev="sda1" ino=17287 res=1 [ 412.999125] protocol 88fb is buggy, dev hsr_slave_0 [ 413.004365] protocol 88fb is buggy, dev hsr_slave_1 17:12:43 executing program 0: syz_open_dev$sndpcmc(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:43 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x78) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r3, r5, 0x0, 0x10000) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x40000000000003f, 0x0) [ 413.064986] audit: type=1804 audit(1575738763.706:298): pid=13683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/21/file0" dev="sda1" ino=17292 res=1 [ 413.211454] audit: type=1804 audit(1575738763.916:299): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/22/file0" dev="sda1" ino=17293 res=1 [ 413.399160] protocol 88fb is buggy, dev hsr_slave_1 [ 413.480140] protocol 88fb is buggy, dev hsr_slave_0 [ 413.486382] protocol 88fb is buggy, dev hsr_slave_1 17:12:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:44 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000080)={0x8000, 0x1}) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc01812f4, &(0x7f0000000200)) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc01812f4, &(0x7f0000000200)) recvmsg(r5, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f00000015c0)={0x20000000}) mount$fuse(0x0, 0x0, &(0x7f0000000140)='fuse\x00', 0x8888, &(0x7f0000001400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c729e0500000000000030303088d5955d94431051a5eaec3adf5e97fcf532405788a386fe4d436a18d4bddb22ce3024ef23a62e5b", @ANYRESDEC]) [ 413.760374] audit: type=1804 audit(1575738764.466:300): pid=13696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir606415832/syzkaller.GUUm3A/32/bus" dev="sda1" ino=17287 res=1 [ 413.767186] device nr0 entered promiscuous mode 17:12:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100020ba1080080002007f196be0", 0x24) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000015c0)={0x20000000}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000100)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001300020027bd7000fddbdf25ac14140e000000000000000000000000000000b60000000000000000000000004e2000004e23002008008020bc000000", @ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="01000000010000000800000000c924cb6e000000000000000900000000000000760d000000000000c0e70000000000000080ffffffffffff0900000000000000000000000000000040000000000000000100000000000000090000000000000009000000bc6b6e00010302020000000008000b000700000008001d0080000000500003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280000000dfa1cd3c10000001c000400ffff4e244e230000ffffffff00"/236], 0x134}}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@local}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f00000004c0)=0xe8) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000140), 0x4) [ 413.891698] audit: type=1804 audit(1575738764.496:301): pid=13694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir606415832/syzkaller.GUUm3A/32/bus" dev="sda1" ino=17287 res=1 17:12:45 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:45 executing program 5: ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x200080, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="02ae000000dc9a2c8f85ffa013aa80b9d8002468760bce8fdd273d5f668ba85c7f00000000000000cdd0816d1f1f4d9e0f09829bd4ce8a31e3a779d4230a1b737594d2c64e49f9068e329a9e023abce9aeceb2f6702f001000000000000004af8b7450fa65a81fdb5ab57e55df593f351c0aa5479a9933a9b58f49514cd13b93d77862edf84644a080e7f693f3a3800d60bdc61a64c931bd448b9684a81eb7f48889c1749e9b8d22b80d19c5770543a1ffdc639da1cecb2ce4c599f96d6c777f7d1cb5e3ce12cb92fe38d4a6b6ebf74d6d2ba44c7a86ce6e6bed30ab2b38bd967dbffa9cdc518adb981fb8794b39a07d0db7e0d260a8fc0dadf481b7ec4271d5e1d96fee5010eb28de36ec6087bc801d13ffa9ae1c8b0023ba5a672684ed86d60ca2703036a4b535a7e1d3d4226a2cd187aecdf476c33e3c144d1f2234758a9d11f8d31df3a9dd5457bfbc6d0510d381147ab388177c391d079b419c36f766b4ffbc729e53cd19632a5c970372be42e3825b8029ccbe8a76f2a58fdd2cf19e6fc205ba3d25ba295da5e1660e5ab99d14ad9e314d61e391e2804448b97bc94eeb68da2ceb91307886f3913568a62a1079692d9f6cf767087301c00b6e2409556ad4e9c4fdc8c0ca472890c958417e9b3cef08cb20eeb4a5b45155acfb000396471149c422eaebf536227c8abe0400000000000000000000000000abbf62a02b60bfc1150b9bd246c29007b55463c891b67fa3181d1f6116549ba0b3c78dc596414caceed28e14c8927afcb075ed8e426a424055413a88aea849358a6de29c32893058bde9", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc01812f4, &(0x7f0000000200)) recvmsg(r5, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @broadcast}, {}, 0x80, {0x2, 0x4e20, @multicast1}, 'syzkaller0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000340)='keyringwlan0\x00', 0xfffffffffffffff8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r6, 0x100}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r4}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r4}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000c439eaa80e0022002908000000000000005ce5fbb414d3000400000014001100fe802f0000"], 0x28}, 0x1, 0xfdffffff00000000}, 0x0) 17:12:45 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204012c00000270fff8", 0xffdf}], 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 17:12:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x78) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc01812f4, &(0x7f0000000200)) recvmsg(r4, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000015c0)={0x20000000}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000180)={0xd6, 0x4, 0x0, 'queue0\x00', 0x7f}) sendfile(r0, r2, 0x0, 0x10000) ioctl$RTC_AIE_OFF(r0, 0x7002) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x800, 0x0) acct(&(0x7f0000000040)='./file0\x00') accept$alg(r6, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x333, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') 17:12:45 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 414.718096] FAT-fs (loop1): bogus number of FAT structure [ 414.752983] FAT-fs (loop1): Can't find a valid FAT filesystem 17:12:45 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 414.843284] FAT-fs (loop1): bogus number of FAT structure [ 414.885628] FAT-fs (loop1): Can't find a valid FAT filesystem 17:12:45 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x0, 0x3) 17:12:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 415.004682] audit: type=1804 audit(1575738765.706:302): pid=13731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir776444689/syzkaller.6K8Nn7/190/file0" dev="sda1" ino=17306 res=1 17:12:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x9) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) [ 415.162510] Process accounting resumed [ 416.866378] IPVS: ftp: loaded support on port[0] = 21 [ 417.052031] chnl_net:caif_netlink_parms(): no params data found [ 417.186718] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.193488] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.200627] device bridge_slave_0 entered promiscuous mode [ 417.207665] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.214210] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.221487] device bridge_slave_1 entered promiscuous mode [ 417.347862] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 417.357953] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 417.492042] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 417.499881] team0: Port device team_slave_0 added [ 417.505653] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 417.513636] team0: Port device team_slave_1 added [ 417.519430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 417.527114] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 417.582346] device hsr_slave_0 entered promiscuous mode [ 417.619629] device hsr_slave_1 entered promiscuous mode [ 417.680482] device bridge_slave_1 left promiscuous mode [ 417.686136] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.740165] device bridge_slave_0 left promiscuous mode [ 417.746076] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.122466] bond1 (unregistering): Released all slaves [ 421.162759] device hsr_slave_1 left promiscuous mode [ 421.204359] device hsr_slave_0 left promiscuous mode [ 421.263853] team0 (unregistering): Port device team_slave_1 removed [ 421.274933] team0 (unregistering): Port device team_slave_0 removed [ 421.286636] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 421.333352] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 421.421261] bond0 (unregistering): Released all slaves [ 421.474349] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 421.483998] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 421.500601] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 421.538226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.547415] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 421.558427] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 421.565154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 421.573267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 421.582989] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 421.589371] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.599403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 421.606495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 421.614587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 421.622755] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.629164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.636729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.646753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 421.720228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.728301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.740952] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.749824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.766298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 421.775935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 421.793617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 421.801958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 421.814005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 421.822358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.831665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.845040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 421.853257] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 421.861507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 421.872805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 421.883969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 421.898166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 421.907054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 421.924208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 421.935936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 421.946815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 421.961152] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 421.967228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 421.995048] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 422.007029] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 422.018787] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.032455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.047453] 8021q: adding VLAN 0 to HW filter on device batadv0 17:12:53 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffa, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x58eb00, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = socket$inet(0x2, 0x5, 0x2) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffffffffff, 