[ 70.927950][ T26] audit: type=1800 audit(1571232909.525:34): pid=9024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 76.936414][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 76.936427][ T26] audit: type=1400 audit(1571232915.535:41): avc: denied { map } for pid=9202 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. 2019/10/16 13:35:22 fuzzer started [ 83.392400][ T26] audit: type=1400 audit(1571232921.985:42): avc: denied { map } for pid=9211 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/10/16 13:35:22 dialing manager at 10.128.0.26:46053 [ 84.338662][ T9223] ld (9223) used greatest stack depth: 23144 bytes left 2019/10/16 13:35:23 syscalls: 2548 2019/10/16 13:35:23 code coverage: enabled 2019/10/16 13:35:23 comparison tracing: enabled 2019/10/16 13:35:23 extra coverage: extra coverage is not supported by the kernel 2019/10/16 13:35:23 setuid sandbox: enabled 2019/10/16 13:35:23 namespace sandbox: enabled 2019/10/16 13:35:23 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/16 13:35:23 fault injection: enabled 2019/10/16 13:35:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/16 13:35:23 net packet injection: enabled 2019/10/16 13:35:23 net device setup: enabled 2019/10/16 13:35:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 13:38:07 executing program 0: [ 249.150405][ T26] audit: type=1400 audit(1571233087.745:43): avc: denied { map } for pid=9227 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=16558 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 13:38:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 249.307480][ T9228] IPVS: ftp: loaded support on port[0] = 21 [ 249.453069][ T9228] chnl_net:caif_netlink_parms(): no params data found [ 249.506008][ T9231] IPVS: ftp: loaded support on port[0] = 21 [ 249.537953][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.545958][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state 13:38:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) setitimer(0x1, 0x0, &(0x7f0000000240)) [ 249.557106][ T9228] device bridge_slave_0 entered promiscuous mode [ 249.577963][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.585561][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.593625][ T9228] device bridge_slave_1 entered promiscuous mode [ 249.643107][ T9228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.675128][ T9228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.770806][ T9228] team0: Port device team_slave_0 added [ 249.806285][ T9228] team0: Port device team_slave_1 added [ 249.818094][ T9234] IPVS: ftp: loaded support on port[0] = 21 [ 249.838045][ T9231] chnl_net:caif_netlink_parms(): no params data found 13:38:08 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) recvmmsg(r0, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/252, 0xfc}], 0x3}, 0x100000000}, {{&(0x7f00000005c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000840)=""/104, 0x68}, {&(0x7f00000008c0)=""/94, 0x5e}], 0x4, &(0x7f00000009c0)=""/202, 0xca}}, {{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001640)=""/24, 0x18}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000005780)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000007940)=""/65, 0x41}}], 0x5, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ae0f6625968aea9c74fe44544a8d3f871aef9592c401", 0x16) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 249.929269][ T9228] device hsr_slave_0 entered promiscuous mode [ 249.997170][ T9228] device hsr_slave_1 entered promiscuous mode 13:38:08 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 250.086705][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.093932][ T9228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.101920][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.109051][ T9228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.160834][ T9236] IPVS: ftp: loaded support on port[0] = 21 [ 250.171808][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.180672][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.199796][ T9231] device bridge_slave_0 entered promiscuous mode [ 250.241226][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.250776][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.259261][ T9231] device bridge_slave_1 entered promiscuous mode [ 250.372255][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.405441][ T9239] IPVS: ftp: loaded support on port[0] = 21 [ 250.423134][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.458837][ T12] bridge0: port 1(bridge_slave_0) entered disabled state 13:38:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) [ 250.477973][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.506493][ T9228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.558339][ T9234] chnl_net:caif_netlink_parms(): no params data found [ 250.571100][ T9231] team0: Port device team_slave_0 added [ 250.591452][ T9228] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.630920][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.641294][ T9237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.653493][ T9231] team0: Port device team_slave_1 added [ 250.709695][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.718721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.727568][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.734697][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.748810][ T9245] IPVS: ftp: loaded support on port[0] = 21 [ 250.765901][ T9236] chnl_net:caif_netlink_parms(): no params data found [ 250.836319][ T9231] device hsr_slave_0 entered promiscuous mode [ 250.874518][ T9231] device hsr_slave_1 entered promiscuous mode [ 250.914257][ T9231] debugfs: Directory 'hsr0' with parent '/' already present! [ 250.923464][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.934663][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.942896][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.950036][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.958447][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.967122][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.976142][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.985113][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.994639][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.002443][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.011081][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.029811][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.036959][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.045166][ T9234] device bridge_slave_0 entered promiscuous mode [ 251.057313][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.064424][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.072148][ T9234] device bridge_slave_1 entered promiscuous mode [ 251.101738][ T9234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.124130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.132518][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.156401][ T9234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.193472][ T9236] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.202420][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.210364][ T9236] device bridge_slave_0 entered promiscuous mode [ 251.221589][ T9236] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.228727][ T9236] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.236741][ T9236] device bridge_slave_1 entered promiscuous mode [ 251.248253][ T9228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.261044][ T9228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.269449][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.278400][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.316800][ T9234] team0: Port device team_slave_0 added [ 251.324362][ T9234] team0: Port device team_slave_1 added [ 251.354260][ T9236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.365142][ T9236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.375650][ T9239] chnl_net:caif_netlink_parms(): no params data found [ 251.414700][ T9236] team0: Port device team_slave_0 added [ 251.517449][ T9234] device hsr_slave_0 entered promiscuous mode [ 251.554542][ T9234] device hsr_slave_1 entered promiscuous mode [ 251.594475][ T9234] debugfs: Directory 'hsr0' with parent '/' already present! [ 251.603054][ T9236] team0: Port device team_slave_1 added [ 251.696121][ T9236] device hsr_slave_0 entered promiscuous mode [ 251.754434][ T9236] device hsr_slave_1 entered promiscuous mode [ 251.844228][ T9236] debugfs: Directory 'hsr0' with parent '/' already present! [ 251.854539][ T9239] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.861610][ T9239] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.869577][ T9239] device bridge_slave_0 entered promiscuous mode [ 251.901301][ T9228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.910437][ T9239] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.918260][ T9239] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.927561][ T9239] device bridge_slave_1 entered promiscuous mode [ 251.951087][ T9239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.998782][ T9239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.028370][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.053212][ T26] audit: type=1400 audit(1571233090.645:44): avc: denied { associate } for pid=9228 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 252.097979][ T9239] team0: Port device team_slave_0 added [ 252.110287][ T9239] team0: Port device team_slave_1 added [ 252.118988][ T9245] chnl_net:caif_netlink_parms(): no params data found [ 252.176366][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.186224][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 13:38:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x42, 0x3d) r2 = dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={0x0}}, 0x0) [ 252.218448][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.274474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.283118][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.306821][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.313908][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 13:38:10 executing program 0: [ 252.321993][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.330819][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.340171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.347300][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.361087][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 13:38:11 executing program 0: 13:38:11 executing program 0: [ 252.407029][ T9239] device hsr_slave_0 entered promiscuous mode [ 252.444532][ T9239] device hsr_slave_1 entered promiscuous mode 13:38:11 executing program 0: [ 252.484639][ T9239] debugfs: Directory 'hsr0' with parent '/' already present! [ 252.524446][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 13:38:11 executing program 0: [ 252.550947][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.560845][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.579015][ T9245] device bridge_slave_0 entered promiscuous mode [ 252.597258][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.620396][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.638368][ T9245] device bridge_slave_1 entered promiscuous mode 13:38:11 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 252.650939][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.661247][ T9236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.672880][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.721959][ T9236] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.743449][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.758857][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.771702][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.780927][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.789730][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.798497][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.807160][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.815885][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.825349][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.833174][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.841046][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.858870][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.868021][ T9231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.889015][ T9234] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.900717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.922721][ T9245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.942069][ T9245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.972256][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.990968][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.001882][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.027249][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.034391][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.053819][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.072815][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.088733][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.095961][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.155638][ T9245] team0: Port device team_slave_0 added [ 253.161549][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.201495][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 253.212533][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.221746][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.231426][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.238546][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.247532][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.256375][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.265537][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.274939][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.283431][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.292532][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.301315][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.308423][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.316650][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 253.326128][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.346774][ T9245] team0: Port device team_slave_1 added [ 253.368877][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.378144][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.391077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.399565][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.408796][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.417305][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.429155][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.438286][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.498168][ T9245] device hsr_slave_0 entered promiscuous mode [ 253.502935][ T9284] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 253.544822][ T9245] device hsr_slave_1 entered promiscuous mode [ 253.584331][ T9245] debugfs: Directory 'hsr0' with parent '/' already present! [ 253.596047][ T9234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.634559][ T9234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.670692][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.681116][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.696709][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.710050][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.721006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.737385][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.750233][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.810583][ T9236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.835316][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.863931][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.873593][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.897631][ T9234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.920929][ T9239] 8021q: adding VLAN 0 to HW filter on device bond0 13:38:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 253.980520][ T9236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.998855][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.011592][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.039141][ T9239] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.080989][ T9245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.167389][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.187420][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.204895][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.212017][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.241924][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.263627][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.286918][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.318959][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.344533][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.351623][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.359515][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.368350][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.378881][ T9245] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.404734][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.414457][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.423378][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.423983][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.449102][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.473976][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.484409][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.493359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.507148][ T9239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.519121][ T9239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.531913][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.573261][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.623159][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.632516][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.637253][ C0] hrtimer: interrupt took 31881 ns [ 254.648674][ T9247] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.648775][ T9310] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 13:38:13 executing program 2: [ 254.655815][ T9247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.670859][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.698183][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.707875][ T9247] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.715001][ T9247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.728100][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.747031][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.770240][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 13:38:13 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) recvmmsg(r0, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/252, 0xfc}], 0x3}, 0x100000000}, {{&(0x7f00000005c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000840)=""/104, 0x68}, {&(0x7f00000008c0)=""/94, 0x5e}], 0x4, &(0x7f00000009c0)=""/202, 0xca}}, {{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001640)=""/24, 0x18}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000005780)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000007940)=""/65, 0x41}}], 0x5, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ae0f6625968aea9c74fe44544a8d3f871aef9592c401", 0x16) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 254.806853][ T9239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.858966][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.891893][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.922418][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.952345][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.962437][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.971518][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.981616][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.995252][ T9245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.032273][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 255.052623][ T9247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.129205][ T9245] 8021q: adding VLAN 0 to HW filter on device batadv0 13:38:13 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:14 executing program 5: 13:38:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:14 executing program 0: 13:38:14 executing program 2: 13:38:14 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:14 executing program 3: 13:38:14 executing program 3: 13:38:14 executing program 2: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000400)={0x8, 0x6, 0x40, 0x5ef5, 0x9a7e38af381b1a3, 0x1}) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff) sendmsg$nl_generic(r2, &(0x7f0000000780)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x80000, 0x0) fsmount(r3, 0x1, 0xf4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xc7, 0x2, 0x7ff, 0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) dup(r4) accept4$alg(r4, 0x0, 0x0, 0x100800) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @local}, 0x10) dup(r7) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x99f7960f5411a8b) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @local}, 0x10) dup(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) sendmsg$nl_route_sched(r6, 0x0, 0x460ac) 13:38:14 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:14 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) creat(0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) r3 = syz_open_dev$rtc(&(0x7f00000005c0)='/dev/rtc#\x00', 0x800, 0x0) vmsplice(r3, &(0x7f00000006c0)=[{&(0x7f0000000600)="f15837e8ce2fda87a1c89b8a770eda134db3e28d699a6ac5db5a2cf89bab866d0cc60804de46203f507553313f6b7e9570d8cc8b4aa6343b3ee13f8335b3a8bf16f4f1cf0d669fc2b1fd20c9cc1207a5ef2dd06831e65eda774634acfbf19bd81d76f72ea719637ddf71f4f72d8fa4bf4b6eccf6c0a5bd2b7ea3b1c3a8384dc313b6cadaeceffe720ff26533db2716a198b5d447be3342c3a59bcbaba04238", 0x9f}], 0x1, 0x9) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0x8, 0x2, 0xd3, 0x5}, 'syz1\x00', 0x48}) fchdir(r2) r4 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000004c0)={0x60000000}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xffffffff, 0x1, 0x4, 0x5, 0x0, 0x5, 0x0, 0x0, 0x2d6, 0x0, 0x69eed86a, 0x2}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xfffffffffffffffd}) ioprio_set$pid(0x7, 0x0, 0x5) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000180)={0x2, &(0x7f0000000500)=[{}, {}]}) ioprio_get$uid(0x3, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x0, 0x0, &(0x7f0000000380)) unshare(0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000580)=0x401) fcntl$setstatus(r4, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="edadd055d2a3fac900e74fa7044351000000000000"], 0x7, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 13:38:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100), 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="06304aa0886a9ee8ba11"], 0xa) close(r3) r5 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000340)=0xc) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) [ 256.153393][ T9386] device lo entered promiscuous mode [ 256.213827][ T26] audit: type=1400 audit(1571233094.805:45): avc: denied { create } for pid=9384 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 256.405545][ T26] audit: type=1400 audit(1571233094.805:46): avc: denied { write } for pid=9384 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 256.512647][ T9403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=9403 comm=syz-executor.5 [ 256.534134][ T26] audit: type=1400 audit(1571233094.895:47): avc: denied { read } for pid=9384 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 256.576281][ T9403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=9403 comm=syz-executor.5 [ 256.614811][ T9403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=9403 comm=syz-executor.5 [ 256.654625][ T9376] device lo left promiscuous mode [ 256.675144][ T9403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=9403 comm=syz-executor.5 [ 256.711774][ T9386] device lo entered promiscuous mode [ 256.717925][ T9403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=9403 comm=syz-executor.5 [ 256.767270][ T9403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=9403 comm=syz-executor.5 [ 256.799936][ T9376] device lo left promiscuous mode [ 256.835341][ T9403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=9403 comm=syz-executor.5 [ 256.924940][ T9403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=9403 comm=syz-executor.5 [ 256.952270][ T9403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=9403 comm=syz-executor.5 [ 256.982127][ T9403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=9403 comm=syz-executor.5 [ 257.004501][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 257.010539][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:38:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x100000000011, 0x2, 0xfc) dup2(r0, r1) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) 13:38:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') sendfile(0xffffffffffffffff, r0, 0x0, 