.890738] do_splice_direct+0x1da/0x2a0 [ 676.894916] ? splice_direct_to_actor+0x890/0x890 [ 676.899800] ? security_file_permission+0x89/0x230 [ 676.904771] ? rw_verify_area+0x118/0x360 [ 676.908955] do_sendfile+0x597/0xce0 [ 676.912704] ? do_compat_pwritev64+0x1c0/0x1c0 [ 676.917307] ? fput+0x128/0x1a0 [ 676.920614] __x64_sys_sendfile64+0x1dd/0x220 [ 676.925128] ? __ia32_sys_sendfile+0x230/0x230 [ 676.929724] ? do_syscall_64+0x26/0x620 [ 676.933717] ? lockdep_hardirqs_on+0x415/0x5d0 [ 676.938317] ? trace_hardirqs_on+0x67/0x220 [ 676.942924] do_syscall_64+0xfd/0x620 [ 676.946750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.951953] RIP: 0033:0x45a639 [ 676.955342] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.974254] RSP: 002b:00007f42967e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 676.981991] RAX: ffffffffffffffda RBX: 00007f42967e1c90 RCX: 000000000045a639 [ 676.989308] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 676.996600] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 677.003891] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f42967e26d4 [ 677.011181] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000009 15:03:08 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\bxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:09 executing program 5 (fault-call:14 fault-nth:20): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 677.271887] BFS-fs: bfs_fill_super(): Last block not available: 109 15:03:09 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x10000000002) 15:03:09 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\txt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000001140)='net/route\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf2d}}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x1ee, &(0x7f00000003c0)=""/251, 0x0, 0x0, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1cf}, 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00\x8es', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r2, r1, 0xd}, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x904, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000d00)={0x7, 0x0, [{0x100000, 0xce, &(0x7f0000000780)=""/206}, {0x237615c3e93ea954, 0x8d, &(0x7f0000000880)=""/141}, {0x2000, 0xfc, &(0x7f0000000940)=""/252}, {0x0, 0xfb, &(0x7f0000000a40)=""/251}, {0x3001, 0x58, &(0x7f0000000b40)=""/88}, {0xf000, 0x70, &(0x7f0000000bc0)=""/112}, {0x0, 0x88, &(0x7f0000000c40)=""/136}]}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f00000001c0)={0x2, &(0x7f00000005c0)=[{}, {}]}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0x1, 0x6, 0x4, 0xbb9, 0x1f}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000080)={0x8, 0x4, 0x6, 0x8, 'syz0\x00', 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() splice(r0, &(0x7f00000001c0)=0x1f, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x1, 0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioperm(0x8, 0x8, 0x6) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000e40)=0x4f1) 15:03:09 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\nxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 677.804422] FAULT_INJECTION: forcing a failure. [ 677.804422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 677.883889] CPU: 1 PID: 20219 Comm: syz-executor.5 Not tainted 4.19.84 #0 [ 677.891224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.900589] Call Trace: [ 677.903182] dump_stack+0x197/0x210 [ 677.906826] should_fail.cold+0xa/0x1b [ 677.910727] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 677.915830] ? __might_sleep+0x95/0x190 [ 677.919817] __alloc_pages_nodemask+0x1ee/0x750 [ 677.924484] ? __alloc_pages_slowpath+0x2870/0x2870 [ 677.929497] ? find_held_lock+0x35/0x130 [ 677.933557] ? __do_page_cache_readahead+0x3f1/0x720 [ 677.938659] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 677.944194] alloc_pages_current+0x107/0x210 [ 677.948597] __page_cache_alloc+0x2bd/0x450 [ 677.952913] ? kasan_check_read+0x11/0x20 [ 677.957063] __do_page_cache_readahead+0x1ce/0x720 [ 677.961988] ? read_pages+0x530/0x530 [ 677.965786] ? page_cache_sync_readahead+0x1d3/0x520 [ 677.970888] ondemand_readahead+0x543/0xcd0 [ 677.975346] page_cache_sync_readahead+0x281/0x520 [ 677.980298] generic_file_read_iter+0x168c/0x2ac0 [ 677.985193] ? save_stack+0xa9/0xd0 [ 677.988851] ? kasan_kmalloc+0xce/0xf0 [ 677.992741] ? __kmalloc+0x15d/0x750 [ 677.996468] ? do_sendfile+0x597/0xce0 [ 678.000359] ? filemap_range_has_page+0x290/0x290 [ 678.005206] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 678.009951] ? rcu_read_unlock+0x16/0x60 [ 678.014011] ? percpu_ref_put_many+0x94/0x190 [ 