0x0, 0x9000000) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) fcntl$dupfd(r3, 0x406, r4) 17:12:53 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:53 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000100)=0x4) write$cgroup_int(r0, &(0x7f0000000080)=0x1a001b00, 0x297ef) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000140)={0x166, 0xa, &(0x7f0000000440)="c194f01a8f285ca8413750d51edb15a1378184aeb64883a41afaad548d597f9dd831b5b011072772df1a1cbeee5d84c446d215bf0b169759d40af2577f4d194b5cdbc5b157bf7ca300904979349372814615c46c8e765f3055ce4dad4e7a8074269306fade3fb6c562a385d3d9a27e8e61541a863fa80730631cd08a190dcc8d04d2baf93fccfdfb55335258d2db86d043e2fad629373aeffaebd46b5cf72e4485ac1144c18f2921b6888597ea6b8219e0d8ca1b265c33cb80c2b21f7eda507646c0b3cb949df27f26e9140ec4629b1280158899883f5f06d67c76a514512c8573296058467634689975f5df4b76a3a4540c89bae003387e1fb6410e0865dfc212132f0fe587884397f9d85050fd12c2544a5d3c3e1e439b13ead5395feeeedfe731f6f6298b1158a3717ff7f544ba1753bf481741409df1a19723ceff7af9bcc6fab2c47782cc586f751aada90166d8ba11c3e311662eb8620af36de0491c2d58a74c580619747c4b99627b8130043c352b570f13c6692fccd2e40355c3ef69013f030a564294ac011b3d3e3a56c6c167b13211931b7684c6511948bb3caae757765b296601399d49a57e4de803c5baa0bb9f73011d9ca0cff0c60eba18e1ea367eb276c73b8d1bc316b4c8c01e8bdcfdec0aa1f5281c693374cf0a84db9bbe1d58fa7d9b31bb34d73ed030c83580a1924b0fa1d276f91e9a842293f82e707c1d217000b6e2d48a759e6eb5552ca2b858b5fea947781af16213e15c5b58027adf9ea2c68df80ca16f9335bfcc905026fd60478c6a64cf26be3d26dfe51f23cf16f3940435d84562238b32ad457e688be84c03573b973d04c9bf4248ed7d78276caa2c520c6d0e70f0b2e01248f5eb53afdc5503a189bd8e77f9edf0d400cedd6debdb69173b384949e891d260da88363b16ff0e21ed9b69b7f373bc8b53a1239c2d6289d110be77150fcb4edb2ebef0fd1ce2e99fc5328e6c9653ccc76977eb4ea7b67db2b8e2fe4355c3a0b039a6433e5105f21fce6cf13894a0cdd68dab8fafb8e64a6df323729d86cca2e60aacdea0182f23b4d520b620acaa2c28f679064da490d131fb97afa71f1c0dfe7b475154e83d965deaad544c27bded90a6a2e8790c8192463af740db7722a5bef66b828f68382b06edffe31de6394a11f915c44f5db88e029fcc689bb31d715688c478dc9fae75086d576519649a3b1224407a9e185be9dfc3dad5fea21093450040cc72cae76a715009225ac5ec400037d4d284a5d37e8eb2e26000f7f0e3358e18219cb6021ca9b42ddae06db6904d59964e30eeda7690ed460aded1a11cbef22c5b34601173f0ffc92082097dab98f75b16984974e80314427e28cf11d4fdcba5ac16a5b7c9441ce7afd128581963a0a2a882415c5b34b37b6d0c75d2da239c4e1341e2ca7965e477eac4b6ce88de90f103"}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 17:12:53 executing program 3: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0xaaaaaaaaaaaad21, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f00000004c0)={0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2e4, 0x400}], 0x4801, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc01812f4, &(0x7f0000000200)) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)) recvmsg(r1, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc01812f4, &(0x7f0000000200)) recvmsg(r4, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000015c0)={0x20000000}) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f00000015c0)={0x20000000}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) r10 = getuid() setreuid(r9, r10) r11 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r12 = accept4(0xffffffffffffffff, &(0x7f0000000500)=@in={0x2, 0x0, @initdev}, &(0x7f0000000480)=0x80, 0x40000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e20, 0x84a, @mcast2}}, 0x623, 0x5, 0xdde, 0x3, 0x1}, &(0x7f0000000740)=0x98) r14 = socket$inet(0x2, 0x4000000805, 0x0) r15 = socket$inet_sctp(0x2, 0x5, 0x84) r16 = dup3(r14, r15, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r15, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r16, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r15, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r17 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r17, 0xc01812f4, &(0x7f0000000200)) recvmsg(r17, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000e40)=""/113, 0x71}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/115, 0x73}, {&(0x7f0000000640)=""/54, 0x36}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000000680)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001600)=""/139, 0x8b}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r18, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDRT(r18, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e21, @broadcast}, @vsock={0x28, 0x0, 0x1ffffd8ee, @reserved}, @hci={0x1f, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000e40)=ANY=[], &(0x7f0000a8a000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r16, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r12, 0x84, 0xe, &(0x7f0000000a80)={r13, 0x4, 0x200, 0x7f, 0x3ff, 0x7, 0x1, 0x1000, {0x0, @in6={{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, 0x9, 0x7, 0x4, 0xab8c, 0x4}}, &(0x7f0000000b40)=0xb0) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc01812f4, &(0x7f0000000200)) recvmsg(r11, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000dc0)=""/115, 0x73}, {&(0x7f0000000c80)=""/264, 0x108}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/123, 0x7b}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000340)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x90a008, &(0x7f00000016c0)=ANY=[@ANYBLOB='upperdir=./file0,default_permissions,seclabel,func=BPRM_CHECK,fscontext=unconfined_u,appraise_type=imasig,uid>', @ANYRESDEC=r7, @ANYBLOB="37a734ed03b49609a759d4e4bcb72c756964ff", @ANYRESDEC=r9, @ANYBLOB="2c61707072616973652c66736d616769633d3078303130303030303030303030303066662c7569643e25404663e8e2aee40325eb59f0206c3afd15834a9cd4defdcdfc8bdb1056119daad59b8f2f11ec96ad8b0115dc7645156671ceae58a99f7e7d1d1e8225d7c7103cb1e29f56f37936dbe3a7557fe9fdd23eebf03aca86c1a307a39e856ceaf40d977860655e9ec740006352c3dc8051d0b566ea507c75c8a8837b7f7b404a63b4ba25dd6fec0801ba32d60958c9891d9722501fd907b3", @ANYRESDEC=r19, @ANYBLOB="2c7375626a5f7479701f0000000000000000"]) 17:12:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000900000000000000000800819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001640)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x5580}}, 0x0) recvmmsg(r3, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)=""/99, 0x63}], 0x1, 0x0, 0xdb}}], 0x400000000000090, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) shutdown(r4, 0x1) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000040)={0xb7, @multicast2, 0x4e21, 0x0, 'ovf\x00', 0x10, 0x80, 0x2d}, 0x2c) 17:12:53 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x7, 0xfffffffffffffc26, 0x2, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c4de60ec"}, 0x0, 0x0, @userptr=0x752, 0xfffffd5c}) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x3}) recvmsg(r1, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/99, 0x63}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x6, 0x2}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0x0, 0x7, 0x8}, &(0x7f0000000140)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x7}}, 0x10) [ 422.972603] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:12:53 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)}], 0x4, 0x0, 0xffffffdf}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc77a4e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507d0419c09fc1fe6c"}, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000002c0)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="07d553ce817fd9f2228c661b11564c6c826ca157020040e4c188a76e7a87ab4622"], 0x90ad) 17:12:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 423.102722] audit: type=1400 audit(1575738773.806:303): avc: denied { write } for pid=13799 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 [ 423.181912] IPVS: set_ctl: invalid protocol: 183 224.0.0.2:20001 [ 423.205327] audit: type=1400 audit(1575738773.836:304): avc: denied { read } for pid=13799 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 17:12:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) [ 423.236818] device nr0 entered promiscuous mode 17:12:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:54 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000100000081"]) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2e) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) r5 = getuid() setreuid(r4, r5) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$sndtimer(&(0x7f0000000480)='/dev/snd/timer\x00', 0x0, 0xc0080) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x78) r10 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r8, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r8, r10, 0x0, 0x10000) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r11, 0x4b35, 0xfffffffc) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) r13 = getuid() lstat(&(0x7f00000004c0)='./control\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000280)='./control\x00', 0x0, r14) r15 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r15, 0xc01812f4, &(0x7f0000000200)) r16 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r16, 0xc01812f4, &(0x7f0000000200)) recvmsg(r16, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r17, &(0x7f00000015c0)={0x20000000}) r18 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mISDNtimer\x00', 0x8a40, 0x0) r19 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r19, 0xc01812f4, &(0x7f0000000200)) recvmsg(r19, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) r20 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r20, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r21}, 0x78) r22 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r20, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r20, r22, 0x0, 0x10000) fcntl$getownex(r0, 0x10, &(0x7f0000000780)={0x0, 0x0}) r24 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r24, 0xc01812f4, &(0x7f0000000200)) r25 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r25, 0xc01812f4, &(0x7f0000000200)) recvmsg(r25, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r24, 0x1, r26, &(0x7f00000015c0)={0x20000000}) getsockopt$inet6_IPV6_XFRM_POLICY(r26, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000008c0)=0xe8) r28 = getgid() r29 = getpgid(0xffffffffffffffff) r30 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r30, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r31) r32 = getuid() setreuid(r31, r32) getresgid(&(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0) r34 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)={&(0x7f00000009c0)='./file0\x00', 0x0, 0x8}, 0x10) r35 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/video2\x00', 0x2, 0x0) r36 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r36, 0xae41, 0x0) r37 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r37, 0xc01812f4, &(0x7f0000000200)) recvmsg(r37, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) r38 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r39 = ioctl$KVM_CREATE_VCPU(r38, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r39, 