0x40000000409) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0xa002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xfffffffffffffea9) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)={@remote, @empty, r3}, 0xc) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000380)={0x0, 0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x60000, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x0, &(0x7f0000000300)) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x0, 0x0, 0x7fffffff}, 0xc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'nr0\x00', r3}) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYRES16, @ANYRES32], 0x2}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)) write(r1, 0x0, 0x0) shutdown(r1, 0x0) 13:38:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:15 executing program 2: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000400)={0x8, 0x6, 0x40, 0x5ef5, 0x9a7e38af381b1a3, 0x1}) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff) sendmsg$nl_generic(r2, &(0x7f0000000780)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x80000, 0x0) fsmount(r3, 0x1, 0xf4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xc7, 0x2, 0x7ff, 0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) dup(r4) accept4$alg(r4, 0x0, 0x0, 0x100800) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @local}, 0x10) dup(r7) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x99f7960f5411a8b) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @local}, 0x10) dup(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) sendmsg$nl_route_sched(r6, 0x0, 0x460ac) 13:38:15 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:15 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 257.404154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 257.409972][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 257.435647][ T9418] device lo entered promiscuous mode 13:38:16 executing program 3: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000400)={0x8, 0x6, 0x40, 0x5ef5, 0x9a7e38af381b1a3, 0x1}) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff) sendmsg$nl_generic(r2, &(0x7f0000000780)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x80000, 0x0) fsmount(r3, 0x1, 0xf4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xc7, 0x2, 0x7ff, 0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) dup(r4) accept4$alg(r4, 0x0, 0x0, 0x100800) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @local}, 0x10) dup(r7) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x99f7960f5411a8b) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @local}, 0x10) dup(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) sendmsg$nl_route_sched(r6, 0x0, 0x460ac) [ 257.776659][ T9441] device lo entered promiscuous mode 13:38:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in, 0xffffffffffffff33, &(0x7f00000003c0), 0x1000000000000034, &(0x7f0000000400)=""/233, 0xe0}, 0x0) 13:38:16 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 257.996981][ T9438] device lo left promiscuous mode 13:38:16 executing program 5: [ 258.125440][ T9415] device lo left promiscuous mode 13:38:16 executing program 2: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000400)={0x8, 0x6, 0x40, 0x5ef5, 0x9a7e38af381b1a3, 0x1}) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff) sendmsg$nl_generic(r2, &(0x7f0000000780)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x80000, 0x0) fsmount(r3, 0x1, 0xf4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xc7, 0x2, 0x7ff, 0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) dup(r4) accept4$alg(r4, 0x0, 0x0, 0x100800) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @local}, 0x10) dup(r7) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x99f7960f5411a8b) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @local}, 0x10) dup(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) sendmsg$nl_route_sched(r6, 0x0, 0x460ac) 13:38:16 executing program 4: bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:16 executing program 0: 13:38:16 executing program 3: 13:38:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:16 executing program 5: 13:38:17 executing program 4: bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:17 executing program 5: 13:38:17 executing program 3: 13:38:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() getrandom(&(0x7f0000000080)=""/117, 0x75, 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x31) [ 258.488445][ T9474] device lo entered promiscuous mode 13:38:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:17 executing program 4: bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 259.004557][ T9468] device lo left promiscuous mode 13:38:17 executing program 2: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000400)={0x8, 0x6, 0x40, 0x5ef5, 0x9a7e38af381b1a3, 0x1}) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff) sendmsg$nl_generic(r2, &(0x7f0000000780)={&(0x7f0000000480), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048024}, 0x4000000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x80000, 0x0) fsmount(r3, 0x1, 0xf4) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xc7, 0x2, 0x7ff, 0x9}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) dup(r4) accept4$alg(r4, 0x0, 0x0, 0x100800) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @local}, 0x10) dup(r7) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x99f7960f5411a8b) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r9, 0x1, 0x6, @local}, 0x10) dup(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) sendmsg$nl_route_sched(r6, 0x0, 0x460ac) 13:38:17 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0xc0804124, 0x0) 13:38:17 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100736974000c00026761a29ca89a2c31060008000140", @ANYRES32=r4], 0x38}}, 0x0) 13:38:17 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x1000) 13:38:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:17 executing program 5: r0 = creat(0x0, 0x0) syz_open_procfs(0x0, 0x0) ftruncate(r0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_vif\x00') clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x33, &(0x7f0000000000)) ptrace(0x10, r1) waitid(0x0, 0x0, 0x0, 0x5, 0x0) 13:38:17 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:17 executing program 3: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, 0x0, &(0x7f0000000080)) [ 259.235536][ T9519] device lo entered promiscuous mode 13:38:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:18 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10rist\xe3cusgrVid:De', 0x0) dup(0xffffffffffffffff) [ 259.446020][ T26] audit: type=1400 audit(1571233098.045:48): avc: denied { create } for pid=9536 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 13:38:18 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 259.566903][ T26] audit: type=1400 audit(1571233098.045:49): avc: denied { getattr } for pid=9536 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 259.874440][ T9517] device lo left promiscuous mode 13:38:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, 0xfffffffffffffffd) 13:38:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x0, 0x1000000000000002, 0x0) r1 = open(0x0, 0x0, 0x0) write$P9_RSTATFS(r1, &(0x7f0000001580)={0x43}, 0x43) mknod(&(0x7f00000000c0)='./bus\x00', 0x4, 0x7) fallocate(0xffffffffffffffff, 0x0, 0xffff, 0x9) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8cT', 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r4) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x54) pipe(&(0x7f0000000040)) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x88001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002091, r3, 0x0) 13:38:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10) r5 = dup(r3) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local}, 0x10) r6 = dup3(r0, r5, 0x80000) sendmsg$nl_generic(r6, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x42202}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048024}, 0x40010) fsmount(r2, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @local}, 0x10) dup(r7) accept4$alg(r7, 0x0, 0x0, 0x100800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) sendfile(r0, r0, 0x0, 0x40fdf) 13:38:18 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x20000000) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1c0}]) 13:38:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:18 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 260.215137][ T9583] device lo entered promiscuous mode 13:38:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) [ 260.240000][ T9573] Dev loop3: unable to read RDB block 1 [ 260.256005][ T9573] loop3: unable to read partition table [ 260.283916][ T9573] loop3: partition table beyond EOD, truncated [ 260.326637][ T9573] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 13:38:19 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:19 executing program 5: 13:38:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x20000000) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1c0}]) 13:38:19 executing program 2: 13:38:19 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 260.724368][ T9579] device lo left promiscuous mode [ 260.806576][ T9610] Dev loop3: unable to read RDB block 1 [ 260.811379][ T9586] device lo entered promiscuous mode [ 260.854496][ T9610] loop3: unable to read partition table [ 260.892900][ T9610] loop3: partition table beyond EOD, truncated [ 260.933366][ T9610] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 260.975487][ T9579] device lo left promiscuous mode 13:38:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10) r5 = dup(r3) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local}, 0x10) r6 = dup3(r0, r5, 0x80000) sendmsg$nl_generic(r6, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x42202}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048024}, 0x40010) fsmount(r2, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @local}, 0x10) dup(r7) accept4$alg(r7, 0x0, 0x0, 0x100800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) sendfile(r0, r0, 0x0, 0x40fdf) 13:38:19 executing program 5: 13:38:19 executing program 2: 13:38:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:19 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:19 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10) r5 = dup(r3) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local}, 0x10) r6 = dup3(r0, r5, 0x80000) sendmsg$nl_generic(r6, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x42202}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048024}, 0x40010) fsmount(r2, 0x0, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r7 = socket(0x100000000011, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @local}, 0x10) dup(r7) accept4$alg(r7, 0x0, 0x0, 0x100800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) sendfile(r0, r0, 0x0, 0x40fdf) 13:38:19 executing program 2: 13:38:19 executing program 5: [ 261.220045][ T9634] device lo entered promiscuous mode 13:38:19 executing program 5: 13:38:19 executing program 2: [ 261.355727][ T9648] device lo entered promiscuous mode 13:38:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 261.554346][ T9644] device lo left promiscuous mode [ 261.744473][ T9632] device lo left promiscuous mode 13:38:20 executing program 0: 13:38:20 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x4000000) 13:38:20 executing program 2: 13:38:20 executing program 5: 13:38:20 executing program 3: 13:38:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:20 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x4000000) 13:38:20 executing program 2: 13:38:20 executing program 3: 13:38:20 executing program 5: 13:38:20 executing program 0: 13:38:20 executing program 5: 13:38:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:20 executing program 2: 13:38:20 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x4000000) 13:38:20 executing program 3: 13:38:20 executing program 0: 13:38:20 executing program 5: 13:38:21 executing program 3: 13:38:21 executing program 2: 13:38:21 executing program 0: 13:38:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0xffffff1f, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13:38:21 executing program 3: r0 = io_uring_setup(0x40000000e, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/186, 0xba}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 13:38:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)={0x200}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x800, 0xfff) r5 = socket(0x10, 0x802, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000200)={'teql0\x00', 0x7}) r6 = epoll_create1(0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) write(r5, &(0x7f00000000c0)="24000000210025f0075c0165ff0ffc0e020000000010000002e1100c08000a0000000000", 0x24) epoll_wait(r6, &(0x7f0000000000)=[{}], 0x1, 0xfffffffffffffff7) io_setup(0x4f34, &(0x7f0000000240)=0x0) r8 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x4000) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x2}]) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 13:38:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r1, r0, 0x0, 0xdd) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 13:38:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:21 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) [ 262.832711][ T9727] selinux_nlmsg_perm: 421 callbacks suppressed [ 262.832726][ T9727] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26226 sclass=netlink_xfrm_socket pig=9727 comm=syz-executor.2 13:38:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 262.931097][ T9735] block nbd5: NBD_DISCONNECT 13:38:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000000c0)) [ 262.984020][ T9738] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26226 sclass=netlink_xfrm_socket pig=9738 comm=syz-executor.2 [ 263.016122][ T9735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9735 comm=syz-executor.5 [ 263.065384][ T9734] block nbd5: Disconnected due to user request. [ 263.104308][ T9734] block nbd5: shutting down sockets 13:38:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x4000000) 13:38:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x3, 0x1081082) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x7) [ 263.167459][ T9749] block nbd5: NBD_DISCONNECT 13:38:21 executing program 0: syz_emit_ethernet(0x83, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd601bfc97004d8800fe8800000001fe8000000000000000000000000000aa0000000000239078e2963936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afaf69cc3712c37ed0000000000000000000"], 0x0) 13:38:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x2001) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000300)={0x600, 0x60000, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb, 0x0, "abb4291ede5e270dd3f0a272134e83bbe886c41fc6faced4210500000000000000ffffff7ffff7ef0900020000d14704000000000000000000000013003e00", "141f2b09000000000000002850c94200ffff0000230000000000000200", "00800020000000001a4809ff1f48b823eb000000000000004f6fce49370600ce"}) 13:38:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x4000000) 13:38:21 executing program 3: pipe(&(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6991fb054d54a333c28785d630f38ba0ff462a6eb00ea368db25633657b00008eaf3e5a53c644f6917333038571fe000000000000006af8dd1ce4f565d76454f9e2b3da964998113975a6d38f84c1dec32917503563a00c11ed7c0162b399f49dd26ea0d25a5cc147bb951dd508a19d36c33a356294ffcfbb0c14029c5f0a0bd23c54a390e7d0f1919389ca430744bece0b9208e54ebb53ff91ace4088c1e7043172a5f92f76efc5c349e73458aea58d5d82844828593281761", 0xe3}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 13:38:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") personality(0x400000) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mmap$binder(&(0x7f0000d0e000/0xb000)=nil, 0xb000, 0x1, 0x11, r1, 0x0) 13:38:22 executing program 0: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000040)=[{0x15}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 13:38:22 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 13:38:22 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x4000000) 13:38:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:22 executing program 2: r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000340), 0x8) 13:38:22 executing program 0: r0 = socket(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x2, 0x0, 0x0) 13:38:22 executing program 5: r0 = socket(0x22, 0x3, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), 0x8) 13:38:22 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)}, 0x4000000) 13:38:22 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:38:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:38:25 executing program 3: r0 = socket$inet(0x10, 0x880400000003, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg(r0, &(0x7f0000000900)={0x0, 0xfe2c, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830002200a0007000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1, 0x0, 0x0, 0x900}, 0x0) 13:38:25 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)}, 0x4000000) 13:38:25 executing program 2: r0 = socket(0x22, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x5, 0x0, 0x0) 13:38:25 executing program 0: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e) 13:38:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="dfbc58ef6edd8c56a5017ead7279f601", 0x10) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:38:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:38:25 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)}, 0x4000000) 13:38:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") sendmmsg(r0, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="f5", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6587b967483041ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xf83c, 0x2, 0x0, 0x27) [ 266.565476][ T9847] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 266.629531][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 13:38:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:38:25 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x104, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0xffffffffffffffc1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x5, 0x8) setsockopt$sock_int(r3, 0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r3, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 13:38:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x1, @remote}}) 13:38:25 executing program 5: unshare(0x8000000) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)='6', 0x6a) 13:38:26 executing program 0: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00009, 0x0, 0x0, 0x0, 0x2000000000002) 13:38:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:26 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) 13:38:26 executing program 2: [ 267.924485][ T9942] mmap: syz-executor.0 (9942) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 13:38:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1ffffff}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000340)={0x200}) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r3, 0x1) recvmsg(r3, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x8) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000100)=""/124) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={r4, 0x0, 0x0, 0x1173, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[r0, r1], 0x2) 13:38:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:26 executing program 4: 13:38:26 executing program 5: 13:38:26 executing program 2: 13:38:26 executing program 4: 13:38:27 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 13:38:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:27 executing program 5: 13:38:27 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:27 executing program 2: 13:38:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:27 executing program 0: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00009, 0x0, 0x0, 0x0, 0x2000000000002) 13:38:27 executing program 3: 13:38:27 executing program 3: [ 269.319444][ T9986] block nbd4: NBD_DISCONNECT 13:38:27 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x40000}}], 0x90}, 0x0) 13:38:27 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)) [ 269.362494][ T9986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9986 comm=syz-executor.4 [ 269.470246][ T9983] block nbd4: Disconnected due to user request. 13:38:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r0, 0x0, 0x0) [ 269.534270][ T9983] block nbd4: shutting down sockets 13:38:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 269.565260][ T9986] block nbd4: NBD_DISCONNECT [ 269.584253][ T9986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9986 comm=syz-executor.4 13:38:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) close(r1) 13:38:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='#!,\t'], 0x4) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="54902da44bd9423742ca176dfb740dd459f54aa64a5fb1e85e96249e5f36c54c7e453c96e9226c5fa5711b1dad34e59920a4cf0a0da03640de5e872c947052b0e17fbaeac96f55c8c41d18a899709af6d836e3405ea1d2e9fc925b44d2b7f9df97055f65890546efcadb143a4941dd751253cfb2d762ca9cdfeb955b2a30b105706d03936d63df80ca885f4daf238cd300", 0x91}, {&(0x7f0000000180)="81a93d5761075363cbdbc35b3977eb2f0b73064e", 0x14}], 0x2) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 269.632553][ T9986] block nbd4: Disconnected due to user request. [ 269.741933][ T9986] block nbd4: shutting down sockets 13:38:28 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) [ 269.838829][T10015] ERROR: Domain ' /sbin/init /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 proc:/self/fd/4' not defined. 13:38:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 269.981665][T10026] block nbd4: NBD_DISCONNECT [ 270.017176][T10026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10026 comm=syz-executor.4 13:38:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) sendmsg$rds(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000000180)=""/124, 0x7c}], 0x2}, 0x0) [ 270.120606][T10024] block nbd4: Disconnected due to user request. [ 270.147805][T10024] block nbd4: shutting down sockets 13:38:29 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0xc, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13:38:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:38:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 13:38:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x400000000000368, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/370], 0x14}}, 0x0) 13:38:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x19) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44000) 13:38:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x342) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaabd4, 0x0, 0x0, 0x152) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000580)="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", 0x331}], 0x1}}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 270.548773][T10055] block nbd4: NBD_DISCONNECT [ 270.564357][T10055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10055 comm=syz-executor.4 [ 270.632825][T10054] block nbd4: Disconnected due to user request. 