678.018503] ext4_file_read_iter+0x180/0x3c0 [ 678.022908] generic_file_splice_read+0x42c/0x750 [ 678.027743] ? add_to_pipe+0x350/0x350 [ 678.031619] ? __inode_security_revalidate+0xda/0x120 [ 678.036813] ? security_file_permission+0x89/0x230 [ 678.041734] ? rw_verify_area+0x118/0x360 [ 678.045868] ? add_to_pipe+0x350/0x350 [ 678.049757] do_splice_to+0x127/0x180 [ 678.053549] splice_direct_to_actor+0x256/0x890 [ 678.058210] ? generic_pipe_buf_nosteal+0x10/0x10 [ 678.063046] ? do_splice_to+0x180/0x180 [ 678.067008] ? security_file_permission+0x89/0x230 [ 678.071928] ? rw_verify_area+0x118/0x360 [ 678.076069] do_splice_direct+0x1da/0x2a0 [ 678.080221] ? splice_direct_to_actor+0x890/0x890 [ 678.085061] ? retint_kernel+0x2d/0x2d [ 678.089480] do_sendfile+0x597/0xce0 [ 678.093199] ? do_compat_pwritev64+0x1c0/0x1c0 [ 678.097772] ? retint_kernel+0x2d/0x2d [ 678.101664] __x64_sys_sendfile64+0x1dd/0x220 [ 678.106152] ? __ia32_sys_sendfile+0x230/0x230 [ 678.110809] ? do_syscall_64+0x26/0x620 [ 678.114772] ? lockdep_hardirqs_on+0x415/0x5d0 [ 678.119346] ? trace_hardirqs_on+0x67/0x220 [ 678.123657] do_syscall_64+0xfd/0x620 [ 678.127450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.132637] RIP: 0033:0x45a639 [ 678.135820] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 678.154712] RSP: 002b:00007f4296802c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 678.162410] RAX: ffffffffffffffda RBX: 00007f4296802c90 RCX: 000000000045a639 [ 678.169685] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 678.177041] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 678.184301] R10: 00008000fffffffe R11: 0000000000000246 R12: 00007f42968036d4 [ 678.191556] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000008 15:03:10 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) dup3(r1, r2, 0x80000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:03:10 executing program 1: pipe(&(0x7f0000000340)) lsetxattr$security_evm(&(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f00000002c0)=@ng={0x4, 0x12, 'n'}, 0x3, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000000c0)={0x0, 0x3}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xf17) unshare(0x40040400) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r2, 0x3f, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="778741f35c670000d500918f8745d5c11fe0a8a4ec52e633dc11b51bce84705d99f76cf4e5c992445df511040b0e91cd05bc21b0770cbfd78373cf1a04d9020641a09392b5", @ANYRES32=r2], 0x2}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = creat(0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000400)={0x0, @bt={0xc682, 0x5, 0x0, 0x3, 0x7, 0x9, 0x6, 0x1000, 0x401, 0x8, 0x9, 0x9, 0x1f, 0x10001, 0x14, 0x17}}) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000)) accept(r0, 0x0, 0x0) 15:03:10 executing program 2: ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getpeername$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xf8, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x9, 0x0, 0x10001, 0x7}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000080)={0x7, r2}) recvmmsg(r0, &(0x7f0000004a40)=[{{0x0, 0x9c0a, 0x0}}], 0x8000000000003b0, 0x0, 0x0) 15:03:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x14, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback=0xac141427}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x48}}, 0x0) 15:03:10 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\vxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 678.563863] IPVS: ftp: loaded support on port[0] = 21 15:03:10 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\fxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:10 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\rxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000002) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:10 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x0ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:11 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xc4143) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100)=0x8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x40000, &(0x7f00000000c0)={[{@default_permissions='default_permissions'}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@subj_role={'subj_role', 0x3d, '/dev/sg#\x00'}}]}) remap_file_pages(&(0x7f00003b9000/0x1000)=nil, 0x1000, 0x1, 0x9, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 679.320982] IPVS: ftp: loaded support on port[0] = 21 15:03:11 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x0fxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 679.511352] audit: type=1800 