0x4400ae8f, &(0x7f0000000ac0)={"ce64f9fc9b0aa1fffba90e1ebb2548ac40e7e524a2de9affb6cd8369fd8433f8a104da06facaca733ac7851106a705063adf990aa98671dd593156a217158decf061de6f6731ab523365cf1ec37cafabfbcc17f4d9ada5a289d46cfd740970516fd4f6d62ab7b8083ad1f93612ed40a3ac1f6d769f4cd2b870ccb89252a0fd06b1ab927971bd5849c0f4455316e8bd8859d85a475d65e39d3685a130cfbdae32099640dada511546c85a94d7d68bd062f7067dc0843f3cdb5f5b6733e6eff499bb56405d175d8571a5a0b521d3ff4d8d1c1deed0c490022fbd129d96eda30c8913473e1fd509dc0baaf87af6b4d38a09439e8698d9c6d9fa38e0a6a65ca31993ae097862fba4aabe50196cef0f8eaaf593be599ca6919565356f62f0572c3c8c978e34b74a506a9ead4db46ae3c82bf78621939232bda7ca762715f6f549b97e0dc63ef68769a6cd8b558789a8ec83378a5f9d3f9d099b85320fd0c2d4f908537c184c0f0b98314d2f26178fab1a012d50d462a169298f0616331999ac5f456eb135a38be5f9bdec83d6a184061976470561bbe7817759a49ddb88e90a16378306023b954b72a5d7c5d43f40ea9af9b94139ff25ad259dcea2e2f7396bb114f66ff50793b4ea4c611ac7c4cb602a63d627779288512f4b7708b8acf1af9ccd365754e710d8bd3490ba0692de684beca75feb8cf16b7ce1c0899861114da2458469c67cf75b28daf7da2152527adeb0d870c7952bfeedf6bb7d5a2406f8a7463e11d0c7ea5e9fac30b4235c59a0897012d918563217a1c60cdb1dfcfea578201f4a5284bd8d1b2c468b9704ffc8a5a9ebbb699ef6858704d22149f0fbae7af3519c835c384a3f09962f402d8be71ca5483a613cefeda697e71bb28f1413de12a3322bdb5d6b349cc9cd9b441f40b265804e4a404c1156d6161dd978b99a940567a9e3d123182dca8d096cf94c66bac132501ef61443f1142eab31d2b4495beb698e370f29dd662ed8a09b190a27ac54c116dd6ca7e087a3bd2dd259166b5d301581baf10345a9790b6b4e0bc2da6d25260fb19c4576bb5a6b155b37629c167ef63e9fc5674381c3aa1b1d6f389c1d043c8ae787013798033a52415539416e776c2eb124ad88845f9b5b337bf8054634635cffa18b7a60cf6a4352b94afdad13845917372c3bf4ac71045513b1d22f8263bdd1ea5d8467156527323e60a2e13958f434cb999b2f4655eb8e38ff8959708710f62002cae0a43e05923084b723a93dd66f19873f57454435cf1d73dd3fd598c4c5be0d1a13fe13f1e3923a69f93072478d41c7b6b824626ba56320a51dcc90c646236e2db3b3fc9cda2ecd456e0d3e4b9c2d02ac743f4454c2c17dce4b893c3ef1d879536c6c440bb935c5696d1b05f6b96851a09d732693cf57602fe2a535773da1737b9f4d16e6f33716d911f12b"}) r40 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/adsp1\x00', 0x0, 0x0) r41 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r41, 0x4b35, 0xfffffffc) r42 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r42, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r43}, 0x78) r44 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r42, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r42, r44, 0x0, 0x10000) r45 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r45, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r46}, 0x78) r47 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r45, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r45, r47, 0x0, 0x10000) r48 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r48, 0x4b35, 0xfffffffc) r49 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r49, 0xae41, 0x0) r50 = socket$bt_rfcomm(0x1f, 0x3, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000001100)={0x0, 0x0}) r52 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r52, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r53) r54 = getuid() setreuid(r53, r54) r55 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r55, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r55, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) shutdown(r55, 0x1) r56 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x240040, 0x0) pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r58 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r59 = ioctl$KVM_CREATE_VCPU(r58, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r59, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) r60 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r60, 0xc01812f4, &(0x7f0000000200)) recvmsg(r60, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) r61 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r61, 0xc01812f4, &(0x7f0000000200)) r62 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r62, 0xc01812f4, &(0x7f0000000200)) recvmsg(r62, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r61, 0x1, r63, &(0x7f00000015c0)={0x20000000}) pipe2$9p(&(0x7f00000011c0)={0xffffffffffffffff}, 0x100400) r65 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r65, 0xc01812f4, &(0x7f0000000200)) r66 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r66, 0xc01812f4, &(0x7f0000000200)) recvmsg(r66, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r65, 0x1, r67, &(0x7f00000015c0)={0x20000000}) r68 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r68, 0xae41, 0x0) r69 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001200)='/dev/vcsu\x00', 0x1, 0x0) r70 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001240)='/dev/audio1\x00', 0x40000, 0x0) r71 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r71, 0x4b35, 0xfffffffc) ioctl$TIOCGPGRP(r71, 0x540f, &(0x7f0000001280)=0x0) r73 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r73, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r74) r75 = getuid() setreuid(r74, r75) r76 = getegid() r77 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r77, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r77, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) shutdown(r77, 0x1) r78 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r78, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDRT(r78, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e21, @broadcast}, @vsock={0x28, 0x0, 0x1ffffd8ee, @reserved}, @hci={0x1f, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5}) r79 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r80 = ioctl$KVM_CREATE_VCPU(r79, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r80, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) sendmmsg$unix(r1, &(0x7f0000001400)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)="8bc03ad597b04697bc470e662a822c04dde5f6c4107636b75b7b46dcfeec1fe78bea6bf3541ccd1b1e3b22637742d92023d93d11b60800b0a5a284aab1695022d372539189432d16bf02dfe2e107962eb3e53730557385d603355b92ed90830c350a5b0edb2e679194688ce7adb0caa4ea32c4135b23c3c509adb489207e4da5f82e8dfcf51b84927b328d83bbb827a7607ece0a3f8a07ce40589daa72c4cd788134e364549233f9af1bca620aa4750cc02b35c22d7ac0dbebf14051c022473348a8b0b902360266e205742b", 0xcc}, {&(0x7f0000000100)="c06a29b7a218edb070384facaece36775d5802e58238a090406835c28161a2bb4b6100675b1510917523e1f8c153302a05de925fafb084db599e88975d07a2acf3b7dcc7f83b782f3883e52a5a58c5046167687b849be19a7c3c2e15a94d44cdda7b96d2be4b898a9e3f56dfb7f8434c6091faf8f10774a335", 0x79}, {&(0x7f00000002c0)="bbdfe64718a52641de37d1c2b0ecc0ab8b31c354ec5326f31422c7545a76109b3e7b5a65825a280d3734e5afc8adc96e5016123cf3c775891fb82518dce648b025fc87ac4b795439827e7b6dbec177e3fd8dc1edf252ac65509addb831051997fd8cee9b77a72b45b3a5936e6bf11fed6e1911485f9e5972bbca9e35150c7494f791adb9acf2fe26247c2ea1db50e27c1faa2e", 0x93}], 0x3, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r2, r5, r6}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r7, r10]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x28, 0x1, 0x1, [r15, r0, r0, r18, r19, r22]}}], 0x88, 0x10000}, {&(0x7f0000000640)=@file={0xc5193c3643350f58, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000006c0)="3c4028d3829ed42e72b64f9c7b35ce123f3d9c56d84b586a2e2100dc3f8cc3a6a92eb2e8aca9e58a4bde82fc4a5379b428ceea9d97a19f404f28564b37f61c5af7d8148e1a92d31b2dd0ba14c050a4e680ef608dc2cbc213f1dbbe3451a656cc1018dee4", 0x64}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r23, r27, r28}}}, @cred={{0x1c, 0x1, 0x2, {r29, r31, r33}}}, @rights={{0x34, 0x1, 0x1, [r34, r0, r0, 0xffffffffffffffff, r0, r35, r36, r37, r0]}}], 0x78, 0x4000}, {&(0x7f0000000b00)=@file={0x3, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000b80)="896602a88a3f0f1128549f309a68be4e70ef34911a94", 0x16}, {&(0x7f0000000bc0)="355a7aef359232926204c1d33ee18bfb9d41b9e31c0c1bdff8d7d55ccb53eed2f141f6f2cb44b70b9fe5e888dcd577314d2e87a24fe9c9609ec8910cd614fd48c1f612c370b82a6c74b0dafc5d4f76b7eb672c4d887628e430b544e82f9b43f42971ac10b74fc4081e30f1bded2d70a274efe2539d61f42094e06c00835102033bcfbb899baf9e44b6272d2b9cb0a33e6f27ac3dcb449c26fd3d751d0f607bfba10a947ea7f721808dc79f0879c3598b250ea5e142b4ccb843b47370eecc69bae993380424ca54921787f01094e1e2f2d2d75f1d47649c26efbb30b4982d99", 0xdf}, {&(0x7f0000000cc0)="ba61b10e9b55a8d0aebdf018db7141fcba91b56361c6a8d3f75abd72c2753bf6be30c4e89ce136580c38854405d3fcbc5e0fba8911c54a372a6f5895a1c63e8dbbc7dbdae0699b2643422f598b9a7e6d0d81c9e6945d30233d49d598f920115a52e76404096ab290d2ae9e20044826c5374453a5971f5718b4a8fb", 0x7b}, {&(0x7f0000000d40)="2f6a98f0d2892e45092f6966ffe514245788102dfb03e35ddfdf1bed2de678ad5e04048b0621b0b26e55ac16f638314723e39f30f5fefbb233cf844d50fb294ec867e59983f6d927dd407c4c04c0ebc946d8c34be544e40eed957aa80f4d00aa5f7276e0b2af6ea99c8869afaadb8aab3be60f3ffe2536d9f9c0d847f6e570e02f4de0e180a1d634207c4fa956bbacd51ad7e5625fcfbaa3da9e0dd19e9cb3be39b059d2f15538f950d9241f782b2fd849db4fccb8cc1ec2d3358d180ebd86d4aedac606142cb01094ac0f069f14", 0xce}, {&(0x7f0000000e40)="8515389f48563da76a02715e49e0f257b58dc3d4e06ffa60d8ad7d59e6c04ebf41f5bba5b375f89e44ab664c06ff3aa3a0b46dd68537fa2319ebf28a86a2a410e84eb5fdee69271dde8b35baeeb805654e7adc72b20f8243c768f8c2a418c6dbe5a75475cf824e7aff62822af481f23e35a610e81f6b6f620dcce19dc6b315b6f5b46e10acdb09dc2229ace748b4143bf2e97a9baa4c023ede5268d680ef749941c51441a6d0", 0xa6}, {&(0x7f0000000f00)="88ed01acdec57bf6", 0x8}, {&(0x7f0000000f40)="9c6aec0027ec75f79923df07db8bac261dc7d47295995e0ad1b64ee0ae558c598150476b7aa68694f827d8ccde929b86bd0d7cadc44a12ebe1e5186b82df73960c5e3549c34621faf0b058ac0df80d6bb052a0cbc561a834381f9f9e60e6c6463a9dfe0e5628f28a3aba22ee1246432636a718ce58336aef1b5cfc457d71baa34195ac51aa7c31ab52dafcf601b06ff6e84b82314d8944872b4ce132cbaf298fdd58054e6021bb8f4588367373cf44c306103fa581113d90bcc529202ecc0c597e3934df4cad00a32f3da7b7767afab5803fc38817b6c789a495e2804fe687f83ef1e43946892891fb6c0b9d4c20e4", 0xef}], 0x7, &(0x7f00000012c0)=[@rights={{0x24, 0x1, 0x1, [r39, r40, r41, r0, r42]}}, @rights={{0x28, 0x1, 0x1, [r47, r48, r49, r0, r50, r0]}}, @cred={{0x1c, 0x1, 0x2, {r51, r53, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r55, r0, r56, r57, r0, r59, r60, r61, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r64, r67, r68, r69, r70, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r72, r75, r76}}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r77, r0, r78, r80, r0]}}], 0x138, 0x70800}], 0x3, 0x20000000) [ 423.568743] usb usb2: usbfs: process 13825 (syz-executor.2) did not claim interface 0 before use 17:12:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2020, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) recvmsg(r3, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000015c0)={0x20000000}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f00000000c0)=0x1b) 17:12:54 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000ec0)=[{&(0x7f0000000f40)="c2c1e34dbdf707df0794a6d5978634ea748d3fa9df34eaf34b12d44c490b88ef914bc7494f51b254913695df134ea7d834892a4e3a4230b2be971feae250f4e1bc3484edfdd1d17f8a8aba4fb4d9104da620bfc8e0cb20f6f7d0a0aa0f3af031d1abcb52218e54fc8484a3af9d21028c2f83d3afce54d236a616defbd5c50a4f59302342c36ea7ebd7f6285374d2686c851e1de4789bc7a014951cee8d38bd3fa78172bba8716840aa85a14655f51f2e526a202077ad5f3d192c2455770242", 0xbf}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0xfffffffc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140)=0xf8ef, r4, &(0x7f0000000180)=0x352, 0x3d31930d, 0x2) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r5, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f0000000080)=""/72, 0x8}], 0x1, 0x0) 17:12:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101b00, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x200, 0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020401edaa030270fff8", 0x16}], 0x0, 0x0) [ 423.874674] device nr0 entered promiscuous mode 17:12:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba05"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 424.008398] ptrace attach of "/root/syz-executor.1"[13004] was attempted by "  àÿ 0 p €  ÿ /dev/null ðÿ ÿÿÿÿ   ïø R @ = 