13:38:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb}}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000200)=0x9) syz_open_dev$vcsa(0x0, 0x1, 0x102) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9705}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 13:38:29 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x8, {{}, {0x0}, 0x0}}], 0x90}, 0x0) [ 270.716138][T10054] block nbd4: shutting down sockets 13:38:29 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x8001005}) 13:38:29 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000200)=0x9) syz_open_dev$vcsa(0x0, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) r3 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb}}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x3}) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x403, 0xffffffff, 0x7, 0x20000008}}) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9705}, 0x0, 0x0, 0x1, 0x0, 0x20006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 271.031333][T10095] block nbd4: NBD_DISCONNECT 13:38:29 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x9, {{}, {0x0}, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) [ 271.068113][T10095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10095 comm=syz-executor.4 [ 271.158816][T10093] block nbd4: Disconnected due to user request. [ 271.177906][T10093] block nbd4: shutting down sockets 13:38:29 executing program 2: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x88, 0x0, 0xca}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 13:38:29 executing program 4: socket(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab08) 13:38:29 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 271.424030][T10115] block nbd4: NBD_DISCONNECT 13:38:30 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x6, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13:38:30 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10180, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="ffd934aa54cdfc15009c5b7213f6012f66b000000000e00700ffffffff816f00000062c3a119ff2e9374f021566ecabd3d9ca9d6171079c1998bfe5d315f3685d430665a14067fef7fbe2d40000000000000000000005d78df18f57a8ac75f3e9ca77b4db77b74412c65365d3d4564fca87164b1b9d50b219f1dc723214baf9d36b8b2f6ef6d2b5fac5dc33c610a10a6345b9586e46758c6feb5789340ff38e7"], 0xa0) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 13:38:30 executing program 4: socket(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab08) 13:38:30 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:30 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) fcntl$setstatus(r0, 0x4, 0x2000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 13:38:30 executing program 1: mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:38:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000200)=0x9) syz_open_dev$vcsa(0x0, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) r3 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb}}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x3}) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x403, 0xffffffff, 0x7, 0x20000008}}) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9705}, 0x0, 0x0, 0x1, 0x0, 0x20006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 272.098165][T10144] block nbd4: NBD_DISCONNECT 13:38:30 executing program 1: mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:38:30 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:30 executing program 4: socket(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab08) 13:38:30 executing program 1: mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 272.397025][T10164] block nbd4: NBD_DISCONNECT 13:38:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654d1613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 13:38:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:31 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:31 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) [ 272.650603][T10176] block nbd4: NBD_DISCONNECT 13:38:31 executing program 2: munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlockall() munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 13:38:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:31 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:31 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) recvmmsg(r0, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/252, 0xfc}], 0x3}, 0x100000000}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, &(0x7f0000000540)=""/94, 0x5e}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000007b40)=""/102400, 0x19000}], 0x2}, 0x9}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000005780)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000007940)=""/65, 0x41}}], 0x5, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ae0f6625968aea9c74fe44544a8d3f871aef9592c401", 0x16) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 13:38:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000200)=0x9) syz_open_dev$vcsa(0x0, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) r3 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb}}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x3}) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x403, 0xffffffff, 0x7, 0x20000008}}) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9705}, 0x0, 0x0, 0x1, 0x0, 0x20006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 273.077603][T10194] block nbd4: NBD_DISCONNECT 13:38:31 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:31 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) recvmmsg(r0, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/252, 0xfc}], 0x3}, 0x100000000}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, &(0x7f0000000540)=""/94, 0x5e}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000007b40)=""/102400, 0x19000}], 0x2}, 0x9}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000005780)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000007940)=""/65, 0x41}}], 0x5, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ae0f6625968aea9c74fe44544a8d3f871aef9592c401", 0x16) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 273.361174][T10212] block nbd4: NBD_DISCONNECT 13:38:32 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) recvmmsg(r0, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/252, 0xfc}], 0x3}, 0x100000000}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, &(0x7f0000000540)=""/94, 0x5e}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000007b40)=""/102400, 0x19000}], 0x2}, 0x9}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000005780)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000007940)=""/65, 0x41}}], 0x5, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ae0f6625968aea9c74fe44544a8d3f871aef9592c401", 0x16) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 13:38:32 executing program 5: bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:32 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) recvmmsg(r0, &(0x7f00000079c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/252, 0xfc}], 0x3}, 0x100000000}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, &(0x7f0000000540)=""/94, 0x5e}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000007b40)=""/102400, 0x19000}], 0x2}, 0x9}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000005780)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000007940)=""/65, 0x41}}], 0x5, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ae0f6625968aea9c74fe44544a8d3f871aef9592c401", 0x16) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 13:38:32 executing program 5: bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) [ 273.713021][T10227] block nbd4: NBD_DISCONNECT [ 273.744365][T10227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10227 comm=syz-executor.4 13:38:32 executing program 2: [ 273.881147][T10226] block nbd4: Disconnected due to user request. [ 273.906825][T10226] block nbd4: shutting down sockets 13:38:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000200)=0x9) syz_open_dev$vcsa(0x0, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) r3 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x1, {0xb}}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x3}) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x403, 0xffffffff, 0x7, 0x20000008}}) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9705}, 0x0, 0x0, 0x1, 0x0, 0x20006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 13:38:32 executing program 5: bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:32 executing program 2: 13:38:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab08) 13:38:32 executing program 0: 13:38:32 executing program 2: 13:38:32 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:32 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab08) 13:38:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:33 executing program 0: 13:38:33 executing program 2: 13:38:33 executing program 3: 13:38:33 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:33 executing program 0: 13:38:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab08) 13:38:33 executing program 2: 13:38:33 executing program 0: 13:38:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab08) 13:38:33 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:33 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:38:33 executing program 3: 13:38:33 executing program 2: [ 274.955031][T10289] block nbd4: NBD_DISCONNECT 13:38:33 executing program 0: 13:38:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab08) 13:38:33 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:33 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:38:33 executing program 3: 13:38:33 executing program 0: 13:38:33 executing program 2: [ 275.275595][T10308] block nbd4: NBD_DISCONNECT 13:38:33 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab08) 13:38:33 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:38:33 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:34 executing program 0: 13:38:34 executing program 3: 13:38:34 executing program 2: [ 275.530289][T10323] block nbd4: NBD_DISCONNECT 13:38:34 executing program 2: 13:38:34 executing program 3: 13:38:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:34 executing program 0: 13:38:34 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:34 executing program 4: r0 = socket(0x0, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:34 executing program 0: 13:38:34 executing program 2: 13:38:34 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:34 executing program 3: 13:38:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 276.015143][T10355] block nbd4: NBD_DISCONNECT 13:38:34 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:34 executing program 2: 13:38:34 executing program 0: 13:38:34 executing program 4: r0 = socket(0x0, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:34 executing program 2: 13:38:34 executing program 3: [ 276.299204][T10373] block nbd4: NBD_DISCONNECT 13:38:34 executing program 0: 13:38:35 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:35 executing program 2: 13:38:35 executing program 4: r0 = socket(0x0, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:35 executing program 3: 13:38:35 executing program 0: 13:38:35 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x0) [ 276.633986][T10394] block nbd4: NBD_DISCONNECT 13:38:35 executing program 2: 13:38:35 executing program 3: 13:38:35 executing program 4: r0 = socket(0x10, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:35 executing program 0: 13:38:35 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x0) 13:38:35 executing program 3: 13:38:35 executing program 2: 13:38:35 executing program 0: [ 277.021752][T10412] block nbd4: NBD_DISCONNECT 13:38:35 executing program 3: 13:38:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:35 executing program 4: r0 = socket(0x10, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:35 executing program 2: 13:38:35 executing program 0: 13:38:35 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x0) 13:38:35 executing program 3: [ 277.403524][T10436] block nbd4: NBD_DISCONNECT 13:38:36 executing program 2: r0 = io_uring_setup(0x40000000e, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000240)=""/186, 0xba}], 0x2) syz_open_dev$sndctrl(&(0x7f0000000080)='/dC#\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x80}}, {{@in=@multicast2}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x5}}, 0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa03e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x13) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() syz_open_procfs(r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) close(r2) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 13:38:36 executing program 0: r0 = socket(0x18, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x100c, &(0x7f0000000000)={0xfffffffffffffffc}, 0x10) 13:38:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:36 executing program 4: r0 = socket(0x10, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:36 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13:38:36 executing program 3: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="820201f0ffffffff"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) r1 = socket(0x2, 0x2, 0x0) dup2(r0, r1) connect$unix(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) r2 = socket(0x2, 0x8002, 0x0) r3 = dup2(r0, r1) dup2(r3, r2) connect$unix(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="00012000"], 0x10) [ 277.658019][T10455] block nbd4: NBD_DISCONNECT 13:38:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:36 executing program 0: open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffff4) r0 = getpgid(0xffffffffffffffff) r1 = open(0x0, 0x2, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0xfffffff4) perf_event_open(0x0, r0, 0x0, r1, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x8}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480), 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x2000, 0x3, 0x0, 0x0, 0xdf}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 13:38:36 executing program 3 (fault-call:2 fault-nth:0): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:36 executing program 2: socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="7a7db7903646a29b3778182800075894e2c5739e0a3e32158e7a9616bb45be644afcad89837297185595b5538b7c0dc8fc7e19c633838d9652cab83296984ac158d91ecd66e53fe75ff8c436210184119e866204648bd29ee14f850be6fddb2aa71ca1e7ef892567e06353647c75cee6ffffff7fcf5d99f5da7e5f290f958846b24168bee408155c9711ab7040660bddd9b87bcfa71c2465478ae75614fcacf94aa936f32b7c09af1dfe89a6cb3cbb4bb730de0dfee349e436deb3caa65a1898b3cd0ec05e81aaa121f9a33cb9e5eeb09d26a3a851c986ce605622f01553443058", 0xe1}], 0x1) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) socket$tipc(0x1e, 0x5, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0x824000, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000003c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}, 0x42}) r4 = dup(r2) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f00000000c0)=0x400000000008, 0x4) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000340)={0x7, 0x0, 0x800}, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000080)={0x200, 0x0, 0x2007, 0x9, 0x3f, 0x8001, 0x7f}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x230000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x7, 0x0, 0x10000, 0xfffffffffffff6ed}) unlink(&(0x7f00000002c0)='./file0\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000280)={0x689, r7, 0x10000, 0x3f}) r8 = dup(r1) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) bind$x25(r8, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) 13:38:36 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13:38:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 277.963732][T10475] FAULT_INJECTION: forcing a failure. [ 277.963732][T10475] name failslab, interval 1, probability 0, space 0, times 1 13:38:36 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) [ 278.074526][T10475] CPU: 0 PID: 10475 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 278.082477][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.092537][T10475] Call Trace: [ 278.095932][T10475] dump_stack+0x172/0x1f0 [ 278.100282][T10475] should_fail.cold+0xa/0x15 [ 278.104892][T10475] ? fault_create_debugfs_attr+0x180/0x180 [ 278.110717][T10475] ? ___might_sleep+0x163/0x2c0 [ 278.115573][T10475] __should_failslab+0x121/0x190 [ 278.115591][T10475] should_failslab+0x9/0x14 [ 278.115603][T10475] __kmalloc+0x2e0/0x770 [ 278.115615][T10475] ? trace_hardirqs_on+0x67/0x240 [ 278.115685][T10475] ? release_sock+0x156/0x1c0 [ 278.115728][T10475] ? rds_message_alloc+0x4a/0x230 [ 278.125122][T10475] rds_message_alloc+0x4a/0x230 [ 278.134346][T10475] rds_sendmsg+0x1707/0x35b0 [ 278.134379][T10475] ? rds_send_drop_to+0x1640/0x1640 [ 278.134413][T10475] ? tomoyo_socket_sendmsg+0x26/0x30 [ 278.134436][T10475] ? rds_send_drop_to+0x1640/0x1640 [ 278.149004][T10475] sock_sendmsg+0xd7/0x130 [ 278.149022][T10475] ? sock_sendmsg+0xd7/0x130 [ 278.178206][T10475] ___sys_sendmsg+0x803/0x920 [ 278.182894][T10475] ? copy_msghdr_from_user+0x440/0x440 [ 278.188342][T10475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.194564][T10475] ? __kasan_check_read+0x11/0x20 [ 278.199571][T10475] ? __fget+0x384/0x560 [ 278.203712][T10475] ? ksys_dup3+0x3e0/0x3e0 [ 278.208113][T10475] ? __fget_light+0x1a9/0x230 [ 278.212771][T10475] ? __fdget+0x1b/0x20 [ 278.216823][T10475] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 278.223045][T10475] __sys_sendmsg+0x105/0x1d0 [ 278.227618][T10475] ? __sys_sendmsg_sock+0xd0/0xd0 [ 278.232642][T10475] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 278.238085][T10475] ? do_syscall_64+0x26/0x760 [ 278.242771][T10475] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.248818][T10475] ? do_syscall_64+0x26/0x760 [ 278.253511][T10475] __x64_sys_sendmsg+0x78/0xb0 [ 278.258258][T10475] do_syscall_64+0xfa/0x760 [ 278.262763][T10475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.268636][T10475] RIP: 0033:0x459a59 [ 278.272514][T10475] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.292095][T10475] RSP: 002b:00007f12aea34c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.300493][T10475] RAX: ffffffffffffffda RBX: 00007f12aea34c90 RCX: 0000000000459a59 [ 278.308544][T10475] RDX: 0000000004000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 278.316549][T10475] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:38:36 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:36 executing program 2: r0 = socket(0x10, 0x2, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x597}]}}}]}, 0x3c}}, 0x0) [ 278.324510][T10475] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12aea356d4 [ 278.332464][T10475] R13: 00000000004c7c33 R14: 00000000004ddb08 R15: 0000000000000004 13:38:37 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 13:38:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:37 executing program 3 (fault-call:2 fault-nth:1): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 278.720972][T10510] FAULT_INJECTION: forcing a failure. [ 278.720972][T10510] name failslab, interval 1, probability 0, space 0, times 0 13:38:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040)) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="390000001300090417feb1ae7aa77cf40000ff3f0e00000000000000000010141900040044530100000000000000e91ed838d2fd0000000100", 0x39}], 0x1) 13:38:37 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 13:38:37 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) set_mempolicy(0x4001, &(0x7f0000000100)=0x80000001, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\xeb', 0x1ff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x4, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x46}, @call={0x85, 0x0, 0x0, 0x24}, @alu={0x7, 0x0, 0x9, 0x4, 0xc7b87166e011eb2, 0xffffffffffffffc0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x1ff, 0xf1, &(0x7f0000000280)=""/241, 0x40f00, 0x0, [], 0x0, 0xc, r1, 0x8, &(0x7f0000000140)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x9, 0x1, 0x8}, 0x10}, 0x70) mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0xa51000, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000440)={r6, 0xf2, "763f1a0ffbcfd52045192d78fcf02c8bb3f2bc744458c47e0a7eb3e2be881292e8df74b92f762aaa307bce46fea6c3d2d324d8f22d9e99f7a0b5eb495c7cbb0bc4bf01a2d7b6930661f0354477880fe8160e3891639d9e166b6174bc8bda6639407c83a2630560af0c95c9a4784b09da22d518862daae99e7434ccdd201624f1d64e47ccd71e7cec158d8e617e3f1fc8d03a48a2a54f08d1fbd4ad46c3e257077f0d94e611a284690a86a17633d9a245d73c33c0057889fa5958cfcd4abfdc48dd1710dda54c0293b58dfe280ae39dd29a72d800010df23bcb4c4c14df7e38299d07d2a8167616af18f2c3290a2281461999"}, &(0x7f0000000540)=0xfa) r7 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) [ 278.772764][T10510] CPU: 0 PID: 10510 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 278.781225][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.791298][T10510] Call Trace: [ 278.794643][T10510] dump_stack+0x172/0x1f0 [ 278.799001][T10510] should_fail.cold+0xa/0x15 [ 278.803624][T10510] ? fault_create_debugfs_attr+0x180/0x180 [ 278.809449][T10510] ? ___might_sleep+0x163/0x2c0 [ 278.814319][T10510] __should_failslab+0x121/0x190 [ 278.819275][T10510] should_failslab+0x9/0x14 [ 278.823791][T10510] kmem_cache_alloc+0x2aa/0x710 [ 278.828752][T10510] ? __kasan_check_read+0x11/0x20 [ 278.833794][T10510] __rds_conn_create+0x63f/0x20b0 [ 278.838824][T10510] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 278.844978][T10510] ? rds_conn_drop+0xd0/0xd0 [ 278.845000][T10510] ? lockdep_init_map+0x1be/0x6d0 [ 278.845018][T10510] rds_conn_create_outgoing+0x4b/0x60 [ 278.845037][T10510] rds_sendmsg+0x19a4/0x35b0 [ 278.864622][T10510] ? rds_send_drop_to+0x1640/0x1640 [ 278.869851][T10510] ? tomoyo_socket_sendmsg+0x26/0x30 [ 278.875158][T10510] ? rds_send_drop_to+0x1640/0x1640 [ 278.880375][T10510] sock_sendmsg+0xd7/0x130 [ 278.884817][T10510] ? sock_sendmsg+0xd7/0x130 [ 278.889429][T10510] ___sys_sendmsg+0x803/0x920 [ 278.894128][T10510] ? copy_msghdr_from_user+0x440/0x440 [ 278.899608][T10510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.905860][T10510] ? __kasan_check_read+0x11/0x20 [ 278.910903][T10510] ? __fget+0x384/0x560 [ 278.912511][T10523] block nbd4: NBD_DISCONNECT 13:38:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) [ 278.915093][T10510] ? ksys_dup3+0x3e0/0x3e0 [ 278.915118][T10510] ? __fget_light+0x1a9/0x230 [ 278.915133][T10510] ? __fdget+0x1b/0x20 [ 278.915149][T10510] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 278.915168][T10510] __sys_sendmsg+0x105/0x1d0 [ 278.915187][T10510] ? __sys_sendmsg_sock+0xd0/0xd0 [ 278.926749][ T26] audit: type=1400 audit(1571233117.365:51): avc: denied { prog_load } for pid=10519 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 278.928944][T10510] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 278.928963][T10510] ? do_syscall_64+0x26/0x760 [ 278.968930][T10525] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 278.972106][T10510] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.972124][T10510] ? do_syscall_64+0x26/0x760 [ 278.972148][T10510] __x64_sys_sendmsg+0x78/0xb0 [ 278.972163][T10510] do_syscall_64+0xfa/0x760 [ 278.972182][T10510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 279.001102][T10510] RIP: 0033:0x459a59 [ 279.001121][T10510] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.016243][T10510] RSP: 002b:00007f12aea34c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.016259][T10510] RAX: ffffffffffffffda RBX: 00007f12aea34c90 RCX: 0000000000459a59 [ 279.016267][T10510] RDX: 0000000004000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 279.016276][T10510] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:38:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0xfffffffc, 0x4) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5f454c44065b05007311"], 0xa) close(r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r6, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r6, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) r7 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff40) splice(r3, 0x0, r5, 0x0, 0x80000002, 0x0) [ 279.016285][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12aea356d4 [ 279.016294][T10510] R13: 00000000004c7c33 R14: 00000000004ddb08 R15: 0000000000000004 [ 279.080631][T10531] block nbd4: NBD_DISCONNECT [ 279.088886][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 279.088957][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:38:37 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 13:38:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:37 executing program 3 (fault-call:2 fault-nth:2): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:37 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x3ee) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0xc3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f00000000c0)={0x1, 0x0, 0x4838, 0x0, 0x4, 0x7, 0x1800}) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000080)) 13:38:38 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}], 0x48}, 0x0) [ 279.419993][T10542] FAULT_INJECTION: forcing a failure. [ 279.419993][T10542] name failslab, interval 1, probability 0, space 0, times 0 [ 279.492512][T10542] CPU: 1 PID: 10542 Comm: syz-executor.3 Not tainted 5.4.0-rc3+ #0 [ 279.501339][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.511407][T10542] Call Trace: [ 279.514692][T10542] dump_stack+0x172/0x1f0 [ 279.519017][T10542] should_fail.cold+0xa/0x15 [ 279.523596][T10542] ? fault_create_debugfs_attr+0x180/0x180 [ 279.529394][T10542] ? ___might_sleep+0x163/0x2c0 [ 279.534236][T10542] __should_failslab+0x121/0x190 [ 279.539562][T10542] should_failslab+0x9/0x14 [ 279.544060][T10542] __kmalloc+0x2e0/0x770 [ 279.548300][T10542] ? kmem_cache_alloc+0x364/0x710 [ 279.553317][T10542] ? __kasan_check_read+0x11/0x20 [ 279.558329][T10542] ? __rds_conn_create+0x666/0x20b0 [ 279.563537][T10542] __rds_conn_create+0x666/0x20b0 [ 279.568561][T10542] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 279.574714][T10542] ? rds_conn_drop+0xd0/0xd0 [ 279.579296][T10542] ? lockdep_init_map+0x1be/0x6d0 [ 279.584309][T10542] rds_conn_create_outgoing+0x4b/0x60 [ 279.589665][T10542] rds_sendmsg+0x19a4/0x35b0 [ 279.594251][T10542] ? rds_send_drop_to+0x1640/0x1640 [ 279.599444][T10542] ? tomoyo_socket_sendmsg+0x26/0x30 [ 279.604718][T10542] ? rds_send_drop_to+0x1640/0x1640 [ 279.609902][T10542] sock_sendmsg+0xd7/0x130 [ 279.614386][T10542] ? sock_sendmsg+0xd7/0x130 [ 279.618964][T10542] ___sys_sendmsg+0x803/0x920 [ 279.623631][T10542] ? copy_msghdr_from_user+0x440/0x440 [ 279.629081][T10542] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.636095][T10542] ? __kasan_check_read+0x11/0x20 [ 279.641105][T10542] ? __fget+0x384/0x560 [ 279.645251][T10542] ? ksys_dup3+0x3e0/0x3e0 [ 279.649654][T10542] ? __fget_light+0x1a9/0x230 [ 279.654315][T10542] ? __fdget+0x1b/0x20 [ 279.658367][T10542] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 279.664593][T10542] __sys_sendmsg+0x105/0x1d0 [ 279.669166][T10542] ? __sys_sendmsg_sock+0xd0/0xd0 [ 279.674271][T10542] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 279.679727][T10542] ? do_syscall_64+0x26/0x760 [ 279.684394][T10542] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 279.690444][T10542] ? do_syscall_64+0x26/0x760 [ 279.695110][T10542] __x64_sys_sendmsg+0x78/0xb0 [ 279.699861][T10542] do_syscall_64+0xfa/0x760 [ 279.704350][T10542] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 