17:12:54 executing program 2: syz_open_dev$dmmidi(0x0, 0x6, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r3, r2) r4 = dup2(r1, r2) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r4, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fb0\x00', 0x1, 0x0) r6 = dup2(r0, r5) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r6, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) dup2(r7, r7) getsockopt$inet_dccp_int(r7, 0x21, 0x4, &(0x7f00000002c0), 0x0) socket(0x3, 0x80002, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r8 = getpid() r9 = getpid() rt_tgsigqueueinfo(r9, r8, 0x16, &(0x7f0000000100)) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x388, 0x0) [ 424.170458] FAT-fs (loop5): bogus number of directory entries (515) [ 424.239104] FAT-fs (loop5): Can't find a valid FAT filesystem 17:12:55 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 424.282267] protocol 88fb is buggy, dev hsr_slave_0 [ 424.289150] protocol 88fb is buggy, dev hsr_slave_1 [ 424.441172] ptrace attach of "/root/syz-executor.1"[13004] was attempted by "  àÿ 0 p €  ÿ /dev/null ðÿ ÿÿÿÿ   ïø R @ = [ 424.530218] protocol 88fb is buggy, dev hsr_slave_0 [ 424.535411] protocol 88fb is buggy, dev hsr_slave_1 17:12:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba05"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:55 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) init_module(&(0x7f0000000080)='uid', 0x3, &(0x7f00000000c0)='iso9660\x00') 17:12:55 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x5, 0x1, 0x1, 0x2}) socket$packet(0x11, 0x2, 0x300) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, &(0x7f0000000000)=""/39) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) 17:12:55 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xc0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x78) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r0, r2, 0x0, 0x10000) setsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000180)="d86adacbfbe16308df8eb4e2cef884cf50cb3350ad59dbd790b5a87904a5379eb7e6a757f4c0fd3af537d06f5efe7af49bdb10f92b7cb5d5ae2cab2e1e4797afa04c1852cb93ea6747225945e5a3a28fd87bd76614fb8a4293d1ff9356aa8a95544ca59b46dc7c", 0x67) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/50) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000300)={0x5, 0x0, 0x3, 0x9, 'syz0\x00', 0x6}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r4 = socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="010000e96ec19852e18d6ce77f4c00f5718f85aa2a9b16fb3efc96a0b5cb6d65fc615226a0a4167c94b8d093a05b4fd5e53db635f2cb7b202ab6f818e8152e5cc4a3719ee0de385561a9be4201f39b289c504a6daa812048958c6fd1214b3ed2e1db827107fc472ec2dd597c4d"], &(0x7f000095dffc)=0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 424.811242] bond0: Releasing backup interface bond_slave_1 [ 424.822853] ISOFS: Unable to identify CD-ROM format. 17:12:55 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r6}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r6, 0x4}, &(0x7f0000000080)=0x8) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) r8 = open(&(0x7f0000000400)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) recvmsg(r8, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000015c0)={0x20000000}) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x48, r10, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1f}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffae}]}, 0x48}}, 0x4000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r11}}]}}) [ 424.859008] audit: type=1804 audit(1575738775.556:305): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/29/file0" dev="sda1" ino=17333 res=1 [ 425.005652] ISOFS: Unable to identify CD-ROM format. 17:12:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0xa, &(0x7f0000000240)={[{@uni_xlateno='uni_xlate=0'}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_lower='shortname=lower'}], [{@hash='hash'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast1, @in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 425.085087] 9p: Unknown uid 00000000004294967295 17:12:55 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:55 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r6}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r6, 0x4}, &(0x7f0000000080)=0x8) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) r8 = open(&(0x7f0000000400)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) recvmsg(r8, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000015c0)={0x20000000}) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x48, r10, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1f}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffae}]}, 0x48}}, 0x4000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r11}}]}}) [ 425.246704] FAT-fs (loop5): Unrecognized mount option "hash" or missing value [ 425.401155] 9p: Unknown uid 00000000004294967295 17:12:56 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r6}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r6, 0x4}, &(0x7f0000000080)=0x8) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) r8 = open(&(0x7f0000000400)='./file0\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc01812f4, &(0x7f0000000200)) recvmsg(r8, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000015c0)={0x20000000}) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x48, r10, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1f}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffae}]}, 0x48}}, 0x4000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r11}}]}}) [ 425.479147] protocol 88fb is buggy, dev hsr_slave_0 [ 425.484349] protocol 88fb is buggy, dev hsr_slave_1 [ 425.545092] 9p: Unknown uid 00000000004294967295 17:12:56 executing program 2: mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@rc, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000240)="4723d44ac307a213e9360d723ef0c8a834f6e26ca5889c82fea8f23bc9006fe41f17c11a87a3b0f7f8c56ffd27a3d8fcffd441316b9b4681d7fd4877c09f689343837ff88692ae0be54aa0fb1c20b18d85db67622741189ac74c0d48655ccd0a648b53ce13dfa2198f2b042a9e3d0e9cfe4e74dd0e24ac89fd3d82aa0c6c230287bf92385f5d1264dbd91a74b6db3a3268084a43ff93203e6844329015f23df19345766cd85263c39186d21e60aea99d8bc16f92b48cbb32", 0xb8}, {&(0x7f0000000300)="c7e9a655dffe5a47c2483f2997495367c1510f62548ad18a7652c994a3d7ff072037082b5c6f6c073ced8d318be0c01decb570deb28afc174c31ce09d906f07a3d418dde8648802029baacb177d13bf18633d93834b896311c4dd0f8f7398766edf0c3dd174c10946f1e105982a1e2f68fcef24f192be29fd1a574733cfa2330fd", 0x1b}, {&(0x7f00000003c0)="5d5bc626da1b442d279dc28b880c3f169cf53c7a002552178e2ee6bad921a868fd80bd97143f5b30b1ed4b82130c11d58df51af8d8cc6d1bedc228f4c65522436e613a8bb6adb67a7fcc7e8ccea5440b723fa7e06b6f847d4c89839c34cc0dc3ef61238b093b10d8a22128cc08f94a1d3eb3beda582757f4dda16cea7a5a96e68ded01e2496a657de32de9d9cf7aca690d8692ce6daff939fcda2b9a2725826a1e10bdd3bed82968cb57547fc1933c626a76a1b4fd8fbacfd71d2cdd3d1ed09b8555b18a8543853ad252607c3ca7302a483d79a946ae8d4ffc6d41a91c3d61c77812af4d89", 0xe5}, {&(0x7f0000000000)="acba8af32913afc20d78769a31955658a173cf92e1dc00b0c998316a28d191ac2cde79143e7543c380a48aed05f2320d2bbaeb3ba08f90f75ec0ca863d08c76501c53c58f9c9ea519cf4632a3d9ddbdd2e59e0864b147cf5f4a4b635807b7d6413b332251b", 0x65}, {&(0x7f0000000180)="4343a26bf752f438527c14f54c6e0ed84ef6bfa067fd1e906396297eb8547e", 0x1f}], 0x5) fstat(0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x800, 0x0, 0x633}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) io_setup(0x40000100000001, &(0x7f00000001c0)) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/bsg\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000580)) tkill(r1, 0x2e) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) tkill(r1, 0x12) stat(&(0x7f0000000700)='./file1\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) r6 = getuid() setreuid(r5, r6) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000007c0)=0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) r10 = getuid() setreuid(r9, r10) syz_mount_image$gfs2(&(0x7f00000005c0)='gfs2\x00', &(0x7f0000000600)='./file0\x00', 0x41a3, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000640)="15d6f5a051035fb5d3275a00d251f867d01089e495b4d02df6afed0d8d50f37d615df04a3eebc86e2646c4443f12feb8ed38d32865e2fd1028a3843cf185d7259950d402fb2ca0b5524a9d269f52c51e3cabc1ab2b323f0c317a7fb387bf", 0x5e, 0x2}], 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="6c6f636b70726f746f3d646c6d2c6e6f61636c2c71756f74613d6f6e2c6c6f63616c666c6f636b732c6572726f72733d77697468647261772c636f6d6d69743d3078303030303030303030303030303230302c7063723d30303030303030303030303030303030303033382c61707072616973655f747970653d696d617369672c666f776e65723d25ffd83a1252341125471aed7ff8209c5638be3e7be73b4dae78d1a0032c1ed333aa1e8a34e0bf8a30e2874eae39d2251909e940b02e4a0a2272c07a41c4c11f711be9f1ed68906680b088c29d65a0cd92d68f38a45419488f94858548a3bf67ba978b8f37899b8abacb7cebc2b4094c8c2f60eda3119b59cca6708f2608915c852bc0c02a1888eb05c3b7", @ANYRESDEC=r3, @ANYBLOB=',pcr=00000000000000000056,fowner=', @ANYRESDEC=r6, @ANYBLOB=',uid>', @ANYRESDEC=r7, @ANYBLOB="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", @ANYRESDEC=r10, @ANYBLOB=',\x00']) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x101}) [ 425.743575] IPVS: ftp: loaded support on port[0] = 21 17:12:56 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 426.027286] FAT-fs (loop5): Unrecognized mount option "hash" or missing value 17:12:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba05"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 426.694993] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:12:57 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) link(0x0, 0x0) lseek(r0, 0x0, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) pipe2(0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) io_setup(0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0xfffffffc) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000000)=0x498) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) lstat(0x0, &(0x7f0000000040)) rt_sigprocmask(0x101, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x60) ftruncate(r5, 0x7fff) sendfile(r4, r5, 0x0, 0x8000dffffffe) 17:12:57 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436a"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc01812f4, &(0x7f0000001640)={0x0, r2, 0x0, 0x0, 0x0, 0x7}) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc01812f4, &(0x7f0000000200)) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc01812f4, &(0x7f0000000200)) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc01812f4, &(0x7f0000000200)) recvmsg(r5, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f00000015c0)={0x20000000}) recvmsg(r4, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001780)=""/202}, {&(0x7f00000003c0)=""/5}, {0xfffffffffffffffd}, {&(0x7f0000001880)=""/68}, {&(0x7f0000001900)=""/218}, {&(0x7f0000001a00)=""/129}, {&(0x7f0000001ac0)=""/120}, {&(0x7f0000001b40)=""/186}, {&(0x7f0000001c00)=""/198}, {&(0x7f0000001d00)=""/59}], 0x885d99d, &(0x7f0000001700)=""/104, 0xfffffffffffffc8d}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f00000015c0)={0x20000000}) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f00000001c0)={0x1, 0x0, {0xffff, 0x7, 0x1003, 0x7, 0x12e11ae1ad3eaabf, 0x8, 0x3}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x100010, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) r9 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x49d, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0xb, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x800000100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="850000001300000003880100000000009500000000000900182c0000", @ANYRES32=r9, @ANYBLOB="00c11c8c00000002000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x78) r11 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r9, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r9, r11, 0x0, 0x10000) fstat(r11, &(0x7f0000000300)) preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x6) mount$fuse(0x0, 0x0, &(0x7f0000000140)='fuse\x00', 0x8888, &(0x7f0000001400)=ANY=[@ANYRESHEX]) 17:12:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) link(0x0, 0x0) lseek(r0, 0x0, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) pipe2(0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) io_setup(0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0xfffffffc) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000000)=0x498) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) lstat(0x0, &(0x7f0000000040)) rt_sigprocmask(0x101, 0x0, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x60) ftruncate(r5, 0x7fff) sendfile(r4, r5, 0x0, 0x8000dffffffe) 17:12:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436a"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:58 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) semget$private(0x0, 0x0, 0x157) r1 = semget$private(0x0, 0x1, 0xa3d0945744db8bf1) semctl$GETVAL(r1, 0x0, 0xc, &(0x7f0000000440)=""/140) semget$private(0x0, 0x0, 0xa3d0945744db8bf1) mkdir(&(0x7f0000000000)='./file0\x00', 0x1f2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_smack_transmute(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x4) mount(&(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x80014, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x101000000000001, 0x4) open(&(0x7f0000103ff8)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0\x00') sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 17:12:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436a"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 427.841442] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:12:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f000000c000/0x2000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_UNLOCK(r1, 0xc) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r2, 0x0, 0x40d09) 17:12:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) semget(0x0, 0x0, 0x2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) ioctl$KDDELIO(r3, 0x4b35, 0xfffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) 17:12:58 executing program 2: socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x78) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r3, r5, 0x0, 0x10000) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) socket(0x400000000010, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffec, 0x40, 0x0, 0x295) pipe2(&(0x7f0000000300), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r6, 0x4b35, 0xfffffffc) read$rfkill(r6, &(0x7f0000000000), 0x8) 17:12:58 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 427.924980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 17:12:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddcc"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) signalfd(r0, &(0x7f0000000200), 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x0, 0x10000) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x6611, 0x0) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000280)=0x7f, &(0x7f00000002c0)=0x4) clock_adjtime(0x2, &(0x7f0000000300)={0x1, 0x9, 0x40d1, 0x80000000000000, 0x5, 0x8, 0x1ff, 0x10000, 0x8bca, 0x5, 0x81, 0x8, 0x2, 0x9, 0x9, 0x2, 0xd885, 0x100000001, 0x397f, 0x6, 0x0, 0x3f, 0x81, 0x401, 0xb1, 0xffc5}) fcntl$setstatus(r0, 0x4, 0x44400) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="7dcdc62b4d2307cd20c2db54ec4e26d02d"]) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x4300000000000000, 0x0) [ 428.081698] audit: type=1804 audit(1575738778.776:306): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/31/bus" dev="sda1" ino=17317 res=1 [ 428.207316] audit: type=1804 audit(1575738778.906:307): pid=13995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir128329418/syzkaller.SF7awJ/8/file0" dev="sda1" ino=17345 res=1 17:12:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000100)=0x2, 0x4) write(r0, &(0x7f0000000000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$setopts(0xc60c, r2, 0x80000001, 0xb1) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000000c0)={0x6, 0xb4}) 17:12:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2a) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x4) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) write$binfmt_misc(r0, &(0x7f0000000200)={'syz1', "6083903c83e0e08b8ea23f9e853b145cf542c6f7373d866ce088f6b6b0f75d160224b20d00d42eac8206773bac55a45b0015bbc021071f63c6b9ef55a66e045acb0a1ff3126b1bbd6dc572b72247262ca8336439cf5aee7dcf90440580726904261e8a1be8dc79ea2dae13ce9a5b180069fead610f1649e6029407cb917c53b00a0d285b4df62ac33cf15270cd32509f6691b25487d7f683568d640f97338ee44f61ccfdfabfacb3ebebb567fccf33c2cdd3747fa1f89e02b16f02a051b4eb2e532f2d30dd6d4d6620e35fc032d5fdba19332a42b56eb6f6776bfec7f46335cffab94ac5fb61fea833ce63cb31229d6d7aa4d6140003"}, 0xfa) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xa}}, 0x8fe7, &(0x7f0000000640), 0x11d, &(0x7f0000000180)=[{0x12, 0x84, 0x6}], 0x20}, 0x0) [ 428.273862] overlayfs: unrecognized mount option "}ÍÆ+M#Í ÂÛTìN&Ð-" or missing value 17:12:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddcc"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 428.390814] overlayfs: unrecognized mount option "}ÍÆ+M#Í ÂÛTìN&Ð-" or missing value [ 428.407439] audit: type=1804 audit(1575738778.936:308): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702692695/syzkaller.vOL5WH/31/bus" dev="sda1" ino=17317 res=1 [ 428.439123] protocol 88fb is buggy, dev hsr_slave_0 [ 428.444267] protocol 88fb is buggy, dev hsr_slave_1 17:12:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x7f, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) 17:12:59 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:12:59 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffc) r1 = accept$inet6(r0, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @remote}}, [0xfffffffffffff3aa, 0x4, 0xfffffffffffffffb, 0x1, 0x2, 0x7, 0x80000000, 0x80000001, 0xd05, 0x1ff, 0x9, 0x7, 0x6719, 0x1, 0x6]}, &(0x7f0000000500)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000540)={0xff, 0xae3b, 0xb, 0x3f2, 0x800000, 0x0, 0x3, 0x2, r2}, 0x20) r3 = socket$l2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080)) connect$l2tp(r3, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x2, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e) 17:12:59 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) select(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x9bdb, 0xffff, 0x6}, 0x0, &(0x7f00000001c0)) tkill(0x0, 0x3b) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, @tcp={{0x0, 0x0, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18, 0xffffffa7}}], 0x40000000000037b, 0xc000) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000), 0x1c) socket$inet_sctp(0x2, 0x0, 0x84) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x3ff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:12:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddcc"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:12:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r1, r3, 0x0, 0x10000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCADDRT(r4, 0x890c, &(0x7f00000003c0)={0x0, @in={0x2, 0x4e21, @broadcast}, @vsock={0x28, 0x0, 0x1ffffd8ee, @reserved}, @hci={0x1f, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x5}) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x13}, @generic={0x3, 0x8, 0x8, 0x1}, @exit, @map_val={0x18, 0xc, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x78) r7 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r5, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r5, r7, 0x0, 0x10000) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/autofs\x00', 0x2c1080, 0x0) r9 = fcntl$dupfd(r7, 0x406, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r10, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x8) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="2321212e0f2bf8b05fb751f069430335c07a356443294b47ad8064f8c262d1e759f331af979a0f2cc1765e29f760ff66e91a0022549050d0f9f5082a781aea2e161e20b0899088465254eb8fe059ddd3cec25c0a2448bebb090000006d29b9bce9a700be50fe272a62c4ff00edca07e5ed07e141f3620eddd744adfc"], 0x7c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @timestamp], 0x2) r11 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc01812f4, &(0x7f0000000200)) recvmsg(r11, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000280)=""/49, 0x31}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xffffffffffffff94}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) write$P9_RGETLOCK(r9, &(0x7f0000000240)={0x1f, 0x37, 0x1, {0x1, 0xe9a0, 0x6, r12, 0x1, '-'}}, 0x1f) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000100)={0x2, [0x7c, 0x80]}, &(0x7f0000000140)=0x8) 17:12:59 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000580)='./file0\x00', 0x38, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = gettid() clone(0x100000100001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, r3) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x9, 0x2bd45753d96fb4aa, 0x4, 0x210800, {}, {0x2, 0x0, 0x2, 0x1f, 0x4, 0x1, "6323b9f7"}, 0x4, 0x1, @fd=r2, 0x4}) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/247, 0xf7}], 0x4f, 0x0) kcmp(r6, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 17:12:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") close(r0) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth0_to_hsr\x00', 0x1c0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000100)=0x32, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020008001, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0xd) shutdown(r3, 0x1) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, 0xfffffffffffffe44) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0xc0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000000040), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0x8000000000000000}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) [ 428.885809] audit: type=1804 audit(1575738779.586:309): pid=14039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir128329418/syzkaller.SF7awJ/9/file0" dev="sda1" ino=17346 res=1 17:12:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 428.977579] audit: type=1804 audit(1575738779.676:310): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir128329418/syzkaller.SF7awJ/9/file0" dev="sda1" ino=17346 res=1 17:12:59 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) select(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x9bdb, 0xffff, 0x6}, 0x0, &(0x7f00000001c0)) tkill(0x0, 0x3b) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, @tcp={{0x0, 0x0, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18, 0xffffffa7}}], 0x40000000000037b, 0xc000) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000), 0x1c) socket$inet_sctp(0x2, 0x0, 0x84) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc01812f4, &(0x7f0000000200)) recvmsg(r2, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x3ff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 17:12:59 executing program 3: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000380)='./file1\x00', 0x0, 0x344, 