279.710242][T10542] RIP: 0033:0x459a59 [ 279.714133][T10542] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.733728][T10542] RSP: 002b:00007f12aea34c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.742213][T10542] RAX: ffffffffffffffda RBX: 00007f12aea34c90 RCX: 0000000000459a59 [ 279.750169][T10542] RDX: 0000000004000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 279.758121][T10542] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 279.766074][T10542] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12aea356d4 [ 279.774029][T10542] R13: 00000000004c7c33 R14: 00000000004ddb08 R15: 0000000000000004 [ 279.796790][T10554] block nbd4: NBD_DISCONNECT 13:38:38 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}], 0x48}, 0x0) 13:38:38 executing program 4: socket(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab08) 13:38:38 executing program 3 (fault-call:2 fault-nth:3): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 279.884123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 279.890002][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:38:38 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}], 0x48}, 0x0) [ 280.037957][T10564] block nbd4: NBD_DISCONNECT 13:38:38 executing program 4: socket(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab08) [ 280.163880][T10572] block nbd4: NBD_DISCONNECT 13:38:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffdea, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/mixer\x00', 0x40, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0xa, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xd405, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffffffffffe8a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r4, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000600)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000880)}, {&(0x7f0000000340)="6227157b6388f20a01", 0x9}, {&(0x7f0000000400)="4c95aad07f3afcfa35fa25644084c09a0c48810f0243e8777de7c4134fc1efcc184a8c88806194ad1ca57f84803c3ef6708885bde35febac27d869f86fe5398f0b7af6e28877c299aeda2e35f5d470c45767f77abf3c521942060233fd70e528ce7b99ad29b242d268a0", 0x6a}, {&(0x7f0000002800)="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", 0x800}], 0x4, &(0x7f0000000480)="b20ea124f9", 0x5, 0x4000}, 0x100014c4) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x4be4c0}], 0x1, 0x0, 0x127, 0xa6}, 0x3f00) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)) 13:38:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xf4b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 13:38:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:40 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 13:38:40 executing program 4: socket(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab08) 13:38:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 282.265694][T10584] block nbd4: NBD_DISCONNECT 13:38:40 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 13:38:40 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab08) 13:38:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 282.486703][T10598] block nbd4: shutting down sockets 13:38:41 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 13:38:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab08) 13:38:41 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) [ 282.738546][T10611] block nbd4: shutting down sockets 13:38:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffdea, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/mixer\x00', 0x40, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0xa, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xd405, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffffffffffe8a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r4, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000600)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000880)}, {&(0x7f0000000340)="6227157b6388f20a01", 0x9}, {&(0x7f0000000400)="4c95aad07f3afcfa35fa25644084c09a0c48810f0243e8777de7c4134fc1efcc184a8c88806194ad1ca57f84803c3ef6708885bde35febac27d869f86fe5398f0b7af6e28877c299aeda2e35f5d470c45767f77abf3c521942060233fd70e528ce7b99ad29b242d268a0", 0x6a}, {&(0x7f0000002800)="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", 0x800}], 0x4, &(0x7f0000000480)="b20ea124f9", 0x5, 0x4000}, 0x100014c4) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x4be4c0}], 0x1, 0x0, 0x127, 0xa6}, 0x3f00) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)) 13:38:41 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x3, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:41 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13:38:41 executing program 4: r0 = socket(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab08) 13:38:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x10000, 0xfffffffb}]}, 0xc, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0) write$selinux_attr(r2, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571) 13:38:41 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) [ 283.216285][T10625] block nbd4: shutting down sockets 13:38:41 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x4, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:41 executing program 4 (fault-call:4 fault-nth:0): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:41 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x200fff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) accept4$unix(r5, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x1000) r6 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 13:38:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:42 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) [ 283.597516][T10656] FAULT_INJECTION: forcing a failure. [ 283.597516][T10656] name failslab, interval 1, probability 0, space 0, times 0 [ 283.614366][T10656] CPU: 1 PID: 10656 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 283.622294][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.632361][T10656] Call Trace: [ 283.635677][T10656] dump_stack+0x172/0x1f0 [ 283.640037][T10656] should_fail.cold+0xa/0x15 [ 283.644654][T10656] ? fault_create_debugfs_attr+0x180/0x180 [ 283.650486][T10656] ? ___might_sleep+0x163/0x2c0 [ 283.655366][T10656] __should_failslab+0x121/0x190 [ 283.660329][T10656] should_failslab+0x9/0x14 [ 283.664840][T10656] __kmalloc+0x2e0/0x770 [ 283.669075][T10656] ? mark_held_locks+0xf0/0xf0 [ 283.673830][T10656] ? _parse_integer+0x190/0x190 [ 283.678681][T10656] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 283.684394][T10656] tomoyo_realpath_from_path+0xcd/0x7b0 [ 283.689930][T10656] ? tomoyo_path_number_perm+0x193/0x520 [ 283.695557][T10656] tomoyo_path_number_perm+0x1dd/0x520 [ 283.701003][T10656] ? tomoyo_path_number_perm+0x193/0x520 [ 283.706651][T10656] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 283.712460][T10656] ? __f_unlock_pos+0x19/0x20 [ 283.717153][T10656] ? ___might_sleep+0x163/0x2c0 [ 283.722010][T10656] ? selinux_file_mprotect+0x620/0x620 [ 283.727475][T10656] ? __fget+0x384/0x560 [ 283.731631][T10656] ? ksys_dup3+0x3e0/0x3e0 [ 283.736052][T10656] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 283.742282][T10656] ? fput_many+0x12c/0x1a0 [ 283.746690][T10656] tomoyo_file_ioctl+0x23/0x30 [ 283.751446][T10656] security_file_ioctl+0x77/0xc0 [ 283.756379][T10656] ksys_ioctl+0x57/0xd0 [ 283.760521][T10656] __x64_sys_ioctl+0x73/0xb0 [ 283.765096][T10656] do_syscall_64+0xfa/0x760 [ 283.769588][T10656] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 283.775462][T10656] RIP: 0033:0x459a59 [ 283.779341][T10656] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 283.798937][T10656] RSP: 002b:00007f86a9d8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.807336][T10656] RAX: ffffffffffffffda RBX: 00007f86a9d8fc90 RCX: 0000000000459a59 [ 283.815746][T10656] RDX: 0000000000000000 RSI: 000000000000ab08 RDI: 0000000000000004 [ 283.823697][T10656] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 283.831671][T10656] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86a9d906d4 [ 283.839633][T10656] R13: 00000000004c33ab R14: 00000000004d70e8 R15: 0000000000000006 [ 283.857712][T10656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 283.874440][T10656] block nbd4: NBD_DISCONNECT [ 283.882324][T10656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10656 comm=syz-executor.4 [ 283.917360][T10655] block nbd4: Disconnected due to user request. [ 283.923649][T10655] block nbd4: shutting down sockets [ 284.044124][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 284.049988][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:38:42 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13:38:42 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x8, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:42 executing program 4 (fault-call:4 fault-nth:1): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 284.157750][T10676] FAULT_INJECTION: forcing a failure. [ 284.157750][T10676] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 284.170987][T10676] CPU: 1 PID: 10676 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 284.178895][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.178912][T10676] Call Trace: [ 284.178938][T10676] dump_stack+0x172/0x1f0 [ 284.178960][T10676] should_fail.cold+0xa/0x15 [ 284.178980][T10676] ? fault_create_debugfs_attr+0x180/0x180 [ 284.178997][T10676] ? __kasan_check_read+0x11/0x20 [ 284.179017][T10676] should_fail_alloc_page+0x50/0x60 [ 284.179032][T10676] __alloc_pages_nodemask+0x1a1/0x900 [ 284.179057][T10676] ? avc_has_extended_perms+0x8e4/0x1100 [ 284.228305][T10676] ? __alloc_pages_slowpath+0x2920/0x2920 [ 284.234035][T10676] ? __kasan_check_read+0x11/0x20 [ 284.239095][T10676] ? fault_create_debugfs_attr+0x180/0x180 [ 284.244920][T10676] cache_grow_begin+0x90/0xd20 [ 284.249703][T10676] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 284.255598][T10676] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 284.255617][T10676] __kmalloc+0x6b2/0x770 [ 284.255631][T10676] ? mark_held_locks+0xf0/0xf0 [ 284.255650][T10676] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 284.255666][T10676] tomoyo_realpath_from_path+0xcd/0x7b0 [ 284.255677][T10676] ? tomoyo_path_number_perm+0x193/0x520 [ 284.255697][T10676] tomoyo_path_number_perm+0x1dd/0x520 [ 284.287739][T10676] ? tomoyo_path_number_perm+0x193/0x520 [ 284.287760][T10676] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 284.287774][T10676] ? __f_unlock_pos+0x19/0x20 [ 284.287806][T10676] ? ___might_sleep+0x163/0x2c0 [ 284.314218][T10676] ? selinux_file_mprotect+0x620/0x620 [ 284.319951][T10676] ? __fget+0x384/0x560 [ 284.324122][T10676] ? ksys_dup3+0x3e0/0x3e0 [ 284.328550][T10676] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 284.334796][T10676] ? fput_many+0x12c/0x1a0 [ 284.339229][T10676] tomoyo_file_ioctl+0x23/0x30 [ 284.344008][T10676] security_file_ioctl+0x77/0xc0 [ 284.348964][T10676] ksys_ioctl+0x57/0xd0 [ 284.353135][T10676] __x64_sys_ioctl+0x73/0xb0 13:38:42 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0xa, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:42 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) [ 284.357746][T10676] do_syscall_64+0xfa/0x760 [ 284.362265][T10676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.368178][T10676] RIP: 0033:0x459a59 [ 284.372075][T10676] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 284.391775][T10676] RSP: 002b:00007f86a9d8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.400204][T10676] RAX: ffffffffffffffda RBX: 00007f86a9d8fc90 RCX: 0000000000459a59 13:38:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x10, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 284.408191][T10676] RDX: 0000000000000000 RSI: 000000000000ab08 RDI: 0000000000000004 [ 284.416165][T10676] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 284.416174][T10676] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86a9d906d4 [ 284.416183][T10676] R13: 00000000004c33ab R14: 00000000004d70e8 R15: 0000000000000006 13:38:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 284.534419][T10676] block nbd4: NBD_DISCONNECT [ 284.545157][T10676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10676 comm=syz-executor.4 13:38:43 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{0x0}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) [ 284.605117][ T26] audit: type=1800 audit(1571233123.205:52): pid=10661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16653 res=0 13:38:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) sendmsg$kcm(r3, &(0x7f0000001b40)={&(0x7f0000000240)=@isdn={0x22, 0x6, 0x8, 0x1, 0x7}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)="91765d6fde6dbacb3c821b7e44390968b5db64bd1e2ee3f6b5dae6dd479897aa3063e2ee9ced1b4c57a16be35e1ba44493521fb192b5b4321b0627a7633df4d11e945136af7627e5e78a53e38e197bfbefc5d2fbe8436e892bd770b1dd666e2d22c7ed7439c6299d5154f7d6c31edbe65519cea7ad48714f2e342aaa1cc5a4b302fc8b96571f97b1c6b61d9ed23433bc0fee8f7c1b3582051899cd2d", 0x9c}, {&(0x7f0000000380)="0c0d2dbc87f0d8b27da9687ac021ce68ef169e97705ec1bb35f70ac3739bd3f7fa84f690b605ac03643532a1a18406d3ad399bca0963964c78b971cb310c77ffba162601bbf9bc9411ef837e0317337bc979b6dc7d637fd38e706e11609d8ba989028088a5a4fd6c3272d4cf2d1c7c058f60641bf3e775fb83f25f44e11db8ddf25c0f60d09f4c0406ce0350bec9462515fb2d2cc53ad43131cd199703bd6fca24c6d2ab1ac10df9af44a73d2c7379106af827cf727b9e82c7c28e1c2969c58630af2780fafba5f3275d5c2f8868a92e6f2e3e01fc97", 0xd6}, {&(0x7f0000000480)="7366eeef3cb5801163e75a3fcc1f39ab308ce6d4d4de624e910494a60dab8b22b8848b72aae42c7105d422771596a86d0bf8c0aee3079999cea01f24c57af6ff5d18ebb05d7cdff24dc6fa818612f37d1e49957b70da71a807506b9976085058a40809509e110d4a2f438a4deef4086d00061c1c40ef381f5f775a97ccf6da491dde038e37677e3d7bfb3f97dfee83b0daa1bb6678f5534ce78f010df05bd769baae89787d0bf3a7aebdc673f664cfd6d98561b3590827263d", 0xb9}, {&(0x7f0000000540)="79a132038181a1a8529fd9aee6692a9ba06c44d0cc0d31a5f22c9064a9469a4d035f48c06ed89d6088ea15a2e05596aee0366abe49de0d6063732d3c0c13e59f29de9ca802433a7621ff545fd2102c9ee9b3c0085adf4a4c0ae1f913648298ecf4815254b157344a12c8af81e2e23a431d349172ad0c67198c26df1b36d8d00bba8320d4447ca99e155135bc60bc1458ebef17475354eeaece3963340c1b6da8caf86222b248f3b240148e73a493e6c2b90dba170fc2a7dc85d2cd1d38bfc0a68271fa2106ce34b828", 0xc9}], 0x4, &(0x7f0000002000)=[{0xf0, 0xd00dce705118fd84, 0x7fff, "5795db126b9e589b237bbb9d15573a6fefd742774606baf4bf0d9c5c500e7e50b92c4279c62a0a42dc8848a4b76d2b58ce695365c3e68e1a74fbb43edd6ecf309bb693e531eb3a4a7092bb953d06badc8e797606fb487e23dcb95c1d8dff26fad0609c829c8d4a1a941f372a1840668a4b6de384ec2ee56bab520104bc46155f8dfed567721be48d21f1e207bcd505bfe6000000000000000000000000000000000000091afda03029015e24b9e6fc13fd50e8690bc41b02ac2dbe4fd7abef9621c5252a9c2dbc3d8d51fdc20abda52b010034b76e3cb9cbfa"}, {0x48, 0x10b, 0x9bfc, "d1df12578f43b7d2cbb1aeab7d317304114844c063fa61b9accc9ba98aae41442a644f4bc61b665a3ac803a392af981cc791a3631f78"}, {0xd0, 0x104, 0x80000001, "b143d3f25b36d53d2bde0619c77c17bfc2b0cae76c40c4c5667ed19b9c47fca13c92a45bd693f2b04c1941c451198532ab18f627ae10bd0f0a4d6415a6acef1f8c9be970cdc7b51e12b0dd8f64c0f75d637722b5a7d7ec1c6057d1008b8ebc205a0be44ea55ac67c9e25d556f944e6c484e89d23e63fdc9922d94d691eb583c6d0352833cd6f3fe3f3b393e17e4018334067a3ef77375d261e3266ec4dfb54a396f5fcb8b89a76d3b7ebb09a5397d4344d3aae06805da0b941ae9f6f994f0d92"}, {0x70, 0x6, 0x5, "44320e2a99450d4f63a22856fcaa4e56aec16bea26119ca493732700a25f8ca30469f98e4f0b5e63af49b4524ebb1a5854eae3e32e9040254602b37c562800b6de7e03b4c178a0cd7aabc267f1595eff2382c3669268f47e1087fcc42b"}, {0xb0, 0x100, 0x81, "c0c97e5eea136ecb89b7035a99c01fbc8a0e71c9cbc9225d27bd8231c1eda9d3a8307449271934b7abc31ce90e58aac43eb4f3476a91e30969a0b0eb5c78efe7f6ba43b361a019e0736b517e56b45c2b1569edf9d1592f76a9ba2c34d47ffd78a1faf77982c07cfb3798ec6c71f67eb4e20e9ebd6ada40b9667105d7220ce95ac09f47b5eace6b298e0822c770eae020e0f2bfa7104bfd43dd75532c9b0b"}, {0x108, 0x10b, 0x80000001, "3942daab979ad186ad422a90b90200c36fa76c26ec3292488e72bd4319c4f54b014b24101e4abfe50e4b3cecb154446e8ba751c3e9cef958695ef62354b8a8b4d594d3cf3010317e8e199f05db309787d4aed72958787240a890c75d685d136ab3b06680cb8b051a0347618ea51e64a67f94fefde097f5c301df0efc3cbef85c0e43e205c09c2fde06b174061f4e7e28dadcacbe2391307e78b8ade8637ea6b09d5127ef1d4abd8aadf4ff7be1dd318cf1832a6eaa84d92526fd041ebd451c55aa4cc06f686d4668af168c329d0c5ff89049cfe918335cbafaba1ec1ab4144f42d26312df138001b65c4530fa4c223d3ee"}, {0x90, 0x307, 0xff, "86a278c5398bf9120a6c83424f871208e3d3615cf7a64ffc17133d6122a4eb2cbf6229a9f3b4178d2035985fbf24ca1d85c78dea8c20ed937c1e8016d6e70d5a8d56ab536886c7d24e1ba12232d239877a3867f6b39d9c81ade64b7bbccb9f72e3071d6b61d156a2b9bf0ec93014405769bf62bae38f0248d410d52343"}, {0x40, 0x94, 0x55, "a212e5ba43d12acfab8df5aa2d955cba8908f1c7d256978edd143ce898076e476b9535e78a44492a35"}, {0x1010, 0x8d05fc6fc99274c, 0x101, "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"}], 0x1510}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x36, 0x57, &(0x7f0000000100)="c71bec783226026af42050ba5a2901f4356c18d70442e0cf625b033e37118cae3cf11e873d039c7101f51797f67a28481aa3bda8f95f", &(0x7f00000001c0)=""/87}, 0x1b) 13:38:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:43 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{0x0}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13:38:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x1b, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 284.890162][ T26] audit: type=1400 audit(1571233123.485:53): avc: denied { prog_run } for pid=10705 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 284.925208][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 284.931078][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 285.117958][T10672] block nbd4: Disconnected due to user request. [ 285.144193][T10672] block nbd4: shutting down sockets 13:38:43 executing program 4 (fault-call:4 fault-nth:2): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:43 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{0x0}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13:38:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@loopback}}, &(0x7f0000000bc0)=0xe8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f00000000c0)="8c0485004b10488898bcc52373257ddecfba3cb38a7b3a0da3e8b33985fe0851ea9a3894837146511914be673fad1d76d9305f814cd24c3ed8327de4d9c020bae548e81843944a3adc078b0a0dc7b720fde3cd6a59573e980c87a57d36169e7d4b4f0920f23b994199eaa7eaf7706b79e657f35700622f8b9abdeff8a183449a9732950b67e1fae73ad778e714321d3438e69772fe9de5a42e1a118830ba31802f669455a3eeef08ec0b00f74d420a291aa71ab87f343644c6082b0682ea", 0xbe}, {&(0x7f00000001c0)="dcc5cfdb0353a16334a833e13aed2c62", 0x10}, {&(0x7f0000000200)="081173756b6238b5c8a09dafa902719eccbd3d33ed32e17746c148477590821a98d607678a3ebfa2f0d7422e08e903891b47b5ecbc1f821e049977411b4879ff6316ed6cec81f278a0316846dbc8c322be2700bb9108964f29b92f91ff74769db36962e0439029792eba059bd6a2c0dd192504cfcab032571df72b19a423f8811e0d59e3cd3912e24f6d3d09754c0b6890109e5784753e6972963188cc4286a0661e9e95cdfb5837fa86550ccd3dfe62c325b16eba504ae92f711b4c9e7b6b42218febc292209968", 0xc8}, {&(0x7f0000000300)="9592d71da88e5ebf2585eb98f248f0071f88e3b3d7dffb8afe47b89e3d45a6a93f466b4e8a99113582acaae4382d7dba637e9279521af59772d8974cb022cf0eb8d1a93fb9d4fa90eed94dcf3555f9ca9e0ecebb579ae0bb8e1c563ea693486d7505c4682e092f", 0x67}, {&(0x7f0000000380)="b4daed5f2d64942cca14c02e47cdac21738dbfd7d093cb4115d960d2446d624555ecf9b48170fb4043321875965e562dd60d4bf2d15c6945afac981b4b76b2214b30daf9d24192632b3b8fb81e2256f9f287bc2c7eb5b81d292443916796f29f925d8508cd4b0dc4b2ff95e4cb1e424037afc3677ae71b2305d70911ac70b8a98b6398e517fd2f3d2dbe4b3510", 0x8d}, {&(0x7f0000000c00)="373424aa502c00958694afd76bcac8c91d2aa72ffc3a647960427600ccf6ccad2a68ce09e76d526f9104a512793d24e9eea396adb01f909739c24eedc99ccf409ba386bb71175296139ee03315ddd149507f61e34004479e681b3d56ba9ebe08ebd600f0877afa04a3245f4689e9a79a1d4e8ce99e71871d1f7de7624074bed5b8ba5dd7620f7571f29aefc381e831e0c9a66ef9c5fdf6a048dde17145bad8c5", 0xa0}, {&(0x7f0000000500)="9a51301afeb1e2ffd5b3ca4b890f4e530d3a18d1fac7c9456f22b300f1e0ee20b23c00497b67b557d76e0ade757c108c55a3c0d100972988597ed38273910bfdb7701326d587d4bdbce586af4ad786d87d970ce79099a28a72748cb349d3059252eab3d3d2fe0ad8703ae02d3ad38f521cd569d0238e08b2bd304e9702dc007a146d06afb084c8d2879f247a42eb94db653a703a95f5316ac4b10e0a2042269d1d03bdedce959c86749f3757208b85d2f7d7beb6ce", 0xb5}, {&(0x7f0000000600)="701fd76ff2e3b9c47a4bd5971ebb11aa9c16e023aaa1dd1ff1f7a602ddb77a045ad088305f385a933293deb8f26caa16f897c22068baf0e8da92c68d08ea44b5e55bf3c1c82c7ac93e087dce9fdf01b2dc0134942595b360ae65ef3fe9ba097cdf9042e6a1c7b6e19c7ab01d9662f6d37467ef40b5cccd4d4e16d12d148f28e39ea51a2c51023ce75ce96f02e7daf7fbcdc6e018d7608bbf7e286b536a089f49531a3cb486582279a9d90051973c32bed5e927adff79aeff64937c17ff0e8ec3", 0xc0}, {&(0x7f00000006c0)="da20c190bbd0d18d87fa47d1991a5322ee2a5f610847607aca62af19ad9ea5e165b1f1affb564d56933f6cfe4316346ab89683da0cb51a32fa1a8ce1d297d828d88f54af2f2224d7533c62b02c2b3ae8a18d1c8ae8c1b5af4ef76032127792e28d4e1370e6065e4a1693e25d8d7d97f5711f03cf0843512375f1b5bb98df956703bc0b40ac59f2e55ca0a7cb78cbc22d", 0x90}, {&(0x7f0000000780)="8d5d09434f1b37bb1d586d7ac03d7ffc95a4e7285ff4e20e194f05c938dc03ef549f800e02ce3d13495813e825c5f97029a5b05e8c421fae7fec6487d6faf5f87135ac5adf1052c5", 0x48}], 0xa, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000980)='/dev/autofs\x00', 0x115000, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000009c0)={0xd1515d60811df401, 0x0, [0x6622, 0x5, 0x0, 0x6]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\r\x00\x00\x00\x00\b\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, r7, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @dev={[], 0x29}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=@bridge_newneigh={0x6c, 0x1c, 0x400, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x0, 0x0, r1, 0x14, 0x20}, [@NDA_DST_MAC={0xc, 0x1, @remote}, @NDA_DST_MAC={0xc}, @NDA_PORT={0x8, 0x6, 0x4e04}, @NDA_LLADDR={0xc, 0x2, @broadcast}, @NDA_IFINDEX={0xfffffffffffffec8, 0x8, r7}, @NDA_SRC_VNI={0x8, 0xb, 0xeb}, @NDA_VLAN={0x8, 0x5, 0x4}, @NDA_DST_MAC={0xc, 0x1, @broadcast}]}, 0x6c}}, 0x800) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000a40)={0x3, 0x0, [{}, {}, {}]}) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2b) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000dc0)={0x0, 0xf, 0x31, "6e6d1e575e526edd1420f72aae53ae47b068289437d2b1a56475e78c74e3b98f10a52a38b9c55fc3db809cd8cf283fc2b42364cbe8b916e319d5e410", 0x19, "24f26cd463baebbe02a6036c72ab2c9a7f455cf3731f0ae16165a26f9c67b6eebbcc59fc0349fc0b1453588e71abb16112f530bb34533a8410e0a8f0", 0x20}) 13:38:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:43 executing program 5 (fault-call:2 fault-nth:0): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x3, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 285.357036][T10725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10725 comm=syz-executor.0 [ 285.395502][T10738] FAULT_INJECTION: forcing a failure. [ 285.395502][T10738] name failslab, interval 1, probability 0, space 0, times 0 [ 285.423373][T10738] CPU: 0 PID: 10738 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 285.431307][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.441371][T10738] Call Trace: [ 285.444682][T10738] dump_stack+0x172/0x1f0 [ 285.449016][T10738] should_fail.cold+0xa/0x15 [ 285.453611][T10738] ? fault_create_debugfs_attr+0x180/0x180 [ 285.459494][T10738] ? ___might_sleep+0x163/0x2c0 [ 285.464367][T10738] __should_failslab+0x121/0x190 [ 285.469323][T10738] should_failslab+0x9/0x14 [ 285.473832][T10738] __kmalloc+0x2e0/0x770 [ 285.478085][T10738] ? move_addr_to_kernel.part.0+0x110/0x110 [ 285.483992][T10738] ? sock_kmalloc+0xc6/0x120 [ 285.488588][T10738] sock_kmalloc+0xc6/0x120 [ 285.492996][T10738] ___sys_sendmsg+0x5bd/0x920 [ 285.497661][T10738] ? copy_msghdr_from_user+0x440/0x440 [ 285.503111][T10738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.509335][T10738] ? __kasan_check_read+0x11/0x20 [ 285.514365][T10738] ? __fget+0x384/0x560 [ 285.518509][T10738] ? ksys_dup3+0x3e0/0x3e0 [ 285.522911][T10738] ? __fget_light+0x1a9/0x230 [ 285.527573][T10738] ? __fdget+0x1b/0x20 [ 285.531644][T10738] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 285.537871][T10738] __sys_sendmsg+0x105/0x1d0 [ 285.542449][T10738] ? __sys_sendmsg_sock+0xd0/0xd0 [ 285.547491][T10738] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 285.552962][T10738] ? do_syscall_64+0x26/0x760 [ 285.557634][T10738] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 285.563690][T10738] ? do_syscall_64+0x26/0x760 [ 285.568363][T10738] __x64_sys_sendmsg+0x78/0xb0 [ 285.573118][T10738] do_syscall_64+0xfa/0x760 [ 285.577609][T10738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 285.583483][T10738] RIP: 0033:0x459a59 [ 285.587372][T10738] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.606962][T10738] RSP: 002b:00007fbfb5494c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.615358][T10738] RAX: ffffffffffffffda RBX: 00007fbfb5494c90 RCX: 0000000000459a59 [ 285.623403][T10738] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 285.631358][T10738] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 285.639322][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbfb54956d4 [ 285.647292][T10738] R13: 00000000004c7c33 R14: 00000000004ddb08 R15: 0000000000000004 13:38:44 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:44 executing program 0: socket(0x2, 0x3, 