0x0, 0x0, &(0x7f0000000240)={[{@lockproto_nolock='nolock\x00\x01\x00'}]}) 17:13:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000180)=0x200, 0x4) read$rfkill(r0, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000000), 0xff2d) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) dup(0xffffffffffffffff) 17:13:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:00 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:13:00 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x402) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x0, 0x6, 0xbb, &(0x7f0000000040)="33cbe37cfd497e9dd56125926373a411c403ab8a50a31134319c494a811d1e1e825f1850653f4c3fed7e4eb04043729979e12b7fa012aa4f81ce87bb955f547c738d11c7632907b0487ba2e270e46526b5a6d34219df44b5ae38fcf77341b27e2b5727a40fc5fbbe03d317df2cd031683dbe0daec1bded6b5ac515add8f086afef15fb7e2461e13a12035251b2ddfd5bbeec25017cc58547b49e2e0b5d9283a245eb003ee65784c5f8466a9bfebaa1537346d387dd6c2e8adba694"}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x9000112}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9f, @rand_addr="4cc8063e821babe19585b181f5d2f40c", 0xc5f}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9db7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc0a}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xbb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd37e}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ubi_ctrl\x00', 0x8000, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcs\x00', 0x300, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000600)={[{0x2, 0x8, 0x0, 0xb7, 0x2, 0x81, 0x5, 0x7, 0x81, 0x20, 0x8, 0x5f, 0xd97e}, {0x771, 0x2, 0x0, 0x4, 0x5, 0x1, 0x3f, 0x45, 0x7, 0x5, 0x3, 0x8, 0x5}, {0x10001, 0x8001, 0x6, 0x80, 0x3, 0x5, 0x1, 0x0, 0x7, 0x8, 0x9, 0x7f, 0x68}], 0x10000}) r6 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f00000006c0)={0x8, 'bond_slave_1\x00', {'ip6gre0\x00'}, 0x1}) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000700)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ftruncate(r7, 0x40) r8 = syz_open_dev$mouse(&(0x7f0000000740)='/dev/input/mouse#\x00', 0x1000000000000000, 0x3) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000780)={0x0, 0x7fffffff}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e20, 0xff, @ipv4={[], [], @local}, 0x8}}, 0x20, 0xb7}, &(0x7f00000008c0)=0x90) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000900)={r9, 0x6, 0x5, 0x1ff, 0x9, 0x6, 0xf26d, 0x7, {r10, @in={{0x2, 0x4e21, @loopback}}, 0x3ff, 0x7, 0x8, 0x4, 0x8}}, &(0x7f00000009c0)=0xb0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000a00)) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000ac0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r12, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r11, 0x61000) r13 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/bsg\x00', 0x202040, 0x0) ioctl$UI_DEV_CREATE(r13, 0x5501) r14 = shmget(0x3, 0x4000, 0xa4000400, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r14, 0x3, &(0x7f0000000c00)=""/185) 17:13:00 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffc) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, r0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000001180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x14, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}}, 0x14}, 0x1, 0xfdffffff00000000}, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f00000001c0)={0xd, "2b2ae2c415308b656eaee6aa3e22eb61bd793c2d0b141cc103866bb63a3a9434d0871b3a1be6b09af45f7e977dd45ab24a7f00da1efed5c613cbc5e89844d08b", {0x0, 0x8}}) 17:13:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:00 executing program 5: sched_setattr(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000f80)=ANY=[], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) semget(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000980)={0x0, &(0x7f0000000940)}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key$user(0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000240)) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffd8ef, @reserved}, 0xffffffffffffffdb) open(0x0, 0x20141042, 0x0) 17:13:00 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x888d, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x420, 0x48) write$P9_RREADDIR(r1, &(0x7f0000000180)={0xc5, 0x29, 0x2, {0xffffffff, [{{0x5612193a4f1eabe9, 0x1, 0x7}, 0xe84, 0x7, 0x7, './file0'}, {{0xa4, 0x3, 0x1}, 0x8, 0x1, 0x7, './file0'}, {{0x60, 0x0, 0x1}, 0x4, 0x3, 0x7, './file0'}, {{0x8, 0x2, 0x5}, 0x80000001, 0x6, 0x7, './file0'}, {{0xb6, 0x4, 0x8}, 0x5, 0x9, 0x7, './file0'}, {{0x40, 0x1}, 0x0, 0x2e, 0x7, './file0'}]}}, 0xc5) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x400280) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000100)=0x3f) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 17:13:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents64(r0, &(0x7f0000000500)=""/175, 0x5d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000080)=""/124, 0x7c) 17:13:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000180)=0x200, 0x4) read$rfkill(r0, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000000), 0xff2d) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) dup(0xffffffffffffffff) 17:13:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e94"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r6, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc01812f4, &(0x7f0000000200)) recvmsg(r7, &(0x7f0000001580)={&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/127, 0x7f}, {&(0x7f0000000980)=""/43, 0x2b}, {&(0x7f0000000f40)=""/137, 0x89}, {&(0x7f0000001000)=""/219, 0xdb}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/239, 0xef}], 0xa, &(0x7f0000001500)=""/115, 0x73}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000001c0)=0x8) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000015c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000500000060040000d0000000d0000000a0010000a001000008030000c8030000c8030000c8030000c8030000c8030000050000006485573d9fe404ca8f59a8f7aeab6cb9095893e06aa418e4192c09401916cb3b698d94719f83bb41ce86cfe70d", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/80], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d00000000000000000000000000000000000000000000000000038004d41535155455241444500000000000000000000000000000000000000000100000008000000ac1414aaac1414130067050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d0000000000000000000000000000000000000000000000000003800444e415400000000000000000000000000000000000000000000000000000100000008000000e00000020000000000644e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008016801000000000000000000000000000000000000000000000000280074746c0000000000000000000000000000000000000000000000000000000005000000000000480068656c706572000000000000000000000000000000000000000000000000000000007369702d32303030300000000000000000000000000000000000000000000000000000006000434c5553544552495000000000000000000000000000000000000000000001000000ffffffffffffe59f070026002000320008000b0019003f0036001300230033000e0031003f001d001000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030400800001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4c0) sendfile(r3, r4, 0x0, 0x8000fffffffa) 17:13:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e94"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:01 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x8, '\x00', {'hwsim0\x00'}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r6}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)={r6, 0xcb6}, &(0x7f0000000080)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0xd6, @mcast1}}, 0x0, 0x0, 0x55500}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000340)={'ip6tnl0\x00', 0x4003}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17:13:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e94"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c65300afb371bfa31fd771693a438bb890f5abb69a0a774c424d4bf553c745e03966b65ce0cfbc33b86364e983acc6cf089065a1397cf2319610e6fdb42e035c57f4db7f5799e515f62f9a74bf91a90fe682d6b9b9b7397d3d8a2a4ed3fccc4"], 0x5a) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x5, 0x1712ce0d7febec53) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x0, 0xff00}, {0x800, 0x80}]}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x8, 0x0}}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @rand_addr=0xbec}, 0x4fdc5175c7ad6396, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='bond0\x00', 0x5, 0x4, 0x4}) memfd_create(&(0x7f0000000000)='@#@]em1posix_acl_access\x00', 0x2) 17:13:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f92"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:01 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe39b5c1215b31155, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x100009, 0x3}, 0x0, 0x0, &(0x7f0000000380)={0x10000001, 0xa, 0x401000, 0x4}, &(0x7f00000004c0)=0x100001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x10005}}, 0x1be) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="850000001300000003880100000000009500000000000000182c0000", @ANYRES32=r2, @ANYBLOB="0000000002001720a4734500d7"], &(0x7f0000000300)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x78) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x54800, 0x0) write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117ac", 0x5a) sendfile(r2, r4, 0x0, 0x10000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x7ff}, &(0x7f0000000280)=0x8) r6 = syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x8, 0x100) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0xfffffffffffffe69, 0x0, &(0x7f00006f7000)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x5e18, 0x7b9, 0x2, 0x9, 0x4, 0x4cd6, 0x0, 0x80, r10}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={r10, @in6={{0xa, 0x4e20, 0x800, @rand_addr="a79c6250dfd8634e44cfc2ddb3246845", 0x1}}, 0x4, 0x98, 0x4, 0x800, 0x4a}, 0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e20, 0x2, @remote}}, 0x7, 0x9}, 0x90) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r12, 0x29, 0x1, &(0x7f0000000640), 0x4) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x801, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x5, 0x4, 0x7, 0x1}) r14 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) 17:13:01 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:13:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f92"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:02 executing program 1: unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/107, 0x6b) mq_notify(0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000000)={0x20, 0xff, 0x2}) creat(0x0, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x02\b'}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x6, 0xf5, 0x2, 0x1, 0x10001}) 17:13:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$TCFLSH(r0, 0x8926, 0x400000) timer_create(0x7, &(0x7f0000000040)={0x0, 0xd, 0x3, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x28, r4, 0x31d, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x128, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3201a923}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4ee}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9af}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}]}, 0x128}, 0x1, 0x0, 0x0, 0xc000}, 0x22000005) timer_gettime(r1, &(0x7f00000000c0)) 17:13:02 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x5424, &(0x7f0000000080)) 