0x100000001) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000180)={0x9, 0x8, 0x28, 0x3, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x10000000d) sendto$inet(0xffffffffffffffff, 0x0, 0x38f4168b7592eaea, 0x0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) setsockopt$packet_int(r7, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r8, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r8, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x800, 0xffff, 0x3, 0x20, 0x5}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000500)={r9, @in6={{0xa, 0x4e20, 0xd9, @rand_addr="658d41b85a585445fc0291ff12c082cb", 0x3}}}, &(0x7f00000005c0)=0x84) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000080)) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100000000000000c300"/42], 0x2a) 13:38:44 executing program 5 (fault-call:2 fault-nth:1): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) [ 285.784865][T10745] FAULT_INJECTION: forcing a failure. [ 285.784865][T10745] name failslab, interval 1, probability 0, space 0, times 0 [ 285.892225][T10753] FAULT_INJECTION: forcing a failure. [ 285.892225][T10753] name failslab, interval 1, probability 0, space 0, times 0 [ 285.892617][T10745] CPU: 1 PID: 10745 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 285.912758][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.922826][T10745] Call Trace: [ 285.926148][T10745] dump_stack+0x172/0x1f0 [ 285.930492][T10745] should_fail.cold+0xa/0x15 [ 285.935119][T10745] ? fault_create_debugfs_attr+0x180/0x180 [ 285.940944][T10745] ? ___might_sleep+0x163/0x2c0 [ 285.945821][T10745] __should_failslab+0x121/0x190 [ 285.950766][T10745] should_failslab+0x9/0x14 [ 285.955297][T10745] __kmalloc+0x2e0/0x770 [ 285.959554][T10745] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.965805][T10745] ? d_absolute_path+0x11b/0x170 [ 285.970744][T10745] ? __d_path+0x140/0x140 [ 285.975096][T10745] ? tomoyo_encode2.part.0+0xf5/0x400 [ 285.980486][T10745] tomoyo_encode2.part.0+0xf5/0x400 [ 285.985696][T10745] tomoyo_encode+0x2b/0x50 [ 285.990132][T10745] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 285.995789][T10745] tomoyo_path_number_perm+0x1dd/0x520 [ 286.001258][T10745] ? tomoyo_path_number_perm+0x193/0x520 [ 286.006924][T10745] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 286.012740][T10745] ? __f_unlock_pos+0x19/0x20 [ 286.017441][T10745] ? ___might_sleep+0x163/0x2c0 [ 286.022320][T10745] ? selinux_file_mprotect+0x620/0x620 [ 286.027786][T10745] ? __fget+0x384/0x560 [ 286.031968][T10745] ? ksys_dup3+0x3e0/0x3e0 [ 286.036482][T10745] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 286.042736][T10745] ? fput_many+0x12c/0x1a0 [ 286.047177][T10745] tomoyo_file_ioctl+0x23/0x30 [ 286.051962][T10745] security_file_ioctl+0x77/0xc0 [ 286.056923][T10745] ksys_ioctl+0x57/0xd0 [ 286.061101][T10745] __x64_sys_ioctl+0x73/0xb0 [ 286.065698][T10745] do_syscall_64+0xfa/0x760 [ 286.070222][T10745] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.076562][T10745] RIP: 0033:0x459a59 [ 286.080466][T10745] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.101047][T10745] RSP: 002b:00007f86a9d8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.109475][T10745] RAX: ffffffffffffffda RBX: 00007f86a9d8fc90 RCX: 0000000000459a59 [ 286.117461][T10745] RDX: 0000000000000000 RSI: 000000000000ab08 RDI: 0000000000000004 [ 286.125443][T10745] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 286.133425][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86a9d906d4 13:38:44 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x8, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 286.141412][T10745] R13: 00000000004c33ab R14: 00000000004d70e8 R15: 0000000000000006 [ 286.149781][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 286.150933][T10753] CPU: 0 PID: 10753 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 286.155588][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 286.163383][T10753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.163393][T10753] Call Trace: [ 286.182437][T10753] dump_stack+0x172/0x1f0 [ 286.186777][T10753] should_fail.cold+0xa/0x15 13:38:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 286.191397][T10753] ? fault_create_debugfs_attr+0x180/0x180 [ 286.197232][T10753] ? ___might_sleep+0x163/0x2c0 [ 286.202109][T10753] __should_failslab+0x121/0x190 [ 286.207069][T10753] should_failslab+0x9/0x14 [ 286.211591][T10753] __kmalloc_track_caller+0x2dc/0x760 [ 286.216978][T10753] ? trace_hardirqs_on+0x67/0x240 [ 286.222018][T10753] ? release_sock+0x156/0x1c0 [ 286.226721][T10753] ? rds_sendmsg+0x22f5/0x35b0 [ 286.231503][T10753] krealloc+0x66/0xd0 [ 286.235494][T10753] rds_sendmsg+0x22f5/0x35b0 [ 286.240113][T10753] ? rds_send_drop_to+0x1640/0x1640 [ 286.245358][T10753] ? tomoyo_socket_sendmsg+0x26/0x30 [ 286.250654][T10753] ? rds_send_drop_to+0x1640/0x1640 [ 286.255851][T10753] sock_sendmsg+0xd7/0x130 [ 286.255864][T10753] ? sock_sendmsg+0xd7/0x130 [ 286.255880][T10753] ___sys_sendmsg+0x803/0x920 [ 286.255897][T10753] ? copy_msghdr_from_user+0x440/0x440 [ 286.255919][T10753] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.281294][T10753] ? __kasan_check_read+0x11/0x20 [ 286.286351][T10753] ? __fget+0x384/0x560 [ 286.290535][T10753] ? ksys_dup3+0x3e0/0x3e0 [ 286.295091][T10753] ? __fget_light+0x1a9/0x230 [ 286.299790][T10753] ? __fdget+0x1b/0x20 [ 286.303877][T10753] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 286.310132][T10753] __sys_sendmsg+0x105/0x1d0 [ 286.314718][T10753] ? __sys_sendmsg_sock+0xd0/0xd0 [ 286.319743][T10753] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 286.325187][T10753] ? do_syscall_64+0x26/0x760 [ 286.329848][T10753] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.335896][T10753] ? do_syscall_64+0x26/0x760 [ 286.340560][T10753] __x64_sys_sendmsg+0x78/0xb0 [ 286.345309][T10753] do_syscall_64+0xfa/0x760 [ 286.349803][T10753] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.355674][T10753] RIP: 0033:0x459a59 [ 286.359553][T10753] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.379146][T10753] RSP: 002b:00007fbfb5494c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.387545][T10753] RAX: ffffffffffffffda RBX: 00007fbfb5494c90 RCX: 0000000000459a59 [ 286.395499][T10753] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 286.403451][T10753] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 286.411405][T10753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbfb54956d4 [ 286.419359][T10753] R13: 00000000004c7c33 R14: 00000000004ddb08 R15: 0000000000000004 [ 286.502638][T10745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.604503][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 286.610833][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:38:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab08) 13:38:45 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xfc, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:45 executing program 5 (fault-call:2 fault-nth:2): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 286.697720][T10745] block nbd4: NBD_DISCONNECT [ 286.702572][T10745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10745 comm=syz-executor.4 [ 286.716165][T10745] block nbd4: Disconnected due to user request. [ 286.722508][T10745] block nbd4: shutting down sockets [ 286.792421][T10773] FAULT_INJECTION: forcing a failure. [ 286.792421][T10773] name failslab, interval 1, probability 0, space 0, times 0 [ 286.824223][T10773] CPU: 1 PID: 10773 Comm: syz-executor.5 Not tainted 5.4.0-rc3+ #0 [ 286.832151][T10773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.842205][T10773] Call Trace: [ 286.845500][T10773] dump_stack+0x172/0x1f0 [ 286.849822][T10773] should_fail.cold+0xa/0x15 [ 286.854415][T10773] ? fault_create_debugfs_attr+0x180/0x180 [ 286.860208][T10773] ? ___might_sleep+0x163/0x2c0 [ 286.865047][T10773] __should_failslab+0x121/0x190 [ 286.870073][T10773] should_failslab+0x9/0x14 [ 286.874560][T10773] __kmalloc+0x2e0/0x770 [ 286.878785][T10773] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 286.884745][T10773] ? __kmalloc_track_caller+0x5f8/0x760 [ 286.890306][T10773] ? trace_hardirqs_on+0x67/0x240 [ 286.895316][T10773] ? release_sock+0x156/0x1c0 [ 286.899982][T10773] ? rds_rdma_extra_size+0xc3/0x390 [ 286.905165][T10773] rds_rdma_extra_size+0xc3/0x390 [ 286.910174][T10773] rds_sendmsg+0x21ea/0x35b0 [ 286.914762][T10773] ? rds_send_drop_to+0x1640/0x1640 [ 286.919962][T10773] ? tomoyo_socket_sendmsg+0x26/0x30 [ 286.925232][T10773] ? rds_send_drop_to+0x1640/0x1640 [ 286.930413][T10773] sock_sendmsg+0xd7/0x130 [ 286.934822][T10773] ? sock_sendmsg+0xd7/0x130 [ 286.939396][T10773] ___sys_sendmsg+0x803/0x920 [ 286.944064][T10773] ? copy_msghdr_from_user+0x440/0x440 [ 286.949509][T10773] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.955733][T10773] ? __kasan_check_read+0x11/0x20 [ 286.960744][T10773] ? __fget+0x384/0x560 [ 286.964887][T10773] ? ksys_dup3+0x3e0/0x3e0 [ 286.969292][T10773] ? __fget_light+0x1a9/0x230 [ 286.973950][T10773] ? __fdget+0x1b/0x20 [ 286.978003][T10773] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 286.984240][T10773] __sys_sendmsg+0x105/0x1d0 [ 286.988815][T10773] ? __sys_sendmsg_sock+0xd0/0xd0 [ 286.993831][T10773] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 286.999272][T10773] ? do_syscall_64+0x26/0x760 [ 287.003930][T10773] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.009982][T10773] ? do_syscall_64+0x26/0x760 [ 287.014649][T10773] __x64_sys_sendmsg+0x78/0xb0 [ 287.019395][T10773] do_syscall_64+0xfa/0x760 [ 287.023882][T10773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.029754][T10773] RIP: 0033:0x459a59 [ 287.033632][T10773] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.053219][T10773] RSP: 002b:00007fbfb5494c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.061617][T10773] RAX: ffffffffffffffda RBX: 00007fbfb5494c90 RCX: 0000000000459a59 [ 287.069572][T10773] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 287.077528][T10773] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 287.085501][T10773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbfb54956d4 13:38:45 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x300, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 287.093471][T10773] R13: 00000000004c7c33 R14: 00000000004ddb08 R15: 0000000000000004 [ 287.101657][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 287.107499][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:38:45 executing program 0: unshare(0x8020000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x10966101, 0x0, 0x0, 0x0, 0x0) 13:38:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 287.236117][T10783] block nbd4: NBD_DISCONNECT 13:38:45 executing program 5 (fault-call:2 fault-nth:3): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:45 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x400) write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0x0, 0x2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f00000002c0)={0x6, 0x3, 0x800, 0xa7a, [], [], [], 0xaef, 0x1, 0x8, 0x9, "26f2c0112aef24ecceac0e420e234744"}) r4 = syz_open_dev$midi(&(0x7f0000000880)='/dev/midi#\x00', 0x8, 0xc880) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000008c0)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e21, @rand_addr=0xfffffffd}, @in6={0xa, 0x4e24, 0x7fffffff, @remote, 0x5}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0xeb5a, 0x10000, @loopback, 0x1}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @loopback}, 0x7}], 0xb4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r6, 0xfffffffffffffffd) [ 287.260758][ T26] audit: type=1400 audit(1571233125.855:54): avc: denied { sys_admin } for pid=10779 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 287.292029][T10783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10783 comm=syz-executor.4 13:38:46 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x2000, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 287.389315][T10781] block nbd4: Disconnected due to user request. [ 287.505742][T10781] block nbd4: shutting down sockets 13:38:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18}, 0x18) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x10000, 0x23) ftruncate(r2, 0x200004) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r4, 0x0, 0x8, &(0x7f0000000000)='GPLeth0\x00'}, 0x30) r5 = syz_open_procfs(r3, &(0x7f0000000040)='net/arp\x00') sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000300)={{0x4, 0x5, 0x6, 0x7, 'syz1\x00', 0x800}, 0x0, [0x3, 0x80000000, 0x1, 0x7, 0x3, 0x6, 0x6, 0x1ff, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x3f, 0xfffffffffffffff7, 0x0, 0x1f, 0x4, 0x4, 0xff, 0x72, 0xbb54, 0x7, 0x7f, 0x5, 0x101, 0x7, 0x401, 0x8, 0x1ff, 0x5, 0x0, 0x6, 0x3185, 0x2, 0x9, 0x4, 0x1, 0x64e, 0x8001, 0x7f, 0x5, 0x7, 0xfffffffffffffffd, 0x2a0, 0x10001, 0x8, 0xff, 0x7, 0x8, 0x75bb, 0x0, 0x80, 0x2, 0x6, 0x54, 0x7fff, 0x8, 0x0, 0x7, 0x3, 0xaf6, 0x5, 0x1ff, 0x4, 0x0, 0x1, 0x6, 0x9, 0x7537, 0x7fff, 0x8, 0x0, 0x0, 0x2, 0x4, 0xffffffff80000001, 0x8f7, 0x1d27, 0x4, 0x1, 0xffffffff7fffffff, 0x8, 0x8, 0x8, 0xfffffffffffffffb, 0x3f3, 0x6, 0x5, 0x20, 0x10001, 0x4, 0xfffffffffffff000, 0x9, 0x8000, 0xfe, 0x9, 0x800, 0x0, 0x7, 0x3be, 0x9, 0x5, 0x4, 0x5, 0xee91, 0x8, 0xc469, 0xfffffffffffffff7, 0x7f, 0x9d2a, 0x3ff, 0x101, 0x6, 0x9ebe, 0x8, 0x9, 0x0, 0x10000, 0x4, 0x7, 0x3, 0x0, 0x3, 0x5, 0x8, 0x80000000, 0xfffffffffffffffd], {0x77359400}}) 13:38:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x2) 13:38:46 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x3f00, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 287.708134][T10808] block nbd4: shutting down sockets [ 287.732423][ T26] audit: type=1400 audit(1571233126.325:55): avc: denied { create } for pid=10812 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 287.759641][T10808] block nbd4: shutting down sockets 13:38:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x10) 13:38:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:46 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4000, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 287.868480][ T26] audit: type=1400 audit(1571233126.455:56): avc: denied { write } for pid=10812 comm="syz-executor.0" path="socket:[38276]" dev="sockfs" ino=38276 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 13:38:46 executing program 2: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)) r0 = getegid() setgroups(0x1, &(0x7f0000000200)=[r0]) r1 = getegid() setgroups(0x1, &(0x7f0000000200)=[r1]) getgroups(0x40000233, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff, r0, 0xee01, r1, 0xee01]) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r2, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) fcntl$getownex(r2, 0x10, &(0x7f00000005c0)) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) getgid() openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r3, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) [ 288.041650][T10818] block nbd4: shutting down sockets 13:38:46 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x80fe, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 288.109461][T10818] block nbd4: shutting down sockets 13:38:46 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x301) 13:38:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a60}, 0x0, 0x6, 0xffffffffffffffff, 0x0) io_uring_setup(0xd0a, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video0\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0xce35, @multicast1}, 0x10) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x20, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) r1 = syz_open_procfs(0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)=0x0) getpgrp(0x0) r4 = getpgid(r3) process_vm_readv(r4, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000500)=""/1, 0x1}, {0x0}], 0x3, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/63, 0x3f}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/194, 0xc2}], 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000001c0)=']+@bdev%wlan1%\xae\x00', &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10240, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)=0x2) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47786, 0x7115}, 0x10c) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000100)=""/124) syz_open_dev$sndpcmc(0x0, 0xfffffffffffffffc, 0x0) socket(0x0, 0x0, 0x0) [ 288.336719][T10838] block nbd4: shutting down sockets 13:38:46 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xc0fe, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x125d) 13:38:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:47 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xfc00, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:47 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f00000000c0)={0x739a}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18}, 0x18) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x10000, 0x23) ftruncate(r2, 0x200004) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r4, 0x0, 0x8, &(0x7f0000000000)='GPLeth0\x00'}, 0x30) r5 = syz_open_procfs(r3, &(0x7f0000000040)='net/arp\x00') sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000300)={{0x4, 0x5, 0x6, 0x7, 'syz1\x00', 0x800}, 0x0, [0x3, 0x80000000, 0x1, 0x7, 0x3, 0x6, 0x6, 0x1ff, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x3f, 0xfffffffffffffff7, 0x0, 0x1f, 0x4, 0x4, 0xff, 0x72, 0xbb54, 0x7, 0x7f, 0x5, 0x101, 0x7, 0x401, 0x8, 0x1ff, 0x5, 0x0, 0x6, 0x3185, 0x2, 0x9, 0x4, 0x1, 0x64e, 0x8001, 0x7f, 0x5, 0x7, 0xfffffffffffffffd, 0x2a0, 0x10001, 0x8, 0xff, 0x7, 0x8, 0x75bb, 0x0, 0x80, 0x2, 0x6, 0x54, 0x7fff, 0x8, 0x0, 0x7, 0x3, 0xaf6, 0x5, 0x1ff, 0x4, 0x0, 0x1, 0x6, 0x9, 0x7537, 0x7fff, 0x8, 0x0, 0x0, 0x2, 0x4, 0xffffffff80000001, 0x8f7, 0x1d27, 0x4, 0x1, 0xffffffff7fffffff, 0x8, 0x8, 0x8, 0xfffffffffffffffb, 0x3f3, 0x6, 0x5, 0x20, 0x10001, 0x4, 0xfffffffffffff000, 0x9, 0x8000, 0xfe, 0x9, 0x800, 0x0, 0x7, 0x3be, 0x9, 0x5, 0x4, 0x5, 0xee91, 0x8, 0xc469, 0xfffffffffffffff7, 0x7f, 0x9d2a, 0x3ff, 0x101, 0x6, 0x9ebe, 0x8, 0x9, 0x0, 0x10000, 0x4, 0x7, 0x3, 0x0, 0x3, 0x5, 0x8, 0x80000000, 0xfffffffffffffffd], {0x77359400}}) 13:38:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000014c0)='/selinux/enforce\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x3}], 0x2c3, 0x760000000000, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x60402, 0x32916053ec14aea) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000001600)={0x3, &(0x7f0000000240)=""/4096, &(0x7f0000001400)=[{0xfffffffe, 0xf1, 0x1f, &(0x7f0000000100)=""/241}, {0x100, 0x9e, 0x9, &(0x7f0000001500)=""/158}, {0x9cd, 0xda, 0x3, &(0x7f0000001300)=""/218}]}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000040)=0x200) [ 288.825806][T10863] block nbd4: shutting down sockets [ 288.847692][T10870] QAT: Invalid ioctl 13:38:47 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xfe80, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x125e) 13:38:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 288.943673][T10878] binder: 10875:10878 unknown command 0 [ 288.969678][T10878] binder: 10875:10878 ioctl c0306201 20000000 returned -22 13:38:47 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200100, 0x0) [ 289.037656][T10883] block nbd4: shutting down sockets 13:38:47 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xfec0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 289.065458][T10884] binder: 10875:10884 unknown command 0 [ 289.082978][T10884] binder: 10875:10884 ioctl c0306201 20000000 returned -22 [ 289.092418][T10883] block nbd4: shutting down sockets 13:38:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x125f) 13:38:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x134, r2, 0x800, 0x0, 0x200, {}, [@TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x67b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x33}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x1000e805}, 0x0) 13:38:47 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$TIOCNOTTY(r2, 0x5422) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:38:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 289.379740][T10902] block nbd4: shutting down sockets 13:38:48 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0xff00, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:48 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000300)={0x7, &(0x7f0000000000)=[{0x9}, {0x5, 0x6}, {}, {}, {}, {0x0, 0xffe0}, {0x0, 0x1f}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x3a1680) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000006110d0e2f8a800000000001e0000000000000095000000000000001e9c526eecc5620700f61f397211f22404b6c3d08289c980011b348a85f11cf3ff16ea8149a69d71e0bca41edd1cbcdb7ab5563e3a116e375eedf8444d6b45feb89d7ab642d682530cd124681d9b22f33c8bb3a6cdfb74a0440b30c9f28eff253e96e2be7ab2a4f6af73"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 13:38:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1260) 13:38:48 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x5, 0x6, "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", 0x7a, 0x9, 0x9, 0xc9, 0x99, 0x8, 0xb6, 0x1}}}, 0x120) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000180)={0x0, @reserved}) 13:38:48 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x2}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 289.965528][T10932] block nbd4: shutting down sockets [ 290.004352][T10932] block nbd4: shutting down sockets 13:38:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000007000100667100003400020008000500000000000800f3ffffffffff0700020000000000080003000c000000080001e6aa149c6874d1de75a02af300"], 0x60}}, 0x0) 13:38:48 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x4}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:48 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/23], @ANYBLOB="170000001d0f0000"], @ANYBLOB="0100000000000000000000000000000000000000000000004800000000000000140100000100000000000000000000000000000000000000000000000000000000000000000000000200"/96], 0x90}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@initdev, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x20, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="2c646f6e745f090061737572651c00"]) 13:38:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1261) [ 290.117736][ T26] audit: type=1400 audit(1571233128.715:57): avc: denied { map } for pid=10941 comm="syz-executor.0" path="/selinux/avc/cache_threshold" dev="selinuxfs" ino=25 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 13:38:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 290.221482][T10949] block nbd4: shutting down sockets [ 290.244832][T10950] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 290.274931][T10944] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 290.293988][T10949] block nbd4: shutting down sockets 13:38:48 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000f36e41651e2051b1811c451d10ed18c8000000"], @ANYBLOB="1700000000000000"], @ANYBLOB="0100000000000000000000000000000000000000000000004800000000000000140100000100000000000000000000000000000000000000000000000000000000000000000000000200"/96], 0x90}, 0x0) 13:38:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000680)={0x7, 0x21, 0x2}, 0x7) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000240)=@can, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) write$P9_RREADLINK(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="3a258211f663a7724bdef64346bc14b7b0f781659f8056d1d3abf9d1a54bfce1e77551a8bd678625f5083067b024a240847b0000000001a1f62ac71e85445d8f244f6bf657ffffffffff8756ea7d486588272169d8b90f1d7106f5776f7894ee47382b88117e669c6e3203053a6a05995f5ed199fcf8722be75fa42c080601d48e7081160000c46359a074285b251aca195af3b2887cc79d0cedcc0b7e7f95c7d7b70ee8919a69265845173f8ba43c0472f7d3981e8d90ebbab574509f"], 0xbd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 13:38:49 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x6}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:49 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0xc0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2) pipe2(&(0x7f0000000200), 0x4000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x1, 0xa1}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x0, 0x6}, 0x1c) 13:38:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1262) 13:38:49 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1, 0x0, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13:38:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:49 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x8}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 290.641365][T10977] block nbd4: shutting down sockets [ 290.678790][T10977] block nbd4: shutting down sockets 13:38:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1263) 13:38:49 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0xa}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:49 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000200)={0x14, 0x1b, &(0x7f00000001c0)="2b7a9b9a4cf3666a0adfe0bfed8ff892c99542cb35c83c868f3c63"}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x440, 0x0) mkdirat$cgroup(r3, &(0x7f0000000180)='syz1\x00', 0x1ff) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) close(r0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90, 0xc}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x5, 0x8, 0x4, 0x2b, r5, 0x0, [], 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x3c) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) setsockopt$packet_int(r7, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000240)={0xc025}) 13:38:49 executing program 2: io_setup(0x2, &(0x7f0000000080)=0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r1, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) r5 = dup3(r4, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x182000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r7, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r8, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r8, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r9, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r9, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r9, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000840)='/dev/dlm_plock\x00', 0x2, 0x0) io_submit(r0, 0x7, &(0x7f00000008c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000000)="03bc35afe5acc4ec3b78a4a3a94006", 0xf, 0x200, 0x0, 0x0, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xff, r4, &(0x7f0000000140)="718fb7e39fbcd26945f02981ac4ae0e99d72199c772d33d0e07485ae", 0x1c, 0x0, 0x0, 0x3, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xaf64, r6, &(0x7f00000003c0)="232daba5dab496f05fdaad82e6af1b9700dd8bfd49cabcc3e8888eca67eb0bf089e7b7089198e85069aa9046dedc863b6627007c808bbba155e27ae656ad7c499c316e8e63a4dcd9657b", 0x4a, 0x9, 0x0, 0x0, r3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x7ff, r7, &(0x7f0000000440)="6b25ef1f48d6431c5070316c1ef323fabc135fb895f4c7036b02085ae1173330ed1d0c38772560452a2a7c89891fd965ac7a2ce43eabe5d88a324af1e1891c", 0x3f, 0x1, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0xa129, r8, &(0x7f00000004c0)="9362ccd364904572464d214637631c7c8c40983486efa390840b304f780e1fc3965a20bd0e57348095141a874922e655dbaf2c1e4a821c9aa22101f1ef953e3e364865871f3807394d0caf30153b51553b641fbc4432ff432bee91c6448a3639b2eefb8a1b2377802d88453b7e85e655021d632fef33cb501885049686aa051781116fb5aec270d222424d4852c9e713f9ee35dd32cfe58103a8d253713a8ab64d9fe311f30a1baadb42048399ade3abc9e2868cedb76eef4a4f9b6f3c8ba6b65fba703863e15f31ca48f5bb", 0xcc, 0x1, 0x0, 0x2, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000640)="7ee660ec0eda81d12e55cf57ad91c513337ebcd83fb477a34a4d1b27cf30e4a752cc99b9a02f0d4df1b66b787b13536e14a2bd2aad33e0d6f8b2f717c5a297c2ae1a022a6bc0a21a6ac85d4612d1b52e10315d638412aefc1d6bcd9aee2835247ece528cda8e93595847ef5c6a7097e3356025fb0ba640467c0eae99412b5830b13482b0fec89f3ad397fadef10caacfd9c5d12b948e3957a3e917be9fc9b3e2a2c1c18da7629c1958252b5d4286092ceb426fbace8523", 0xb7, 0x401, 0x0, 0x2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x8, 0x401, r9, &(0x7f0000000740)="10c341e9aaf7fbeb3820c72c79530d30e25a5a3a61f186c8addf88a3df8ee2f05cab9fe3ee97ef93b3dc46424d41d1c2178e6814e4861375112038536e6fcb79e265ac46661da1b89bda91e363eb7cc22e58a1ece3063d229df869906cdce77cd97384409fe4c801cadb80ef0763c51be8cd6118b68f1d00002db09582500335924d8a354f6aee3398ace191b3f9daaf46d1fbcd5372daab081466741aafa4549ab46eb979c8678f018ca8d2791c821d4c4df02d4b5c74abb113434362e3d830bc968dc0ed3007eb20ad", 0xca, 0x5, 0x0, 0x2, r10}]) [ 291.064898][T11004] block nbd4: shutting down sockets 13:38:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 291.111810][T11004] block nbd4: shutting down sockets [ 291.244139][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 291.249948][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:38:50 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0xc}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1264) 13:38:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r2, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'nr0\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x8, 0x5, 0x5, [0x2, 0x7, 0x8, 0xffffffff, 0x9]}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207000902000000a8a9897bbb73ec91"], 0x10}}, 0x0) 13:38:50 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@delrng={0x10, 0x14, 0x800, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) bind$rds(0xffffffffffffffff, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/23], @ANYBLOB="fed14e1d343030ec"], @ANYBLOB="0100000000000000000000000000000000000000000000004800000000000000140100000100"/96], 0x90}, 0x0) 13:38:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = inotify_init1(0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x1f, 0x0, 0x7f, 0x0, 0x0, 0x14009, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x46, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0xc142, 0x99f, 0x9, 0x8, 0x3, 0x2, 0x8000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r4, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r4, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) [ 291.567870][T11033] block nbd4: shutting down sockets 13:38:50 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0xe}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:50 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000018000"/23], @ANYBLOB="1700000000000000"], @ANYBLOB="0100000000000000000000000000000000000000000000004800000000000000140100000100000000000000000000000000000000000000000000000000000000000000000000000200"/96], 0x90}, 0x0) 13:38:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1265) 13:38:50 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x10}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 291.911865][T11056] block nbd4: shutting down sockets 13:38:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0xb43, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000006ffc)=0x400000000008, 0x4) write$selinux_load(r2, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "1b774100a4f6ae2fd2cb00f36ca7fe3df0bef3f993cbb12586af8dd293f6b821784bb5a719c60bb8cd3c15eb54d6d3a78f519acad028ecb8fece00bff1795e1f32cefd3136ef3c2817ab043ddd07b8ff5cc9a9d4e20b4cc9e971aaaa1c6554f294cbf45db4e5819d2b9952c6f28df0871f7b26433fef3f47e2696bf6d3f4bc945b4826e0ba41c2927bfbcf04c62e2dc4d788431e9f971251bec1bc8d1ce3e72b429b57897f11cdb779c6cf184b9fd662c609e98f8a47f4949c163e2779f4b1c9d088fe244dd701e820b0e6ce"}, 0xdc) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 291.984700][T11056] block nbd4: shutting down sockets 13:38:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:50 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1267) 13:38:50 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) bind$rds(r1, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) [ 292.202981][T11074] block nbd4: shutting down sockets [ 292.261885][T11074] block nbd4: shutting down sockets [ 292.364150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 292.369973][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:38:51 executing program 5: r0 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f00000000c0)="48d8bf8479a915cd9b08c3f3138e7121d10268c17a9512258263dbe5df", 0x1d) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/23], @ANYBLOB="1700001000000000"], @ANYBLOB="010000000000000000000000000000000000000000000000480000000000000014010000010000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000d3127bfe000000e435ced39fd2f1b7da727e36aaa8f87a642b68989741fe4f"], 0x90}, 0x0) 13:38:51 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x12}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1268) 13:38:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r2, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'nr0\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x8, 0x5, 0x5, [0x2, 0x7, 0x8, 0xffffffff, 0x9]}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207000902000000a8a9897bbb73ec91"], 0x10}}, 0x0) [ 292.547634][T11098] block nbd4: shutting down sockets [ 292.603153][T11098] block nbd4: shutting down sockets 13:38:51 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0xffffffffffffff74, &(0x7f00000002c0)=[@rdma_map={0x0, 0x114, 0x3, {{&(0x7f0000000040)=""/175}, &(0x7f0000000280)}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x60}, 0x0) lookup_dcookie(0x3ff, &(0x7f0000000180)=""/238, 0xee) 13:38:51 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x2}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 292.844177][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 292.850006][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:38:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0xb43, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000006ffc)=0x400000000008, 0x4) write$selinux_load(r2, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "1b774100a4f6ae2fd2cb00f36ca7fe3df0bef3f993cbb12586af8dd293f6b821784bb5a719c60bb8cd3c15eb54d6d3a78f519acad028ecb8fece00bff1795e1f32cefd3136ef3c2817ab043ddd07b8ff5cc9a9d4e20b4cc9e971aaaa1c6554f294cbf45db4e5819d2b9952c6f28df0871f7b26433fef3f47e2696bf6d3f4bc945b4826e0ba41c2927bfbcf04c62e2dc4d788431e9f971251bec1bc8d1ce3e72b429b57897f11cdb779c6cf184b9fd662c609e98f8a47f4949c163e2779f4b1c9d088fe244dd701e820b0e6ce"}, 0xdc) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 13:38:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1269) 13:38:51 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x4}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:51 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xb193) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/10], @ANYBLOB="1700000000000000"], @ANYBLOB="0100000000000000ba0000000000000000000000000000004800000000000000140100000100000000000000fdffffff00"/96], 0x90}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xc) 13:38:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 293.266079][T11165] block nbd4: shutting down sockets [ 293.296554][T11165] block nbd4: shutting down sockets 13:38:51 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x6}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1274) 13:38:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 293.494825][T11175] block nbd4: shutting down sockets [ 293.567133][T11175] block nbd4: shutting down sockets [ 293.644198][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 293.650029][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:38:52 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/23], @ANYBLOB="1700000000000000"], @ANYBLOB="010000000000000000000000000000000000000000000000480000000000000014010000010000000000000000000000000000000000000000000000000000090000000000000000020000000000000000000000000000000000000000000000b6326ec7603089dfb462218a0b131963bbe73ffa8aac607ff6efea9404606d72ee50bcabe931ee2c2e3ba2e040dbfcd2ee43b5b5d3e0766c7e1a86d96755e7a81ab0446c51c63fed76c3c3eec1051a5c1a"], 0x90}, 0x0) 13:38:52 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x8}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1276) 13:38:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r2, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'nr0\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x8, 0x5, 0x5, [0x2, 0x7, 0x8, 0xffffffff, 0x9]}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207000902000000a8a9897bbb73ec91"], 0x10}}, 0x0) [ 293.757541][T11196] block nbd4: shutting down sockets [ 293.823370][T11196] block nbd4: shutting down sockets [ 293.964171][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 293.970062][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:38:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0xb43, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000006ffc)=0x400000000008, 0x4) write$selinux_load(r2, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "1b774100a4f6ae2fd2cb00f36ca7fe3df0bef3f993cbb12586af8dd293f6b821784bb5a719c60bb8cd3c15eb54d6d3a78f519acad028ecb8fece00bff1795e1f32cefd3136ef3c2817ab043ddd07b8ff5cc9a9d4e20b4cc9e971aaaa1c6554f294cbf45db4e5819d2b9952c6f28df0871f7b26433fef3f47e2696bf6d3f4bc945b4826e0ba41c2927bfbcf04c62e2dc4d788431e9f971251bec1bc8d1ce3e72b429b57897f11cdb779c6cf184b9fd662c609e98f8a47f4949c163e2779f4b1c9d088fe244dd701e820b0e6ce"}, 0xdc) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="0207000902000000000000000000000092e7ef700021475a2adeaf3e436d829c91de072b67845e1a9daa204ac1c96c47fbea02d3869fceed860e6c97da3254b1cad7cb694664a56d53e150ce9f992673000000000000007e434dd334c740ed71caf67bf3626c2c892ad223dc94781e84c8fcae4547822f088407759a41d340000000000000000ac96fc9a04eccb11adc59ba6fafdeac32445119ada8afd12dbc2b805c5339be4c202b0ff1deb2ff5a1e89cdcebcf887eb6fb7c751de4eecbb6aaa3a4b1905e66f705b295da1e63bfe4f1b3574709269ef61022262e27d0ffc687633d226c14c829140a53e5cc3dc31da8a0ed1dbd75d2973dc204acbb4a381ef7c9c30d285184299e4d73752e04fc336f23939842101638a704c4030d40c4cb7683f771fe3f11274f5d0ff9c9b5297de5a2ad9a98ff728ca9088ff1668c622"], 0x10}}, 0x0) 13:38:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:52 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0xfffffffffffffcfe}, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x124) 13:38:52 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1277) 13:38:52 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xa}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 294.369102][T11221] block nbd4: shutting down sockets 13:38:53 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xc}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:53 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000380)={0x10}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r1, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0xfffffe00, {{0x2, 0x4e24, @local}}}, 0x88) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x11000041}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0xfa4, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, {0x6, 0x1}, {0xfff2}, {0xffe2, 0x7ff7}}, [@TCA_RATE={0x8, 0x5, {0xd9, 0x1}}, @filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x18c, 0x2, [@TCA_TCINDEX_ACT={0x188, 0x7, @m_simple={0x184, 0xa, {{0xc, 0x1, 'simple\x00'}, {0x6c, 0x2, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x100, 0x20000000, 0x100, 0xffff7fe8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xff, 0x2, 0x9, 0x20}}, @TCA_DEF_DATA={0x38, 0x3, '!GPLkeyring:security$procGPLbdev(vboxnet0-^self&\x00'}]}, {0x104, 0x6, "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"}}}}]}}, @filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0xdbc, 0x2, [@TCA_BASIC_ACT={0x44, 0x3, @m_sample={0x40, 0xf, {{0xc, 0x1, 'sample\x00'}, {0xc, 0x2, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x600}]}, {0x20, 0x6, "b81615f3c3135d345ea83ef38c35f5574284e7f4f8ff9c951299affa"}}}}, @TCA_BASIC_ACT={0xd20, 0x3, @m_police={0xd1c, 0x0, {{0xc, 0x1, 'police\x00'}, {0xc5c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x223, 0x16, 0x6, 0x520, 0xda00, 0x2, 0x0, 0x5, 0x7f, 0x7ff, 0x5, 0x101, 0x0, 0x4, 0x80, 0x1, 0x10000, 0xfd, 0x7, 0xe34, 0xb4, 0xe79, 0x4, 0x81, 0xffffffff, 0x2, 0x9, 0xc5de, 0x2, 0x5, 0x8, 0x10000, 0xcc, 0x2, 0x4, 0x8, 0x7, 0x200, 0x1f, 0x5, 0x9, 0x5, 0x3f, 0x7ff, 0x35, 0x1000, 0x80, 0x9, 0x0, 0x5, 0x3f, 0x1, 0xfffffffa, 0x7fff, 0x8, 0x1, 0x0, 0x97, 0x9, 0x3ff, 0x9, 0x6, 0x14, 0x54, 0x7, 0x81, 0x6, 0x0, 0x400, 0x2, 0x5, 0x3, 0xdeb, 0x40, 0x4, 0xfffff000, 0x7, 0xfffffff8, 0x7, 0x3, 0xffff7fff, 0xbd6, 0xff, 0x8, 0x2db0a57b, 0x6a2cceec, 0x8, 0x0, 0x8, 0x7ff, 0x1, 0x7f, 0x6, 0x1ff, 0x1, 0x800, 0xffff, 0x8, 0xe000, 0x7f, 0x0, 0x7f, 0x100, 0x80000001, 0x9, 0x0, 0x2, 0x3f, 0x1, 0x4, 0x2, 0x9, 0x80, 0x1, 0x6, 0x6f199b48, 0xad96, 0x7f, 0x6, 0x800, 0xffffffff, 0x4, 0x6, 0x6, 0x101, 0x5, 0x5, 0xfffffffd, 0x80000000, 0x4, 0x2, 0x1, 0x9, 0x1f, 0x3, 0x845, 0x2, 0x7, 0x9, 0x1, 0x5d, 0xf101, 0x9, 0x1, 0x8, 0x401, 0x6, 0xfffeffff, 0x1f, 0x4, 0x9, 0x80000000, 0x403, 0x5, 0xffffffff, 0x5, 0x8, 0x8, 0x0, 0x4, 0x5, 0x1, 0x8, 0x1ee8c, 0x4, 0x401, 0x4, 0x9, 0x81, 0xe8, 0x5, 0x9, 0x401, 0x401, 0x1, 0x8, 0x81, 0x6, 0x9, 0x80000000, 0x5, 0x1, 0x4, 0x7, 0x8, 0x9, 0xfffffbea, 0x7, 0xb632, 0x81, 0xb891, 0x8, 0xa868, 0x7, 0x800, 0x80000000, 0x4, 0x210a, 0x0, 0xff, 0x7, 0x30000, 0x9, 0x1, 0xf530, 0x100, 0x20, 0x12f, 0xf0c, 0x20000000, 0x7fff, 0x1000, 0x7, 0x7, 0x0, 0x955, 0x9, 0xc40, 0xfffffffb, 0x0, 0x2, 0x2, 0x1513, 0x70fb, 0x10000, 0x4, 0x0, 0x7fffffff, 0x7fff, 0x2683, 0x54a9, 0x6, 0x2, 0x5, 0x48, 0x20, 0x4, 0x81, 0x6, 0x3, 0x2522, 0x1, 0x100, 0x1, 0x8001, 0x3, 0x56, 0x2, 0xe8a, 0x9, 0x3, 0x8, 0x6, 0x3, 0x9df]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x20, 0x8, 0x2, 0x5, 0x2, 0x10000, 0x1, 0x20, 0x7, 0x9, 0x8, 0xffffffff, 0x127f, 0x1, 0x7fffffff, 0x1, 0x8, 0x10000, 0x0, 0x7f, 0xdd89, 0x80000000, 0x7ff, 0x5, 0x100, 0xffff, 0x8, 0x6, 0x7, 0xffffffc1, 0x4, 0x2, 0x5, 0x1, 0xcfa, 0x101, 0x80, 0x2, 0x1, 0x9, 0xb6a9, 0xffffffce, 0x5, 0x3, 0x20, 0x1, 0xfffffffb, 0x5, 0x7ff, 0x7f, 0x5a6bb52e, 0x0, 0xffffffff, 0x7, 0x7f, 0x4, 0xbd, 0x100, 0xc0, 0x2, 0x80000000, 0x6, 0xff, 0xda7c, 0x2, 0x4, 0xfffffff8, 0x1, 0x1, 0x7041d9b, 0x7fffffff, 0x9, 0x7f, 0x7, 0x7, 0x6, 0x9, 0x800, 0x8, 0x7ff, 0xfff, 0x7ff, 0x200, 0x0, 0x4, 0x1, 0x74a400, 0x2, 0x6, 0x9, 0x0, 0x0, 0x4, 0xb52, 0x81, 0x1, 0xc3, 0x9e06, 0x9, 0x0, 0x8, 0x9, 0x7fff, 0x9, 0x4, 0x6, 0x5, 0x10001, 0x1, 0x2, 0x9, 0x43f1, 0x3, 0x2, 0xffffffff, 0x3f, 0x3f, 0x10001, 0x2, 0x1000, 0x400, 0x401, 0x3ff, 0xb0, 0x1000, 0xc, 0x7fffffff, 0x6, 0x7, 0x3, 0x3e, 0x2, 0x143, 0x26b, 0xff3, 0x3, 0x3, 0xffff, 0x7, 0x6, 0x8, 0x6, 0xfffffffb, 0x6, 0xb3, 0xfff, 0x9, 0x80, 0x24aeb3fc, 0xffff3fc1, 0x7, 0x4, 0x5, 0x10000000, 0x2, 0xb3a, 0xfff, 0x40, 0x2, 0x2, 0x1000, 0x4, 0x4, 0x3ff, 0x2, 0x30, 0x10000, 0x2, 0x9, 0x8, 0x8001, 0xac, 0x7fffffff, 0x2, 0x80cd, 0x5, 0x1, 0x7, 0x0, 0x5, 0x4, 0x7fffffff, 0x401, 0x1, 0x4, 0xb3f6, 0x0, 0x1f, 0x5, 0x1000, 0x10001, 0x200, 0x2e, 0x2, 0xd58, 0x0, 0x80, 0x80000001, 0x9, 0x7, 0x8, 0x5, 0x1803, 0x2, 0x7066, 0x9, 0x3f, 0x8001, 0x4, 0x4, 0x6, 0x1, 0xfffff001, 0x3, 0x5, 0x0, 0x3, 0x5, 0x9, 0x1, 0x6, 0x2c, 0x3ff, 0x1ff, 0x81, 0x81, 0x180, 0x45c4, 0x3f, 0x9, 0x2, 0x2, 0x0, 0x2f5, 0xff, 0x10000, 0x5, 0x6, 0x1, 0x4, 0x1, 0xae71, 0x3, 0x1, 0x1, 0x4, 0x100, 0x400, 0x8000, 0x3f, 0x7fff, 0x8001, 0xfffffff7, 0x2, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x539, 0x6, 0xffffffff, 0x4, 0x47, 0x1, 0x101, 0xdf, 0x3f, 0x5, 0x9, 0xffff, 0x6, 0x9, 0x9af, 0x38, 0x0, 0x1ff, 0x5, 0xa37, 0x6, 0x171d4a0b, 0x1, 0xd94a, 0x9, 0x1f, 0x8, 0x6, 0x8, 0x59f, 0x81, 0x6b, 0x1, 0x3, 0x9, 0x6, 0x4, 0x40, 0x5, 0x5, 0xff, 0x4, 0x8, 0x87, 0x2, 0x401, 0x1ff, 0x1000, 0x9, 0x248c28bc, 0x0, 0x25b, 0x8, 0x8, 0x696, 0x400, 0x9, 0x4d80, 0x8, 0x4, 0x8, 0x9, 0x3ff, 0x8000, 0x0, 0x0, 0x2, 0x1f310f80, 0x995, 0x9, 0x2, 0x6, 0x2, 0xffffffff, 0x3, 0x7, 0x1000, 0x101, 0x4, 0x7, 0xadc, 0x0, 0xffffff01, 0x6, 0x1, 0x1d36, 0x1ff, 0x7, 0xb9, 0x1ff, 0x1, 0x5, 0x8, 0x6, 0x6, 0x9, 0xb5c, 0x10000, 0xfff, 0x5, 0x3, 0x6, 0x3, 0x3, 0x1, 0x5, 0x5, 0xfffffffb, 0xddaf, 0x2, 0x86d8, 0x9, 0x80000000, 0x47, 0xffffffff, 0xfc, 0x3ff, 0xff, 0x6, 0x7, 0x8, 0x5, 0x1, 0x3, 0x3, 0xa8d9, 0x5182, 0xf4, 0x100, 0x20, 0x7, 0x8, 0xb, 0x6, 0x1, 0xfffffff9, 0x3, 0x1, 0x2, 0x10001, 0x6, 0x9, 0x1, 0x0, 0x80, 0x1f, 0xedb9, 0x400, 0x2, 0x8, 0x345, 0x8000, 0x7, 0x9, 0x100, 0x1, 0x5, 0x1, 0x3252, 0x2, 0x3ff, 0x80, 0x6, 0x3, 0x5, 0x3f, 0x0, 0x6236, 0x8, 0x6b, 0x20, 0x100, 0x314b, 0x4, 0x3ff, 0x5, 0x3, 0x6, 0x560, 0x0, 0x4, 0x40, 0xfc50, 0x76d, 0x5, 0x561, 0x9, 0x4, 0x1d, 0x1, 0xff, 0x826, 0x200, 0x0, 0x8, 0x3, 0x4, 0x9, 0x5, 0xffffffff, 0x6, 0x80000000, 0x3f, 0xfbec, 0x9, 0x100, 0x3, 0x2, 0x0, 0x2, 0xfffffff9, 0x8001, 0x3, 0xfffff34b, 0x0, 0x7fffffff, 0x4, 0x8, 0xffff8000, 0x6, 0x1, 0x6, 0xd8, 0x8, 0x84b7, 0x4, 0x6, 0x7f6c800, 0xbb1, 0x3ff, 0x0, 0xdc7, 0x401, 0xffffffff, 0xfff, 0x0, 0x20, 0x7932, 0xf459, 0x2, 0x5, 0x4, 0x6, 0x0, 0x4, 0x200, 0x0, 0x80, 0x401, 0x2, 0x5, 0xd7a, 0x2, 0x5, 0x0, 0x6f5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x3, 0x4, 0x400, {0x40, 0x2, 0x0, 0x77, 0x94, 0x4}, {0x4e, 0x3, 0x1ff, 0xff00, 0xfff7, 0x40}, 0x134b, 0x2, 0x7fff}}]}, {0xac, 0x6, "22242c942e2877effa9df1525e2d771e3259e3079413fd1c6cd9d6a20d16e5e077bfa1196d0d34a376fe914caaa56e5a06b7f8c3af84857539b759aacaa6f9d4e4b531856fbf8c7dee75ebef16f26298c979ea097b81d474b5be699dff37f88254adaa711e69c268ffc77b585bdb5431cc62881af202f008e77f3da5faf45be25c336bea068f15eae19b3f9b21be8ece08de8628904a0da5c9202a38b7e93505ccc8116748"}}}}, @TCA_BASIC_POLICE={0xc, 0x4, @TCA_POLICE_AVRATE={0x8}}, @TCA_BASIC_POLICE={0x40, 0x4, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4da285ad74960029, 0xdb3, 0x1, 0x0, {0x9, 0x2, 0x5, 0x0, 0x3ff}, {0x81, 0x2, 0x7fff, 0x500, 0x2, 0x4}, 0x5, 0x5, 0x8}}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x8, 0x5, {0x3, 0xff}}, @TCA_RATE={0x8, 0x5, {0x1, 0x2}}]}, 0xfa4}, 0x1, 0x0, 0x0, 0xfc06d5cb27483887}, 0x4008881) [ 294.409221][T11221] block nbd4: shutting down sockets 13:38:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1278) 13:38:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 294.681525][T11246] block nbd4: shutting down sockets [ 294.730373][T11246] block nbd4: shutting down sockets 13:38:53 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xe}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x1279) 13:38:53 executing program 2: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40044160, 0x0) r1 = creat(&(0x7f0000000400)='./file0\x00', 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2af, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='io.max\x00\xe3\xc6\xa1\xbc\x16\x94p`R\xfbqcm\xab\x87\xf6\xb6y1uoG\x18\xd4\xc8*R6\x84\xfb\xfbU0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x7d, &(0x7f0000000040)={r9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x6, 0xe3b0, 0x5, 0xfffffffa, 0x2}, &(0x7f0000000300)=0x98) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r10, 0xab05) [ 295.031341][ T26] audit: type=1400 audit(1571233133.625:58): avc: denied { relabelto } for pid=11261 comm="syz-executor.2" name="file0" dev="sda1" ino=16731 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 295.057551][T11264] block nbd4: shutting down sockets [ 295.120571][T11264] block nbd4: shutting down sockets [ 295.147220][ T26] audit: type=1400 audit(1571233133.705:59): avc: denied { relabelfrom } for pid=11261 comm="syz-executor.2" name="file0" dev="sda1" ino=16731 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 295.213548][ T26] audit: type=1400 audit(1571233133.805:60): avc: denied { unlink } for pid=9234 comm="syz-executor.2" name="file0" dev="sda1" ino=16731 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 13:38:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:53 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x10}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127a) 13:38:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x5, 0x40000) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @broadcast}, 0x10) 13:38:53 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13:38:54 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) mmap(&(0x7f0000000000/0xfda000)=nil, 0x1fffff, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) [ 295.475578][T11282] block nbd4: shutting down sockets [ 295.492517][ T26] audit: type=1400 audit(1571233134.085:61): avc: denied { map } for pid=11288 comm="syz-executor.0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41250 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 13:38:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="3f00b5055e0bcfe87b0071") socket$inet(0x10, 0x8000d, 0x53) epoll_create1(0x180000) 13:38:54 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0x12}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 295.556024][T11282] block nbd4: shutting down sockets 13:38:54 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') 13:38:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127b) 13:38:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r3 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty, @in6=@loopback}}, {{@in6=@empty}}}, &(0x7f0000000180)=0xe8) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./bus\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@cruft='cruft'}, {@sbsector={'rbsectrr', 0x3d, 0x1}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) 13:38:54 executing program 2: r0 = open(&(0x7f0000000300)='./bus\x00', 0x141042, 0x82) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x10008, 0xffff, 0x0, r6}, &(0x7f00000000c0)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) pwritev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)='O', 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r7) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x800002, 0x11, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0x526987c9) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r7, 0x0, 0x80003) r10 = socket$packet(0x11, 0x3, 0x300) r11 = dup(r10) setsockopt$packet_int(r11, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$TIOCGRS485(r11, 0x542e, &(0x7f0000000100)) [ 295.825862][T11303] block nbd4: shutting down sockets 13:38:54 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0xf, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:54 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x9, 0x10001, 0x4, 0x3, r3}, &(0x7f0000000180)=0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000040)=""/30, 0x1e}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90, 0x4000004}, 0x0) [ 295.904178][T11303] block nbd4: shutting down sockets 13:38:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127c) 13:38:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:54 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000100)=""/185) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr="c3938b00674828ba00"}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="d5", 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) [ 296.037710][ T26] audit: type=1400 audit(1571233134.635:62): avc: denied { map } for pid=11316 comm="syz-executor.2" path="socket:[40293]" dev="sockfs" ino=40293 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_stream_socket permissive=1 13:38:54 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x14, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 296.143232][T11329] block nbd4: shutting down sockets 13:38:54 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000240)={0x6, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}]}) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {0x0}], 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000440)) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000080)={r5, 0x2}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000580)={r5, 0x2, &(0x7f0000000300)=[0x7f55, 0x1], &(0x7f0000000340)=[0x9, 0x6, 0x1ff, 0x0], 0x10, 0x4, 0x0, &(0x7f00000004c0)=[0x9, 0x100, 0xfffffff9, 0x3ff], &(0x7f0000000500)=[0x100, 0xe7]}) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x1, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0100"/12], &(0x7f00000000c0)=0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r7, &(0x7f0000000600)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2f) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r7, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000480), &(0x7f00000005c0)=0x4) [ 296.236827][T11329] block nbd4: shutting down sockets 13:38:54 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x20000110, 0x0, 0x0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127d) 13:38:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) gettid() setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0xfffffffffffffdcf) sendto$inet6(r0, 0x0, 0xfd66, 0xfffffefffffffffe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001880)=[{0x0}, {&(0x7f0000001780)="e0", 0x1}], 0x2}}], 0x1, 0x4008000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) write$uinput_user_dev(r3, &(0x7f0000000280)={'syz0\x00', {0xe7, 0x101, 0x8}, 0x1b, [0x5, 0xce79, 0x7, 0x5, 0x800, 0x1, 0x34c, 0x5, 0x4, 0xa0f, 0x1ff, 0x15463246, 0x384, 0x20, 0x2, 0xffffd351, 0xfffff001, 0x3, 0x8, 0x101, 0x81, 0x80000000, 0x8, 0x1, 0x4, 0xffffff32, 0x8, 0x3f, 0xd5, 0x7fffffff, 0x1, 0x1, 0x1, 0x40, 0x7fffffff, 0x7, 0x7ff, 0xf17c, 0x9, 0x0, 0x1, 0x5, 0x1, 0xa3, 0x7, 0xfffffffa, 0x7, 0xffffff01, 0x7ff, 0x7, 0x0, 0x6, 0x2, 0x80, 0x8, 0x80000000, 0x1, 0x80000000, 0x401, 0x8, 0x7, 0x3ff, 0x1, 0x100], [0x1, 0x1, 0xe7, 0x400, 0x40, 0x6, 0x2, 0x8, 0xfffffff8, 0xfffff6cc, 0x5, 0x7ff, 0xc7, 0xeeb, 0x1a980000, 0xff, 0x8000, 0x7, 0xdac, 0x2, 0x62903094, 0x80000000, 0x81, 0x8, 0xe7, 0xfff, 0x3, 0x4, 0x80000001, 0x4, 0x280000, 0x5, 0x36, 0x0, 0x2, 0x100, 0x7ff, 0x3, 0x9, 0x8, 0x9, 0x2, 0xa63, 0xe34, 0x2, 0x8, 0x7f, 0x2, 0x7fff, 0x10000, 0x6, 0x6, 0x1, 0x2e, 0x7, 0x8, 0x8, 0x80000001, 0x9, 0x9, 0x0, 0x101, 0x99, 0x3f], [0x80000000, 0x0, 0x9, 0x20, 0x80000001, 0x4, 0x7, 0x7, 0x37, 0x8, 0x3, 0xfff, 0xfffff6df, 0x2, 0x1, 0x7ff, 0xff, 0xff, 0x2, 0x8f, 0x1f, 0x1, 0x80000001, 0x2, 0x4, 0xff, 0x9, 0x9, 0x0, 0xd86, 0x1, 0x3468, 0x0, 0x3f, 0xd7d5, 0x7, 0x5, 0x10000, 0x5, 0x9, 0x4, 0x5, 0x3, 0x7, 0x215, 0xbef, 0x5, 0x5, 0x1000, 0x114d, 0x2, 0xd41, 0x80000001, 0x9, 0x1, 0x7, 0x7, 0x9, 0xfffff7b9, 0x0, 0x7d9, 0x8, 0x8, 0x101], [0x7662, 0x4aa, 0x400, 0x7904, 0x8, 0x69c, 0x9, 0x0, 0x0, 0x1, 0x5, 0xfffffffb, 0x1, 0x7, 0x40, 0x54, 0x935255b6, 0x0, 0x800, 0xfffff13f, 0x4, 0x2, 0x2, 0xffffffff, 0x3, 0x1, 0x7cef, 0x2, 0x80, 0x9, 0x64, 0x3, 0x7ff, 0x3, 0x40a, 0x20, 0x10000, 0x4, 0x7fff, 0x6, 0xe9e, 0x1, 0x3ff, 0x9, 0x8, 0x8, 0xe4, 0xfffffffd, 0x7, 0x4c15, 0x9, 0x670, 0x6, 0x5, 0xfff, 0x2, 0x1, 0x806, 0x6, 0x401, 0x3, 0x0, 0x1, 0x2]}, 0x45c) close(r0) [ 296.697280][T11353] block nbd4: shutting down sockets 13:38:55 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x3, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 296.821230][T11362] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 296.860164][T11353] block nbd4: shutting down sockets 13:38:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127e) 13:38:55 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000240)={0x6, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}]}) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {0x0}], 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video36\x00', 0x2, 0x0) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000440)) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000080)={r5, 0x2}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000580)={r5, 0x2, &(0x7f0000000300)=[0x7f55, 0x1], &(0x7f0000000340)=[0x9, 0x6, 0x1ff, 0x0], 0x10, 0x4, 0x0, &(0x7f00000004c0)=[0x9, 0x100, 0xfffffff9, 0x3ff], &(0x7f0000000500)=[0x100, 0xe7]}) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x1, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0100"/12], &(0x7f00000000c0)=0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r7, &(0x7f0000000600)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2f) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r7, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r7, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000480), &(0x7f00000005c0)=0x4) 13:38:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0d00000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x6, @ANYBLOB="18001200070600006772657461700005000002000400120094345997b760a8ba3569288a4cba56d60e08a1716971500ddedd28a6fb3e033aab4e2f6c79af3f240ecec9c26a292dd61a2d3a4f98dadadfec1fc3546ed02170f7d8891363241db75a80990db54ee13519993da25219277b711d1b7595f04c24c96a3921d41e57305a45f73effcab2fc9163acd4ca0a896a07d918ce9b07ef51748f3270722cbc7f5e37fe"], 0x40}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xe0361791ae71fbb6, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000180)={0x9, {{0xa, 0x4e22, 0x2, @remote, 0x9}}}, 0x88) 13:38:55 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x4, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 297.179182][T11376] block nbd4: shutting down sockets [ 297.243846][T11376] block nbd4: shutting down sockets 13:38:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x127f) 13:38:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x8, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 297.548007][T11396] block nbd4: shutting down sockets 13:38:56 executing program 0: syz_mount_image$exfat(&(0x7f0000000080)='exfat\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727b65743d63701c00152c00"]) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x9) 13:38:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0xfc, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x4b47) [ 297.707835][T11404] [EXFAT] Unrecognized mount option iochar{et=cp or missing value 13:38:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 297.841096][T11404] [EXFAT] Unrecognized mount option iochar{et=cp or missing value [ 297.886027][T11412] block nbd4: shutting down sockets [ 297.993967][T11412] block nbd4: shutting down sockets 13:38:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x300, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:56 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x4b49) 13:38:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x2000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 298.323179][T11428] block nbd4: shutting down sockets [ 298.367874][T11428] block nbd4: shutting down sockets 13:38:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) ptrace$setopts(0xffffffffffffffff, 0x0, 0x7fff, 0x29) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000340)=""/239, 0x1000, 0x1800, 0x1}, 0x18) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x0, 0x100, 0x0, [], 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={0x0, 0x1ff}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r5, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:38:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x4c01) 13:38:57 executing program 0: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, &(0x7f0000001140)=0x66) futex(&(0x7f00000014c0), 0x3, 0x0, 0x0, &(0x7f0000000000), 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) write$P9_ROPEN(r3, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x88, 0x1, 0x4}, 0x1}}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r3, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000140)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x825}}, 0x10) ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431) 13:38:57 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x3f00, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 298.630346][T11443] block nbd4: shutting down sockets [ 298.734282][T11443] block nbd4: shutting down sockets 13:38:57 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x4000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:38:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x541b) 13:38:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x6, 0x3, 0x781}}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 13:38:57 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x80fe, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 299.027507][ T26] audit: type=1400 audit(1571233137.615:63): avc: denied { name_bind } for pid=11465 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 299.067171][T11466] block nbd4: shutting down sockets 13:38:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 299.128637][T11466] block nbd4: shutting down sockets [ 299.130882][ T26] audit: type=1400 audit(1571233137.645:64): avc: denied { node_bind } for pid=11465 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 13:38:57 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = getegid() setgroups(0x1, &(0x7f0000000200)=[r2]) r3 = getegid() setgroups(0x1, &(0x7f0000000200)=[r3]) getgroups(0x40000233, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff, r2, 0xee01, r3, 0xee01]) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() setgroups(0x1, &(0x7f0000000200)=[r5]) r6 = getegid() setgroups(0x1, &(0x7f0000000200)=[r6]) getgroups(0x40000233, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff, r5, 0xee01, r6, 0xee01]) getgroups(0x3, &(0x7f0000000280)=[r5, 0x0, 0xffffffffffffffff]) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [{0x8, 0x2, r3}, {0x8, 0x2, r4}, {0x8, 0x4, r7}], {0x10, 0x1}, {0x20, 0x2}}, 0x3c, 0x2) r8 = dup(r1) r9 = socket$packet(0x11, 0x3, 0x300) r10 = dup(r9) setsockopt$packet_int(r10, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r11, 0x302, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x800, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008001) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x9, 0x0, 0x0, 0x4, 0x1, 0xffff}, &(0x7f0000000080)=0x20) 13:38:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x5421) [ 299.348290][T11479] block nbd4: shutting down sockets [ 299.387332][T11479] block nbd4: shutting down sockets [ 299.392827][ T26] audit: type=1400 audit(1571233137.725:65): avc: denied { name_connect } for pid=11465 comm="syz-executor.0" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 299.513934][ T26] audit: type=1800 audit(1571233138.095:66): pid=11445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16773 res=0 13:38:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) ptrace$setopts(0xffffffffffffffff, 0x0, 0x7fff, 0x29) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000340)=""/239, 0x1000, 0x1800, 0x1}, 0x18) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x0, 0x100, 0x0, [], 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={0x0, 0x1ff}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r5, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:38:58 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0xc0fe, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:58 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/23], @ANYBLOB="170000f2ffffff00044f4937c799cfff070000000000003bd700000000000000000000000f58d38c2315b855a1210a9bcb0e1e1075ef52a410859079a0a58c85190001877aa19e29ad7c3d4ec9c08cd7b31cd4597618aee3f2628a76"], @ANYBLOB="0100000000000000000000000000000000000000000000004800000000000000140100000100000000000000000000000000000000000000000000000000000000000000000000000200"/96], 0x90}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000200)={0xa, @sliced={0x4, [0x80, 0x3, 0x331, 0xa9df, 0x1, 0x2, 0x0, 0x400, 0xff, 0x3, 0x8000, 0x1, 0x8, 0x3ff, 0x7, 0xf960, 0xf800, 0x6f, 0x5, 0x1000, 0xfffa, 0x6cac, 0x3, 0xff, 0x5, 0x5, 0x9, 0x7, 0x5, 0x9, 0x101, 0x4, 0x5, 0x1f, 0x2000, 0x8, 0x101, 0x6, 0x0, 0x8, 0xffff, 0x7, 0x35f3, 0x6, 0xc7a4, 0x3, 0x2, 0x5], 0x10000}}) 13:38:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x5450) 13:38:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 299.878930][T11493] block nbd4: shutting down sockets [ 299.916004][T11493] block nbd4: shutting down sockets 13:38:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x5451) 13:38:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x6, 0x3, 0x781}}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 13:38:58 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0xfc00, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:58 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB="480000000000000014010000010020de6a3bc4bf3cc72b000000000000000000000000000000eaff", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/23], @ANYBLOB="1700000000000000"], @ANYBLOB="0100000000000000000000000000000000000000000000004800000000000000140100000100000000000000000000000000000000000000000000000000000000000000000000000200"/96], 0x90}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r1, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f00000000c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000040)={0x40000, 0x6, 0x8001, 0xffd, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) [ 300.091037][T11509] block nbd4: shutting down sockets [ 300.147523][T11509] block nbd4: shutting down sockets 13:38:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x6, 0x3, 0x781}}, 0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 13:38:58 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x5452) 13:38:58 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0xfe80, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 300.432247][T11529] block nbd4: shutting down sockets [ 300.488932][T11529] block nbd4: shutting down sockets [ 300.684176][ C1] net_ratelimit: 2 callbacks suppressed [ 300.684184][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 300.695709][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:38:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) ptrace$setopts(0xffffffffffffffff, 0x0, 0x7fff, 0x29) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000340)=""/239, 0x1000, 0x1800, 0x1}, 0x18) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x0, 0x100, 0x0, [], 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={0x0, 0x1ff}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r5, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r5, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 13:38:59 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0xfec0, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:38:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x5460) 13:38:59 executing program 1 (fault-call:11 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 300.833939][T11538] block nbd4: shutting down sockets 13:38:59 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0xff00, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 300.869478][T11538] block nbd4: shutting down sockets 13:38:59 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@null=' \x00', 0x5, 'netdevsim0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000000)=0xc) setreuid(0x0, r4) syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') 13:38:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x6364) [ 301.052574][T11546] FAULT_INJECTION: forcing a failure. [ 301.052574][T11546] name failslab, interval 1, probability 0, space 0, times 0 [ 301.080135][T11546] CPU: 0 PID: 11546 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 301.088074][T11546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.098141][T11546] Call Trace: 13:38:59 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x14ba, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB="4800000000000000140100000100"/40, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="150000000000000000000000000000000000000000fef145a962f913e94fc63b93f94ded70502801f16a9aed9acdacdc0500eb"], @ANYBLOB="1700000000000000"], @ANYBLOB="0100000000000000000000000000000000000000000000004800000000000000140100000100000000000000000000000000000000000000000000000000000000000000000000000200"/96], 0x90}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) [ 301.101450][T11546] dump_stack+0x172/0x1f0 [ 301.105803][T11546] should_fail.cold+0xa/0x15 [ 301.110413][T11546] ? fault_create_debugfs_attr+0x180/0x180 [ 301.116319][T11546] ? ___might_sleep+0x163/0x2c0 [ 301.121188][T11546] __should_failslab+0x121/0x190 [ 301.126144][T11546] should_failslab+0x9/0x14 [ 301.130657][T11546] __kmalloc+0x2e0/0x770 [ 301.134910][T11546] ? mark_held_locks+0xf0/0xf0 [ 301.140037][T11546] ? mark_lock+0xc2/0x1220 [ 301.144468][T11546] ? _parse_integer+0x190/0x190 [ 301.149329][T11546] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 301.155087][T11546] tomoyo_realpath_from_path+0xcd/0x7b0 [ 301.160636][T11546] ? tomoyo_path_number_perm+0x193/0x520 [ 301.166280][T11546] tomoyo_path_number_perm+0x1dd/0x520 [ 301.171743][T11546] ? tomoyo_path_number_perm+0x193/0x520 [ 301.177379][T11546] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 301.183185][T11546] ? __f_unlock_pos+0x19/0x20 [ 301.187904][T11546] ? selinux_file_mprotect+0x620/0x620 [ 301.193373][T11546] ? __fget+0x384/0x560 [ 301.197549][T11546] ? ksys_dup3+0x3e0/0x3e0 [ 301.201977][T11546] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 301.208225][T11546] ? fput_many+0x12c/0x1a0 [ 301.212654][T11546] tomoyo_file_ioctl+0x23/0x30 [ 301.217425][T11546] security_file_ioctl+0x77/0xc0 [ 301.222369][T11546] ksys_ioctl+0x57/0xd0 [ 301.222387][T11546] __x64_sys_ioctl+0x73/0xb0 [ 301.222407][T11546] do_syscall_64+0xfa/0x760 [ 301.235625][T11546] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.241518][T11546] RIP: 0033:0x459a59 [ 301.245424][T11546] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.245433][T11546] RSP: 002b:00007f14af2eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.245448][T11546] RAX: ffffffffffffffda RBX: 00007f14af2eec90 RCX: 0000000000459a59 [ 301.245457][T11546] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 301.245466][T11546] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:38:59 executing program 0: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, r0, 0x5ce4, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) socket(0x3, 0x11, 0x4) r3 = creat(0x0, 0xc3) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r5 = getegid() setgroups(0x1, &(0x7f0000000200)=[r5]) r6 = getegid() setgroups(0x1, &(0x7f0000000200)=[r6]) getgroups(0x40000233, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff, r5, 0xee01, r6, 0xee01]) shmctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x6, 0x0, r6, 0x0, 0xee01, 0x74}, 0x81, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x200}) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x68001, 0x0) ioctl$IOC_PR_RELEASE(r7, 0x401070ca, &(0x7f00000002c0)={0x9, 0x1}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r8, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r8, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r8, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba441fb233245f2604b9e07b8ab79ec15ef2818a17900"}, 0xd8) bind$inet(r9, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r9, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r9, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r10, &(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x9, 0x0}}, 0xfffffffffffffdb8) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r10, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r10, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) write$binfmt_script(r9, &(0x7f00000004c0)=ANY=[@ANYRES32=r10], 0x4) sendfile(r1, r2, 0x0, 0x20000102000007) 13:38:59 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x1a000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 301.245474][T11546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14af2ef6d4 [ 301.245481][T11546] R13: 00000000004c2e4a R14: 00000000004d6aa0 R15: 0000000000000006 [ 301.319140][T11558] block nbd4: shutting down sockets [ 301.361583][T11558] block nbd4: shutting down sockets [ 301.384207][T11546] ERROR: Out of memory at tomoyo_realpath_from_path. 13:39:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x8912) 13:39:00 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x40000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 301.726224][T11578] block nbd4: shutting down sockets [ 301.782905][T11578] block nbd4: shutting down sockets 13:39:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x11}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = fcntl$dupfd(r1, 0x0, r0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200080, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000086c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x9}]}}}]}, 0x44}}, 0x0) 13:39:00 executing program 0: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5, 0x801) sendmmsg(r0, &(0x7f0000001f40)=[{{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x1, @local}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000013c0)="37c2a0ecb7571fbbdec6a8f9510f362e766c5077a88734073cf7109347aba3dfbe48c3c91022caf35f2e053b9768bb2e2c901ed7348d006f08d9efc31bc5e2f902f7dbe7596a1e66ec5000c0ce57fba418190376e847581befbb5022241371390f0621d9ec732ad333db0e27476092993faed0f7c14f76978b", 0x79}, {&(0x7f0000001440)="cc8435dec9455ecd9fbcc325ed6114f54d604251a1fa77a5b68f2a4473da38a245e71495f3f48d082b4fde910fe5259e470c5f3125d57141ea0d203a2ed2e054f3fe4648cd56668a285135d9c6989ad5dbef1d0d9e01a3d37fc4d1d7fb2508914ec0a25296ebc4f7b2c88d59ca489b2206dee35c15533298816cc9ef80f3f98ae0c09415ef6d871491cff544fb99d825bf3833d2b0f9030144f8115bcaf8d04daafffce3bc635c7da16a2c79cdfb942c917beaf060365cf2e37cc7a034a0dcd2021c920a20fee5b588", 0xc9}, {&(0x7f0000001540)="cd6d394eba5e41fd85f0ac3f79753b47b445e1910e0f481c4fda1217a577bfea5e50f9fa39b32ae845540e79146d663529de3a631ab0d252d0910c97f4df2d006b90f5fc496e363191f526abe80813ad708e4146f6883a4f69c430819a4ea4acadc1c7ffdc15a9b32bb6d47d412f33dc29dba4b2c48bab94d2c68f1c9700fc1f1aea5d", 0x83}, {&(0x7f0000001600)="3563c956db660ccf5f6e2d703a5a285b9736b66f5cb18a62156d850d5cf63aee7bab0a4b38fd1c8daa050dd2e7d42351a987014b2e1ed968cb642f5772d04fbd1c5e22d2cf37b4996160f44f6e114ae21c85fcd7b01aa7ad60b519324c2cf84edfb39ffa5e6dfe52649be272dd8ac5ff420d97df6231267056f57c36b8ed81706c57a82f50697f613909a644c512c50cd779bf25dd639799301a0e5c3f33a1443dbe889f52ba9eda7efbe26fe341a6dd92e931081e1e9bdf61c6642f19d1ccd5deffe2ef694024f44f35d95b5411c22c6839296cdd8015066ffffd714f109df12c52696d3a19c9f3699368fd", 0xec}, {&(0x7f0000000240)="4d4fb8b94d90c0f16b0266b83803ec125624ea", 0x13}, {&(0x7f0000001700)="506b0d9888976bb42a90b1cbfea827247b23cff54ccf416587bb6bac38302e141241b4a78847bdafa2de4e836e9f9753634cfb1fb9eb33702fe08282ce5c728d192bfaa2fa3610ab66ce9605eab5885cf789ea7328f88e25490068f0ba869fab30df79855bda21c39bed9aa0769f63f210368cac2ee47e94e369a95c5861ca77e39def60d7e975c199ad16855cc43044e13874a534a37e6a844af9de8872c227215ba8f4fb12deaae9329e28f921e51df425ca544bf7779c74bd90cdf31f", 0xbe}], 0x6, &(0x7f0000001840)=[{0x110, 0x0, 0x3f, "fdc8a4f17959781da312a90f70042aed2ad5ac57f5514d2345de025d1fe60d7c2d7b85e09188ddc7e461f81d9f3d36950dc8c6a52e58a02c45f29c1d9ce5a8f57b4f3ab230980e04188c68fe99c7e25df4ced20c84367c66da11885c0ff6ba16fd61afae60e561554a0ebc8bb88701af257315959380d749958fe534ba8b165495ec8e251a2719bde4941b265304f9cf4191ef69c7e858a09832e94ea5979ea62ae3513593f4e60a693718fd896945abc1d7610e9ee091b901cb52b83512305da490e8514b69538f2e5c461057ca75a82e9367f87b9ad49984118fb566667eda5f23ddcecebc5e0d2d5f0ba3381252c7f480521c47896636bed5016174ff9e"}], 0x110}}, {{&(0x7f0000001980)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x4000}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001a00)="2452b3621e6168246f1b477de913073844f0266b5c808411a4a25da5951c803623bb0f84c037c7a39efa3126689d2be66284", 0x32}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)="68f37be48be5e4905ea780cee75f6d9d2b2a01000bc9d14ee812f33679d72922264d3c492484377b78a1ca79c9532efacfd90740bbfcb533070095e78f82997cf88bdf765af7533dfa33b2b0b02999beacd81e02a1f6650c1238bd3428e2febaa4ba52d0cfd53ef592e93a7d2dc718daf64c0dd7e443143aae09be9a7dec71fa333ab7e18dd031aa144bee63899fd9c214a65db42a318b8bf0e3eec2cd28aa5a901d572105790a53bd485318392ef0faf93dd989f12be69088a8f3b84ab553b96a0ad058", 0xc4}, {&(0x7f0000001b80)="655c10d2c842718db9db9912b87ab8722f6b99f8e8069dcbed6f68fad0f0ac3a2894ede4217e3a2a6d4442ca57c67a39755bee0f5b7b37d33c602fc82446f6992d81c5042686455d7a", 0x49}, {&(0x7f0000001c00)="7ae1548ad609b81f9d71f9087d0e2f55ef2ae07629443960167b57da87410c5bb9779f09180c007f925e2b4b4b990d0f9d4d83c35a625fa1c22c821eb718dd33d5f1aa31056e9341b7c83d92975873ba7bf670c9729049b4230f3a6a5ac99a7568cd3184ec56784b8fc73c84a4927d4ebcfc5858a9cd2ee007300dd2a6b5bf510c76795f57c43c64ac481ebb0016189f2cf6bb21f453d83b8e5bff11f9ff27bbfe4be8ca3fe6b12e5e817047ee846283844ac88cf52f693aadb916070bee7d3b2efc8f189ab1c56462f79eb79e10a50fbbe70e", 