17:13:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{}, {&(0x7f0000000080)="60bea0a2bf0aabebb5d83c871bd2441c6105d5af86fb15dc396aa5efa590267e173b1a3bee71834d0c42aa43b7da1b4daa063876b4b73d2f64cbde9b43ba073231ab8432206a", 0x46}, {&(0x7f0000000100)="9450cad976b2266ebb72a1504791a1351d5424f7fb3cfd787a52578cc75580e4126e8733b4b333110576bd90b8a8782c6979a9b6593c51bb251c72c2b7b6488367cddfaa19436b48b2d7c4b5bca4578c39dbad29ca95d88046eeafcebe9d43e4e4c24eec17c8cb825519e586565a75ddc2744b2429e4b940c27eb2f780e8eef5a1bb4b6640892a50e9fe9ae31fe3ff5c52", 0x91}, {&(0x7f00000001c0)="dc0c2a382d9b6e2309c70c55e3efe74a1f54878b3caddae38a4c185500e31586ac752167e3da5d03d067f91034167354d05c0c9a4b04f6211101c9a09b9ee4681cd80e353a2a0e060194852d2c150e6d8bb879503046d0adaeccc2c832c289b585993f06e396e4260e1d3f4fcd499ca4faffbe5d5d33dd75184b8d9f5d7b37c8c012ba3993c22340e594bcf758dde6e0520fa215347f79f2e98cef078b60d117a6897dbc961ca79cc5eb1971a010691ec453f2541580188be04e1527d30a15ea4d2a43d0f7fff9c804c55b905c957b8209a8c69d4dc99a8221278b3cdfc07e3db4d26f4a9311ab868cdbff61c984df345bd1c4a364796d", 0xffffff97}, {&(0x7f00000002c0)="b995592b45ad37a71723049b825df6294e8a701ab074e4a20a25c553aa5bed2c52ad502c9ca1e2427c6805d8fb2ce70f89b57d924e83ca84e5642a35d4246f8d328dbc00b0b14a88ce707e9f40e2b78ae227dd6fb0", 0x55}, {&(0x7f0000000340)="3711d7a0ae965a5ff31f0fe28c718210a2aa648bf3c43af7b7d5cc9dfd4d7d6d6178b31d1e9046135b1eb10249746b41607dfefff2e721030166dce597090cdd74bf0f43481f56c2ce279c47837606d126de306f6dea76379832b1ce17ac33f33384f40dd05edaf44fe44f3b542325f6849dd948a082d753e0a9779ee38b9d7498fe43994f405aa6fa79e5808d76be072141efa55561d8a10b9eab67f332f1e7e475c050a1642f050868db723b3870ad8de9c0d73c243122d8216238d55ef0a2efc9fbc9503e014eb588661d447a0abd235113742269f93010376f9f18b369adc5d282eb5e5287", 0xe7}], 0x6}, 0x4) 17:13:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f92"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 431.650482] bond0: Releasing backup interface bond_slave_1 17:13:02 executing program 2: 17:13:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb6a23b4b6942b7871001000000000002002560b700fff0ffff0403ffffffff00000a00000006b9e599f5c8c81a663400dfd2"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x2, [{0x38f}]}) 17:13:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000380), 0x1040c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) r5 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1732) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0xfe6f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0}) 17:13:02 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1041, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00') getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) r4 = gettid() syz_open_procfs(r4, &(0x7f0000000080)='fdinfo\x00') sched_setattr(r4, &(0x7f0000000180)={0x30, 0x3, 0x1, 0x0, 0x0, 0x7, 0x693, 0xfffffffffffffff7}, 0x0) openat$cgroup_ro(r3, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:13:03 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:13:03 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 433.328619] bond0: Enslaving bond_slave_1 as an active interface with an up link 17:13:04 executing program 1: 17:13:04 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:13:04 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) 17:13:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:04 executing program 5: 17:13:04 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000200)=""/126, 0x7e}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000bc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) shutdown(r1, 0x0) [ 433.749656] audit: type=1804 audit(1575738784.456:311): pid=14266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir128329418/syzkaller.SF7awJ/18/bus" dev="sda1" ino=16657 res=1 17:13:04 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) 17:13:04 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:13:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000000)=""/149, 0x95}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f00000018c0)=""/152, 0x98}, {0x0}, {0x0}], 0x3}, 0x3e) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r5, 0x0) poll(0x0, 0x0, 0x80) shutdown(r6, 0x0) shutdown(r3, 0x0) 17:13:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) [ 434.034048] audit: type=1804 audit(1575738784.726:312): pid=14286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir128329418/syzkaller.SF7awJ/19/bus" dev="sda1" ino=16738 res=1 17:13:04 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) [ 434.293679] audit: type=1804 audit(1575738784.986:313): pid=14300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir128329418/syzkaller.SF7awJ/20/bus" dev="sda1" ino=16738 res=1 17:13:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:05 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) [ 434.586413] audit: type=1804 audit(1575738785.286:314): pid=14307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir128329418/syzkaller.SF7awJ/21/bus" dev="sda1" ino=16738 res=1 17:13:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00'}) 17:13:05 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nbd(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'\xdf\xfc\xff'}, &(0x7f0000000080), 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ethernet={0x0, @broadcast}, &(0x7f00000000c0)=0x80, 0x0) 17:13:05 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) 17:13:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) prlimit64(r1, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r6 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, &(0x7f0000000240)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000006c0)) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet(0x2, 0x803, 0xa0) connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x10, 0x0, 0x0, 0x9, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000900)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000a80)=0xe8) stat(0x0, &(0x7f0000000440)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000b00)) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r12, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x14}, {0x6}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r14 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0xc4, 0xcf8df8c855c2877d) sendto$inet6(r14, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x1, @local}, 0x1c) fsetxattr$system_posix_acl(r6, &(0x7f00000006c0)='system.posix_acl_default\x00', &(0x7f0000000c00)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES64=r13, @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES64], @ANYBLOB="b83f114a51a582edc523176f4267bbc18dac6bf2d60fc307ca48feb28f873ed3d3aa76f0d1ea3ca28d4aabb75ed8191516226826c7c680c409d888c3ee1fe3b62e69f50ac0d50c75bab516ba51042595b89f483e5b6ae42c0e6d0b0cc983c361448896c767a0afb0bbdb93c4cc5f673ba945e4d97e496cddf982d540e3e5e133b6a1c3c04a8582e618f5e379cb00e51a9634535083f3d9a5"], 0x5, 0x1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x2002002, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643d0c0e93d9ab102f6087cff6dc320c430cfebb", @ANYRESDEC=r11, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c034efb269d1200003d3078303030303030303030303030346534662c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030303830302c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c64656661756c745f7065726d69737369"]) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r15}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'uj\br_)$'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, 0x0) r16 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pwritev(r16, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) lseek(r16, 0x0, 0x3) setsockopt$inet6_IPV6_ADDRFORM(r16, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x4e22, 0x10001, @remote, 0x45}, 0x9, [0x0, 0x6ba, 0x80, 0x0, 0x8, 0x4]}, 0x5c) r17 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r17}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303031303004da30303130303030302c757365725f69643d", @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r18 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r18, &(0x7f00000003c0)=ANY=[@ANYBLOB="000eedc95336ccdcf4a4154041aafbb509"], 0x2) fallocate(r18, 0x3, 0x0, 0x8020003) writev(r18, &(0x7f0000000380)=[{0x0}], 0x1) syz_open_procfs(0x0, &(0x7f00000004c0)='\b\x180xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:13:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:05 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) 17:13:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001e000102000000000000000007000000c32e1ae6478b4551a4f263738d2a8f44f1ea38a07367f1d3b255bfaf962b0b2641d0cfa4713d4cc7a135f63454e4c668a02b2f3a7fae82f0198431", @ANYRES32=0x0, @ANYBLOB="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"], 0x20}}, 0x0) 17:13:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x80800) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/234, 0xea}], 0x1) 17:13:05 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) 17:13:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x2, [{0x38f}]}) 17:13:05 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f0000000080)=""/151, 0x0) msgget(0x0, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d9") r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x189e02, 0x51) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x71, 0x1, {{0x0, 0x0, 0x6}, 0xfff}}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x40, 0x0) r3 = dup2(r2, r1) pipe2(&(0x7f0000000140), 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000400)={0x8, 'syzkaller0\x00', {'veth0\x00'}, 0x74db}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 17:13:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/41, &(0x7f0000000100)=0x70) 17:13:06 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) 17:13:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) [ 435.728160] IPVS: length: 112 != 24 17:13:06 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:13:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766d746800000000180002001400010000000000", @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:06 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) tkill(0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)=""/151, 0x0) msgget(0x0, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140), 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 17:13:06 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) 17:13:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/98, 0x62}, {0x0}], 0x2}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000200)=""/126, 0x7e}, {0x0}, {0x0}], 0x3}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000bc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:13:06 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) 17:13:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:06 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) 17:13:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = creat(0x0, 0x0) creat(0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)={0x1}, 0xd) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipddp0\x00'}) dup(0xffffffffffffffff) [ 436.236809] audit: type=1804 audit(1575738786.936:315): pid=14423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir128329418/syzkaller.SF7awJ/28/bus" dev="sda1" ino=16898 res=1 17:13:07 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) 17:13:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:07 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) [ 436.402134] audit: type=1804 audit(1575738787.106:316): pid=14429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir128329418/syzkaller.SF7awJ/29/bus" dev="sda1" ino=16898 