0xd3}, {&(0x7f0000001d00)="056e916c172d8154d6e6d42f138a09f7504bf14edd46cda55694924c46cd56bce4544619503835b060cd2df6c8b5ba9f731e00f2a573e0070e7c5ca93086ae29bc1b3dffda1e789956ac3f023119bb196ba4bc9600697e299fb1f1d5f7d62cd31b843fc925ceea46cb34783b786a25dff27ea61e8b4686ab94c1bfbad63a90adee61281636dbbdc25974c645c8bfb284837f2dfa395c91a806e499ed05acfc8e20f214e3f536547e9abd09", 0xab}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="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", 0x1000}], 0x8, &(0x7f0000004340)=[{0x78, 0x108, 0x7, "2ab1fc2a7e34c0fad5d99a5b7bab3b6263041ba1b0d24d26ac3c198f3e66b4d117ca9cbddbe76d237c2e9b96e5f6981929b02491c43533a46bd2634e62d4cc7471153aaa42c2b9e7eb1d578274fadb59b6881b3a631668938ea96484e34e41f4f8b1138174a3"}, {0x20, 0x102, 0x400, "11ff23f3f3f74dd214e712a65cb950"}, {0x88, 0x1, 0x6, "b111019b36939ac10156a1fc5f67405c505eda4d3e385fffca53e8d74eb2bcd1b92325cd1b9005b38bc4e7fba293af6e8a1fc9882a98de0bceeb7be1d1deb3e687197383d6482b0dfb43796a3abc345cfb44231bbd08f342d04517ae987be68b1427bb636511a94bfd4e35cc2ea33aa1cc"}, {0x20, 0x116, 0xff, "9a294398ff01c146239d275e293160"}, {0xa8, 0x1, 0x1, "4d3e21065069441b14436f8d346aa2d9659f8e96605123d1ba3b6fee7059daf8e590d4a0aac034b3117f9401d5ecfa92efe37f93c37553928e629d97517060897ae0ce1e11380510835091d4c4c4d1c56e3a79a2d9cf69050efa4fd3cfe315869fc7c0bead32b9cb729b857d971f3fcca51224ff41cd2fb19837bbdc664412162ea64f4276bfabd527573c96df440b8eea95dec4"}, {0x100, 0x0, 0xffffffff, "761a26099c3ce3391a33784f0fdc2f2ecf36a500fa66bf05811d354cea7acc81ed379797efc6ffe4b51c99ab216e1fe0f7d710300fe19edaf74afa4a25c52a3d691e286f58c4fac411f348b7e17b2d33eae484ef7d01c23d3111cd3b74bca6226a75942a11fc6d0d5db8279b2c511a2e3efda9c0400a5a82e3edbfda685b26a7fc38444b3ed67274ac8fa4b4a926338d8c3aae10a1cb2ff316bff8406b5a3c16ac8e1961b454be4a2c2ceade48d2b4d465a41c90a06c38e44229138ff78995db9b612b16610ffd4b98a0a5e0466ce90cc6ab308cf5f1529e8c2ec0fe5a490c9154075055e6b828b94d081bacb5"}, {0x20, 0x118, 0x6, "4d553aac3a8bd7d33d"}, {0x78, 0x10c, 0xff9b, "13aafd881949fc9033310c2e1b8bf66c9580143bdc0f1dc8a7470af2cf464d86b15f1baf39ed38eb266725116df7866fac5740f6a16418e7305096c9031d70f3e0bb421caaec5754678e74807d68816aa5c512f5b36f6a5ed2a1f11798e7aff892ee"}, {0xd0, 0x102, 0xffffffad, "480f232280cdefd8efa2d6686e02e695ccc03750483692800a0416af4e5be035ce135738c61c78bab0dbc91d5a57f8412da05fb4d3ed43931480d3eea7ade589aa244821a3c623e00ab053f98599a0c3622c6f413befc276b332cf06d41094519f46e1f2567fd136b62606af0cc2c2d346449e813787e4195c0bbb48afa6b3fd26194a767a00871b9eb01ad1a5cc81fe50a999abf61b0ee45090a755c92d188db2789a49c548d8f72f4affa3a8b4992215ab62252760db50eaf758e042aeac"}, {0x110, 0x108, 0x80000001, "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"}], 0x560}}, {{&(0x7f0000001e40)=@vsock={0x28, 0x0, 0xffffffff, @reserved}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001ec0)="f9f7cc64276d46ec363ab7dadbaa0837ddaee0568d20ab0d41688cf9c98e75dedfefb222d65c6c9aafdd77c6fad931acb1d8c7", 0x33}], 0x1}}], 0x3, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000001a40)='posixacl\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r3, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000300)=""/4096, &(0x7f00000000c0)=0x1000) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001300)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f6500000000009f39004aca006507000002000000070700004c0000001f75000000000000ff01000000000000070400000400f9ffad50010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x3b3, 0x0, 0x0, 0x0, [], 0x0, 0x0, r6, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) exit(0x4) 13:39:00 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r2, 0x0, 0x8, &(0x7f0000000000)='GPLeth0\x00'}, 0x30) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x200}) ioprio_set$pid(0x1, r1, 0x134000000000) 13:39:00 executing program 1 (fault-call:11 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:39:00 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x100000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:39:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0x8933) [ 301.964136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 301.970004][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 301.989413][T11589] block nbd4: shutting down sockets 13:39:00 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x3ffdb8, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 302.021327][T11603] (unnamed net_device) (uninitialized): down delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 302.021686][T11589] block nbd4: shutting down sockets [ 302.046753][T11593] FAULT_INJECTION: forcing a failure. [ 302.046753][T11593] name failslab, interval 1, probability 0, space 0, times 0 13:39:00 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000040)=""/128) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000180)=0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000001c0)={0x6}, 0x4) [ 302.084566][T11593] CPU: 0 PID: 11593 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 302.092539][T11593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.102605][T11593] Call Trace: [ 302.105916][T11593] dump_stack+0x172/0x1f0 [ 302.110268][T11593] should_fail.cold+0xa/0x15 [ 302.115404][T11593] ? fault_create_debugfs_attr+0x180/0x180 [ 302.124967][T11593] ? ___might_sleep+0x163/0x2c0 [ 302.129837][T11593] __should_failslab+0x121/0x190 [ 302.134785][T11593] should_failslab+0x9/0x14 [ 302.139307][T11593] __kmalloc+0x2e0/0x770 [ 302.143554][T11593] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 302.149372][T11593] ? tomoyo_encode2.part.0+0xf5/0x400 [ 302.154759][T11593] tomoyo_encode2.part.0+0xf5/0x400 [ 302.159969][T11593] tomoyo_encode+0x2b/0x50 [ 302.164497][T11593] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 302.170135][T11593] ? tomoyo_path_number_perm+0x193/0x520 [ 302.175786][T11593] tomoyo_path_number_perm+0x1dd/0x520 [ 302.181249][T11593] ? tomoyo_path_number_perm+0x193/0x520 [ 302.186892][T11593] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 302.192703][T11593] ? __f_unlock_pos+0x19/0x20 [ 302.197425][T11593] ? selinux_file_mprotect+0x620/0x620 [ 302.202884][T11593] ? __fget+0x384/0x560 [ 302.207062][T11593] ? ksys_dup3+0x3e0/0x3e0 [ 302.211484][T11593] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 302.217725][T11593] ? fput_many+0x12c/0x1a0 [ 302.222151][T11593] tomoyo_file_ioctl+0x23/0x30 [ 302.226923][T11593] security_file_ioctl+0x77/0xc0 13:39:00 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0xa00100, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 302.231871][T11593] ksys_ioctl+0x57/0xd0 [ 302.236038][T11593] __x64_sys_ioctl+0x73/0xb0 [ 302.240640][T11593] do_syscall_64+0xfa/0x760 [ 302.245155][T11593] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.251045][T11593] RIP: 0033:0x459a59 [ 302.254939][T11593] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.274549][T11593] RSP: 002b:00007f14af2eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:39:00 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x80280) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x1, &(0x7f0000000180)) r2 = dup(r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r3, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) fcntl$dupfd(r2, 0x0, r3) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) 13:39:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab00) 13:39:00 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x2}}], 0x90}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r2, 0x0, 0x8, &(0x7f0000000000)='GPLeth0\x00'}, 0x30) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x200}) ioprio_set$pid(0x1, r1, 0x134000000000) [ 302.282959][T11593] RAX: ffffffffffffffda RBX: 00007f14af2eec90 RCX: 0000000000459a59 [ 302.290951][T11593] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 302.290959][T11593] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 302.290966][T11593] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14af2ef6d4 [ 302.290974][T11593] R13: 00000000004c2e4a R14: 00000000004d6aa0 R15: 0000000000000006 [ 302.291292][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 302.328887][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 302.349045][T11593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 302.449425][T11614] block nbd4: shutting down sockets [ 302.503620][T11614] block nbd4: shutting down sockets [ 302.518127][T11603] (unnamed net_device) (uninitialized): down delay (9) is not a multiple of miimon (5), value rounded to 5 ms 13:39:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000280)={0x7, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000003c0)={0x0, 0x0, 0x2, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) r3 = socket$inet6(0xa, 0x6, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x0, 0x2000000000903, 0x1}, 0x20) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @mcast1, 0x4}, 0x1c) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29}], 0x18}], 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x1f, 0x1, 0x9, 0x9, 0x3a3}, 0xc) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140), 0x10) 13:39:01 executing program 1 (fault-call:11 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:39:01 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x1000000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:39:01 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x8000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) utime(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)={0x7ffffffffffffffa, 0x7}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x300, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000200)={0x2, 0x15, 0x9, 0x2, 0x7, 0x6, 0x3, 0x159, 0xffffffffffffffff}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f00000001c0)={0x9, 0x1}) 13:39:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab01) 13:39:01 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x3000000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 302.750930][T11640] block nbd4: shutting down sockets [ 302.764142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 302.770045][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:39:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab02) 13:39:01 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x8000000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 302.977857][T11659] block nbd4: shutting down sockets [ 302.983694][T11658] FAULT_INJECTION: forcing a failure. [ 302.983694][T11658] name failslab, interval 1, probability 0, space 0, times 0 [ 303.001925][T11658] CPU: 1 PID: 11658 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 303.009853][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.009861][T11658] Call Trace: [ 303.009890][T11658] dump_stack+0x172/0x1f0 [ 303.009914][T11658] should_fail.cold+0xa/0x15 [ 303.032162][T11658] ? fault_create_debugfs_attr+0x180/0x180 [ 303.037982][T11658] ? ___might_sleep+0x163/0x2c0 [ 303.042561][T11659] block nbd4: shutting down sockets [ 303.042844][T11658] __should_failslab+0x121/0x190 [ 303.052974][T11658] should_failslab+0x9/0x14 [ 303.057495][T11658] __kmalloc+0x2e0/0x770 [ 303.061753][T11658] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 303.067576][T11658] ? tomoyo_encode2.part.0+0xf5/0x400 [ 303.072966][T11658] tomoyo_encode2.part.0+0xf5/0x400 [ 303.078173][T11658] tomoyo_encode+0x2b/0x50 [ 303.082587][T11658] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 303.082601][T11658] ? tomoyo_path_number_perm+0x193/0x520 [ 303.082623][T11658] tomoyo_path_number_perm+0x1dd/0x520 [ 303.082635][T11658] ? tomoyo_path_number_perm+0x193/0x520 [ 303.082652][T11658] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 303.110787][T11658] ? __f_unlock_pos+0x19/0x20 [ 303.115511][T11658] ? selinux_file_mprotect+0x620/0x620 [ 303.120984][T11658] ? __fget+0x384/0x560 [ 303.125167][T11658] ? ksys_dup3+0x3e0/0x3e0 [ 303.129610][T11658] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 303.135873][T11658] ? fput_many+0x12c/0x1a0 [ 303.140311][T11658] tomoyo_file_ioctl+0x23/0x30 [ 303.145100][T11658] security_file_ioctl+0x77/0xc0 [ 303.150062][T11658] ksys_ioctl+0x57/0xd0 [ 303.154238][T11658] __x64_sys_ioctl+0x73/0xb0 [ 303.158850][T11658] do_syscall_64+0xfa/0x760 [ 303.163367][T11658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.169271][T11658] RIP: 0033:0x459a59 [ 303.173178][T11658] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.192795][T11658] RSP: 002b:00007f14af2eec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.201225][T11658] RAX: ffffffffffffffda RBX: 00007f14af2eec90 RCX: 0000000000459a59 [ 303.209211][T11658] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 303.217199][T11658] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:39:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) [ 303.225180][T11658] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14af2ef6d4 [ 303.233175][T11658] R13: 00000000004c2e4a R14: 00000000004d6aa0 R15: 0000000000000006 13:39:01 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) dup3(r1, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) close(r1) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@rdma_args={0x12, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000600)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x1}, {0x0}, 0x0}}], 0x90}, 0x80054c0) 13:39:01 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x20000000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 303.324130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 303.368688][T11658] ERROR: Out of memory at tomoyo_realpath_from_path. 13:39:02 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000002780)={'\x00\x80\xa3;\x88\xf4\xa1\x1f\xe1\x00', 0x1fb}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'nr0\x00', 0x1a8}) 13:39:02 executing program 1 (fault-call:11 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:39:02 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x3f000000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:39:02 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0x40000000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 303.724196][ C0] protocol 88fb is buggy, dev hsr_slave_0 13:39:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x47}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:39:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x3ea, 0x7f, 0x0, 0xfc, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x19102, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xb) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) 13:39:02 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0xb8fd3f00, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) 13:39:02 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0xfc000000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 304.148105][T11676] block nbd4: shutting down sockets 13:39:02 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0, 0xfe800000, &(0x7f0000000600)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) [ 455.804378][ T1069] INFO: task syz-executor.4:11676 blocked for more than 143 seconds. [ 455.812636][ T1069] Not tainted 5.4.0-rc3+ #0 [ 455.817936][ T1069] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.826890][ T1069] syz-executor.4 D28072 11676 9239 0x00004004 [ 455.833254][ T1069] Call Trace: [ 455.836600][ T1069] __schedule+0x94f/0x1e70 [ 455.841027][ T1069] ? __sched_text_start+0x8/0x8 [ 455.845987][ T1069] ? __kasan_check_read+0x11/0x20 [ 455.851016][ T1069] ? __lock_acquire+0x16f2/0x4a00 [ 455.856094][ T1069] schedule+0xd9/0x260 [ 455.860176][ T1069] schedule_timeout+0x717/0xc50 [ 455.865097][ T1069] ? find_held_lock+0x35/0x130 [ 455.869866][ T1069] ? usleep_range+0x170/0x170 [ 455.874609][ T1069] ? lock_downgrade+0x920/0x920 [ 455.879470][ T1069] ? _raw_spin_unlock_irq+0x28/0x90 [ 455.884749][ T1069] ? wait_for_completion+0x294/0x440 [ 455.890032][ T1069] ? _raw_spin_unlock_irq+0x28/0x90 [ 455.895275][ T1069] ? lockdep_hardirqs_on+0x421/0x5e0 [ 455.900561][ T1069] ? trace_hardirqs_on+0x67/0x240 [ 455.905754][ T1069] ? __kasan_check_read+0x11/0x20 [ 455.910786][ T1069] wait_for_completion+0x29c/0x440 [ 455.915951][ T1069] ? wait_for_completion_interruptible+0x470/0x470 [ 455.922479][ T1069] ? wake_up_q+0xf0/0xf0 [ 455.926779][ T1069] ? flush_workqueue_prep_pwqs+0x352/0x590 [ 455.932605][ T1069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.938917][ T1069] flush_workqueue+0x40f/0x14c0 [ 455.943829][ T1069] ? __dev_printk+0x202/0x20e [ 455.948572][ T1069] ? _dev_warn+0xd7/0x109 [ 455.952907][ T1069] ? pwq_unbound_release_workfn+0x2f0/0x2f0 [ 455.958911][ T1069] ? sock_shutdown+0x83/0x200 [ 455.963591][ T1069] nbd_ioctl+0xb2e/0xc44 [ 455.967933][ T1069] ? nbd_ioctl+0xb2e/0xc44 [ 455.972367][ T1069] ? nbd_release+0x150/0x150 [ 455.977056][ T1069] ? finish_wait+0x260/0x260 [ 455.981657][ T1069] ? nbd_release+0x150/0x150 [ 455.986446][ T1069] blkdev_ioctl+0xedb/0x1c20 [ 455.991154][ T1069] ? blkpg_ioctl+0xa90/0xa90 [ 455.995826][ T1069] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 456.001655][ T1069] ? ___might_sleep+0x163/0x2c0 [ 456.006619][ T1069] block_ioctl+0xee/0x130 [ 456.011054][ T1069] ? blkdev_fallocate+0x410/0x410 [ 456.016139][ T1069] do_vfs_ioctl+0xdb6/0x13e0 [ 456.020734][ T1069] ? ioctl_preallocate+0x210/0x210 [ 456.025916][ T1069] ? selinux_file_mprotect+0x620/0x620 [ 456.031370][ T1069] ? __fget+0x384/0x560 [ 456.035790][ T1069] ? ksys_dup3+0x3e0/0x3e0 [ 456.040228][ T1069] ? nsecs_to_jiffies+0x30/0x30 [ 456.045810][ T1069] ? tomoyo_file_ioctl+0x23/0x30 [ 456.050886][ T1069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.057211][ T1069] ? security_file_ioctl+0x8d/0xc0 [ 456.062335][ T1069] ksys_ioctl+0xab/0xd0 [ 456.066576][ T1069] __x64_sys_ioctl+0x73/0xb0 [ 456.071174][ T1069] do_syscall_64+0xfa/0x760 [ 456.075744][ T1069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.081635][ T1069] RIP: 0033:0x459a59 [ 456.085610][ T1069] Code: Bad RIP value. [ 456.089669][ T1069] RSP: 002b:00007f86a9d8fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.098131][ T1069] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459a59 [ 456.106173][ T1069] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 456.114203][ T1069] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 456.122176][ T1069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86a9d906d4 [ 456.130275][ T1069] R13: 00000000004c33ab R14: 00000000004d70e8 R15: 00000000ffffffff [ 456.138312][ T1069] [ 456.138312][ T1069] Showing all locks held in the system: [ 456.146098][ T1069] 3 locks held by kworker/u4:2/132: [ 456.151308][ T1069] #0: ffff8880ae934d18 (&rq->lock){-.-.}, at: newidle_balance+0xa32/0xe90 [ 456.159952][ T1069] #1: ffffffff88fab000 (rcu_read_lock){....}, at: __update_idle_core+0x45/0x3f0 [ 456.169117][ T1069] #2: ffff8880ae924c18 (&base->lock){-.-.}, at: lock_timer_base+0x56/0x1b0 [ 456.178627][ T1069] 1 lock held by khungtaskd/1069: [ 456.183639][ T1069] #0: ffffffff88fab000 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 456.193005][ T1069] 2 locks held by kworker/u5:0/1526: [ 456.198311][ T1069] #0: ffff8880972b7128 ((wq_completion)knbd4-recv){+.+.}, at: process_one_work+0x88b/0x1740 [ 456.208704][ T1069] #1: ffff8880a61ffdc0 ((work_completion)(&args->work)){+.+.}, at: process_one_work+0x8c1/0x1740 [ 456.219416][ T1069] 1 lock held by rsyslogd/9062: [ 456.224337][ T1069] #0: ffff888093d4f920 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 456.232945][ T1069] 2 locks held by getty/9184: [ 456.237681][ T1069] #0: ffff8880a89f0090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 456.246786][ T1069] #1: ffffc90005f892e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 456.256406][ T1069] 2 locks held by getty/9185: [ 456.261181][ T1069] #0: ffff888096d2c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 456.270208][ T1069] #1: ffffc90005f692e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 456.279998][ T1069] 2 locks held by getty/9186: [ 456.284811][ T1069] #0: ffff88808fd00090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 456.293767][ T1069] #1: ffffc90005f8d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 456.303389][ T1069] 2 locks held by getty/9187: [ 456.308114][ T1069] #0: ffff888099899090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 456.317125][ T1069] #1: ffffc90005f7d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 456.326744][ T1069] 2 locks held by getty/9188: [ 456.331398][ T1069] #0: ffff888092789090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 456.340407][ T1069] #1: ffffc90005f912e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 456.350030][ T1069] 2 locks held by getty/9189: [ 456.354747][ T1069] #0: ffff888095b8b090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 456.363702][ T1069] #1: ffffc90005f952e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 456.373359][ T1069] 2 locks held by getty/9190: [ 456.378060][ T1069] #0: ffff888092f40090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 456.387067][ T1069] #1: ffffc90005f5d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1c10 [ 456.396677][ T1069] [ 456.398990][ T1069] ============================================= [ 456.398990][ T1069] [ 456.407459][ T1069] NMI backtrace for cpu 0 [ 456.411798][ T1069] CPU: 0 PID: 1069 Comm: khungtaskd Not tainted 5.4.0-rc3+ #0 [ 456.419235][ T1069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.429271][ T1069] Call Trace: [ 456.432560][ T1069] dump_stack+0x172/0x1f0 [ 456.436900][ T1069] nmi_cpu_backtrace.cold+0x70/0xb2 [ 456.442089][ T1069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.448446][ T1069] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 456.454177][ T1069] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 456.460143][ T1069] arch_trigger_cpumask_backtrace+0x14/0x20 [ 456.466015][ T1069] watchdog+0x9d0/0xef0 [ 456.470158][ T1069] kthread+0x361/0x430 [ 456.474207][ T1069] ? reset_hung_task_detector+0x30/0x30 [ 456.479736][ T1069] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 456.485991][ T1069] ret_from_fork+0x24/0x30 [ 456.490593][ T1069] Sending NMI from CPU 0 to CPUs 1: [ 456.496234][ C1] NMI backtrace for cpu 1 [ 456.496240][ C1] CPU: 1 PID: 132 Comm: kworker/u4:2 Not tainted 5.4.0-rc3+ #0 [ 456.496245][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.496249][ C1] Workqueue: bat_events batadv_nc_worker [ 456.496255][ C1] RIP: 0010:write_comp_data+0x0/0x70 [ 456.496265][ C1] Code: 83 fa 02 75 20 48 8b 88 00 13 00 00 8b 80 fc 12 00 00 48 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 5d c3 0f 1f 00 <65> 4c 8b 04 25 40 fe 01 00 65 8b 05 98 e8 8e 7e a9 00 01 1f 00 75 [ 456.496268][ C1] RSP: 0018:ffff8880a94bfbe8 EFLAGS: 00000246 [ 456.496275][ C1] RAX: ffff8880a946a440 RBX: 0000000000000001 RCX: ffffffff8347043e [ 456.496280][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 456.496284][ C1] RBP: ffff8880a94bfbf0 R08: ffff8880a946a440 R09: fffffbfff14efd35 [ 456.496289][ C1] R10: ffff8880a946ad28 R11: ffff8880a946a440 R12: 0000000000000001 [ 456.496293][ C1] R13: ffff88809afdcd80 R14: ffff88805daf4b40 R15: dffffc0000000000 [ 456.496298][ C1] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 456.496302][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.496307][ C1] CR2: ffffffffff600400 CR3: 00000000a8c2a000 CR4: 00000000001406e0 [ 456.496311][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 456.496316][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 456.496318][ C1] Call Trace: [ 456.496322][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.496325][ C1] debug_smp_processor_id+0x2e/0x214 [ 456.496329][ C1] rcu_dynticks_curr_cpu_in_eqs+0x17/0xb0 [ 456.496332][ C1] rcu_is_watching+0x10/0x30 [ 456.496336][ C1] batadv_nc_process_nc_paths.part.0+0x2c6/0x3c0 [ 456.496339][ C1] ? batadv_nc_to_purge_nc_path_decoding+0x160/0x160 [ 456.496343][ C1] batadv_nc_worker+0x5e4/0x760 [ 456.496346][ C1] process_one_work+0x9af/0x1740 [ 456.496349][ C1] ? pwq_dec_nr_in_flight+0x320/0x320 [ 456.496353][ C1] ? lock_acquire+0x190/0x410 [ 456.496356][ C1] worker_thread+0x98/0xe40 [ 456.496359][ C1] ? trace_hardirqs_on+0x67/0x240 [ 456.496362][ C1] kthread+0x361/0x430 [ 456.496365][ C1] ? process_one_work+0x1740/0x1740 [ 456.496369][ C1] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 456.496372][ C1] ret_from_fork+0x24/0x30 [ 456.496891][ T1069] Kernel panic - not syncing: hung_task: blocked tasks [ 456.728626][ T1069] CPU: 0 PID: 1069 Comm: khungtaskd Not tainted 5.4.0-rc3+ #0 [ 456.736057][ T1069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.746113][ T1069] Call Trace: [ 456.749410][ T1069] dump_stack+0x172/0x1f0 [ 456.753726][ T1069] panic+0x2e3/0x75c [ 456.757638][ T1069] ? add_taint.cold+0x16/0x16 [ 456.762550][ T1069] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 456.768178][ T1069] ? ___preempt_schedule+0x16/0x20 [ 456.773274][ T1069] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 456.779409][ T1069] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 456.785542][ T1069] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 456.791677][ T1069] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 456.797831][ T1069] watchdog+0x9e1/0xef0 [ 456.801975][ T1069] kthread+0x361/0x430 [ 456.806026][ T1069] ? reset_hung_task_detector+0x30/0x30 [ 456.811547][ T1069] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 456.817768][ T1069] ret_from_fork+0x24/0x30 [ 456.823800][ T1069] Kernel Offset: disabled [ 456.828140][ T1069] Rebooting in 86400 seconds..