res=1 [ 436.494423] audit: type=1804 audit(1575738787.196:317): pid=14435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir128329418/syzkaller.SF7awJ/30/bus" dev="sda1" ino=16898 res=1 17:13:07 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:13:07 executing program 2: creat(&(0x7f0000000680)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) 17:13:07 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(r0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) 17:13:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7d01546e0df76ca7c6942b7871001000000001000002560b700fff0ffff0403ffffffff00000a000000062c3f94a61610a965bd5e6eb4db78f11a078d5e417b89fde3963eedbd2e7a7595f0fa46e6258f"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="ad000000020000008f03000000000000020000000000000077b2"]) 17:13:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) write(r2, &(0x7f0000000340), 0x41395527) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000100)={'L-', 0x101}, 0x28, 0x1) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 17:13:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000006b80)=[{{&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)=""/241, 0xf1}, {0x0}, {0x0}], 0x4}, 0x3}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/130, 0x82}, {0x0}, {0x0}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/82, 0x52}, {0x0}, {0x0}], 0x8, &(0x7f0000001e40)=""/46, 0x2e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf536, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000c40daab8e7444bd413e26f7b182a9fc78ac092e32cbedb8bbb34df99f26cc18f067b0b0798d0207a2df902bf883bcaf6aae56e480a18c7029dc10f610cba0579002a0e47401ec796ab067778e6f711c6ae7ec169917a43b3e147cbcd6b00d0a8f2436aacb7a32732d0b9be547af5cdf9b82e31ddccb8191eb55a503c5eec1ba41e948f928d7c"], 0x4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x8, @remote}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a00)={0x0, @vsock={0x28, 0x0, 0x2711, @reserved}, @hci={0x1f, r5}, @isdn={0x22, 0x4, 0x2, 0x51, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x800, 0x7f}) 17:13:07 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) [ 436.735845] audit: type=1804 audit(1575738787.436:318): pid=14444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir128329418/syzkaller.SF7awJ/31/bus" dev="sda1" ino=16609 res=1 17:13:07 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x21) syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) [ 436.947620] ================================================================== [ 436.947664] BUG: KASAN: slab-out-of-bounds in vcs_scr_readw+0xc2/0xd0 [ 436.947678] Read of size 2 at addr ffff888093bf34e0 by task syz-executor.5/14464 [ 436.947681] [ 436.947703] CPU: 1 PID: 14464 Comm: syz-executor.5 Not tainted 4.19.88-syzkaller #0 [ 436.947712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.947716] Call Trace: [ 436.947735] dump_stack+0x197/0x210 [ 436.947753] ? vcs_scr_readw+0xc2/0xd0 [ 436.947772] print_address_description.cold+0x7c/0x20d [ 436.947787] ? vcs_scr_readw+0xc2/0xd0 [ 436.947800] kasan_report.cold+0x8c/0x2ba [ 436.947820] __asan_report_load2_noabort+0x14/0x20 [ 436.947833] vcs_scr_readw+0xc2/0xd0 [ 436.947847] vcs_write+0x646/0xcf0 [ 436.947874] ? vcs_size+0x240/0x240 [ 436.947890] ? find_get_entry+0x3e1/0xa00 [ 436.947911] __vfs_write+0x114/0x810 [ 436.947921] ? ondemand_readahead+0x54b/0xcd0 [ 436.947934] ? vcs_size+0x240/0x240 [ 436.947948] ? kernel_read+0x120/0x120 [ 436.947962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.947975] ? copy_page_to_iter+0x45a/0xd50 [ 436.948010] __kernel_write+0x110/0x390 [ 436.948028] write_pipe_buf+0x15d/0x1f0 [ 436.948042] ? do_splice_direct+0x2a0/0x2a0 [ 436.948056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.948069] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 436.948081] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 436.948098] __splice_from_pipe+0x391/0x7d0 [ 436.948112] ? do_splice_direct+0x2a0/0x2a0 [ 436.948131] ? do_splice_direct+0x2a0/0x2a0 [ 436.948146] splice_from_pipe+0x108/0x170 [ 436.948164] ? splice_shrink_spd+0xd0/0xd0 [ 436.948189] ? security_file_permission+0x89/0x230 [ 436.948207] default_file_splice_write+0x3c/0x90 [ 436.948220] ? generic_splice_sendpage+0x50/0x50 [ 436.948244] direct_splice_actor+0x123/0x190 [ 436.948264] splice_direct_to_actor+0x2e7/0x890 [ 436.948283] ? generic_pipe_buf_nosteal+0x10/0x10 [ 436.948302] ? do_splice_to+0x180/0x180 [ 436.948318] ? security_file_permission+0x89/0x230 [ 436.948337] ? rw_verify_area+0x118/0x360 [ 436.948357] do_splice_direct+0x1da/0x2a0 [ 436.948375] ? splice_direct_to_actor+0x890/0x890 [ 436.948395] ? security_file_permission+0x89/0x230 [ 436.948412] ? rw_verify_area+0x118/0x360 [ 436.948430] do_sendfile+0x597/0xce0 [ 436.948456] ? do_compat_pwritev64+0x1c0/0x1c0 [ 436.948469] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.948485] ? put_timespec64+0xda/0x140 [ 436.948511] __x64_sys_sendfile64+0x1dd/0x220 [ 436.948528] ? __ia32_sys_sendfile+0x230/0x230 [ 436.948542] ? do_syscall_64+0x26/0x620 [ 436.948559] ? lockdep_hardirqs_on+0x415/0x5d0 [ 436.948575] ? trace_hardirqs_on+0x67/0x220 [ 436.948594] do_syscall_64+0xfd/0x620 [ 436.948613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.948625] RIP: 0033:0x45a6f9 [ 436.948639] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 436.948647] RSP: 002b:00007f3227c4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 436.948661] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a6f9 [ 436.948669] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 436.948678] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 436.948686] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f3227c4f6d4 [ 436.948695] R13: 00000000004c8fb9 R14: 00000000004e0b38 R15: 00000000ffffffff [ 436.948715] [ 436.948724] Allocated by task 8321: [ 436.948737] save_stack+0x45/0xd0 [ 436.948751] kasan_kmalloc+0xce/0xf0 [ 436.948763] __kmalloc+0x15d/0x750 [ 436.948777] vc_do_resize+0x262/0x14a0 [ 436.948788] vc_resize+0x4d/0x60 [ 436.948803] fbcon_do_set_font+0x4c1/0xa40 [ 436.948816] fbcon_set_font+0x72e/0x860 [ 436.948829] con_font_op+0xe18/0x1250 [ 436.948842] vt_ioctl+0xd2e/0x2530 [ 436.948857] tty_ioctl+0x7f3/0x1510 [ 436.948869] do_vfs_ioctl+0xd5f/0x1380 [ 436.948880] ksys_ioctl+0xab/0xd0 [ 436.948891] __x64_sys_ioctl+0x73/0xb0 [ 436.948904] do_syscall_64+0xfd/0x620 [ 436.948917] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.948920] [ 436.948926] Freed by task 0: [ 436.948930] (stack is not available) [ 436.948934] [ 436.948944] The buggy address belongs to the object at ffff888093bf2b80 [ 436.948944] which belongs to the cache kmalloc-4096 of size 4096 [ 436.948956] The buggy address is located 2400 bytes inside of [ 436.948956] 4096-byte region [ffff888093bf2b80, ffff888093bf3b80) [ 436.948960] The buggy address belongs to the page: [ 436.948972] page:ffffea00024efc80 count:1 mapcount:0 mapping:ffff88812c31cdc0 index:0x0 compound_mapcount: 0 [ 436.948987] flags: 0xfffe0000008100(slab|head) [ 436.949006] raw: 00fffe0000008100 ffffea0001730388 ffffea000259f908 ffff88812c31cdc0 [ 436.949020] raw: 0000000000000000 ffff888093bf2b80 0000000100000001 0000000000000000 [ 436.949024] page dumped because: kasan: bad access detected [ 436.949028] [ 436.949032] Memory state around the buggy address: [ 436.949043] ffff888093bf3380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.949053] ffff888093bf3400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 436.949064] >ffff888093bf3480: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 436.949069] ^ [ 436.949080] ffff888093bf3500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 436.949091] ffff888093bf3580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 436.949096] ================================================================== [ 436.949101] Disabling lock debugging due to kernel taint [ 436.964687] kobject: 'kvm' (000000003f55b846): kobject_uevent_env [ 436.964714] kobject: 'kvm' (000000003f55b846): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 436.971049] Kernel panic - not syncing: panic_on_warn set ... [ 436.971049] [ 436.971071] CPU: 1 PID: 14464 Comm: syz-executor.5 Tainted: G B 4.19.88-syzkaller #0 [ 436.971079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.971084] Call Trace: [ 436.971105] dump_stack+0x197/0x210 [ 436.971123] ? vcs_scr_readw+0xc2/0xd0 [ 436.971136] panic+0x26a/0x50e [ 436.971148] ? __warn_printk+0xf3/0xf3 [ 436.971161] ? vcs_scr_readw+0xc2/0xd0 [ 436.971174] ? preempt_schedule+0x4b/0x60 [ 436.971189] ? ___preempt_schedule+0x16/0x18 [ 436.971203] ? trace_hardirqs_on+0x5e/0x220 [ 436.971217] ? vcs_scr_readw+0xc2/0xd0 [ 436.971237] kasan_end_report+0x47/0x4f [ 436.971252] kasan_report.cold+0xa9/0x2ba [ 436.971271] __asan_report_load2_noabort+0x14/0x20 [ 436.971284] vcs_scr_readw+0xc2/0xd0 [ 436.971299] vcs_write+0x646/0xcf0 [ 436.971321] ? vcs_size+0x240/0x240 [ 436.971335] ? find_get_entry+0x3e1/0xa00 [ 436.971352] __vfs_write+0x114/0x810 [ 436.971364] ? ondemand_readahead+0x54b/0xcd0 [ 436.971378] ? vcs_size+0x240/0x240 [ 436.971390] ? kernel_read+0x120/0x120 [ 436.971403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.971417] ? copy_page_to_iter+0x45a/0xd50 [ 436.971440] __kernel_write+0x110/0x390 [ 436.971455] write_pipe_buf+0x15d/0x1f0 [ 436.971468] ? do_splice_direct+0x2a0/0x2a0 [ 436.971481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.971494] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 436.971507] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 436.971521] __splice_from_pipe+0x391/0x7d0 [ 436.971534] ? do_splice_direct+0x2a0/0x2a0 [ 436.971549] ? do_splice_direct+0x2a0/0x2a0 [ 436.971561] splice_from_pipe+0x108/0x170 [ 436.971576] ? splice_shrink_spd+0xd0/0xd0 [ 436.971595] ? security_file_permission+0x89/0x230 [ 436.971609] default_file_splice_write+0x3c/0x90 [ 436.971620] ? generic_splice_sendpage+0x50/0x50 [ 436.971632] direct_splice_actor+0x123/0x190 [ 436.971645] splice_direct_to_actor+0x2e7/0x890 [ 436.971657] ? generic_pipe_buf_nosteal+0x10/0x10 [ 436.971670] ? do_splice_to+0x180/0x180 [ 436.971681] ? security_file_permission+0x89/0x230 [ 436.971695] ? rw_verify_area+0x118/0x360 [ 436.971707] do_splice_direct+0x1da/0x2a0 [ 436.971719] ? splice_direct_to_actor+0x890/0x890 [ 436.971740] ? security_file_permission+0x89/0x230 [ 436.971755] ? rw_verify_area+0x118/0x360 [ 436.971772] do_sendfile+0x597/0xce0 [ 436.971791] ? do_compat_pwritev64+0x1c0/0x1c0 [ 436.971805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.971819] ? put_timespec64+0xda/0x140 [ 436.971838] __x64_sys_sendfile64+0x1dd/0x220 [ 436.971852] ? __ia32_sys_sendfile+0x230/0x230 [ 436.971866] ? do_syscall_64+0x26/0x620 [ 436.971881] ? lockdep_hardirqs_on+0x415/0x5d0 [ 436.971895] ? trace_hardirqs_on+0x67/0x220 [ 436.971909] do_syscall_64+0xfd/0x620 [ 436.971924] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.971934] RIP: 0033:0x45a6f9 [ 436.971949] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 436.971957] RSP: 002b:00007f3227c4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 436.971970] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a6f9 [ 436.971978] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 436.971986] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 436.971994] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f3227c4f6d4 [ 436.972001] R13: 00000000004c8fb9 R14: 00000000004e0b38 R15: 00000000ffffffff [ 436.973689] Kernel Offset: disabled [ 437.877768] Rebooting in 86400 seconds..