audit(1574348591.306:236): pid=20318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16564 res=0 [ 679.975280] net_ratelimit: 22 callbacks suppressed [ 679.975288] protocol 88fb is buggy, dev hsr_slave_0 [ 679.986231] protocol 88fb is buggy, dev hsr_slave_1 [ 680.375287] protocol 88fb is buggy, dev hsr_slave_0 [ 680.380429] protocol 88fb is buggy, dev hsr_slave_1 [ 680.775217] protocol 88fb is buggy, dev hsr_slave_0 [ 680.780358] protocol 88fb is buggy, dev hsr_slave_1 [ 680.855219] protocol 88fb is buggy, dev hsr_slave_0 [ 680.860348] protocol 88fb is buggy, dev hsr_slave_1 15:03:12 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffe84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/enforce\x00', 0x341040, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000500)=0x4, 0x4) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) r5 = dup3(r1, r2, 0x0) dup2(r5, r3) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f0000000040)={0xab, 0x10000, 0x9, 0x6, 0xe, 0x9}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xa1b4693cd2c4b165) socket(0x0, 0x2, 0x0) 15:03:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x141842, 0x0) epoll_create(0x9) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0xa}, 0xb0b8) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x10000) fcntl$notify(r1, 0x402, 0x14) 15:03:12 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000003) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:12 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x10xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xaf9, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xc, 0x4, 0x4, 0x23a, 0x0, r2, 0x0, [0x305f, 0xa, 0x300, 0x1800, 0x6000000]}, 0x3c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="9a00000000b100660f001deb6f000065260f79b900000080640fc71ab8f5ffffffbaffffffff0f3066b893000f070f01c8b8df000000c744240000000000c744240202000000c7442406000000000f011c240f300f0fd4aec4e27d18c70f06b8000000800f23d00f21f8352000000a0f23f8000000000f10c744240000000000c744240200000000c7c2a406000000000f011424", 0x94}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000042000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000100)={0xaa, 0x7fff, 0x2}, 0xc) 15:03:12 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setresgid(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setresgid(r5, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x3, r1}], {0x4, 0x9}, [{0x8, 0x3, r3}, {0x8, 0x4, r5}], {0x10, 0x2}, {0x20, 0x3}}, 0x3c, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) r8 = openat$cgroup_ro(r7, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) write$UHID_DESTROY(r8, &(0x7f0000000040), 0x4) [ 681.156657] audit: type=1400 audit(1574348592.956:237): avc: denied { map_read map_write } for pid=20341 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 15:03:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0xfeda, &(0x7f0000000000)={0x0, 0x5859b612200621fe}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4001, r3}]]}}}]}, 0x38}}, 0x0) [ 681.273438] audit: type=1800 audit(1574348593.066:238): pid=20357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16569 res=0 15:03:13 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000004) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:13 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup(r0) r1 = getpgid(0x0) sched_setattr(r1, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x2, 0x3, 0x0, 0x1000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) write$P9_RWALK(r2, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0xfffffffffffffdbc, 0x0, 0x0, 0x0, 0x4, 0xfffffff6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_bp, 0x0, 0x2, 0xfffffffc, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={@local, @mcast2, @empty, 0x0, 0x40}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f00000000c0)=0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x4000, 0x0) ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f0000000240)) 15:03:13 executing program 4: mount(0x0, 0x0, &(0x7f00000001c0)='omfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000880)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x10000014d, &(0x7f0000000900)=[{&(0x7f0000000540)=""/101}, {&(0x7f0000000440)=""/27}, {&(0x7f00000005c0)=""/232}, {&(0x7f00000006c0)=""/78}, {&(0x7f0000000780)=""/211}], 0xffffffffffffe28, &(0x7f0000000200)=""/18, 0x14}, 0xd10c) flock(0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x105}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xf8, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xf8}}, 0x8000) syz_mount_image$msdos(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000001900), 0x8, &(0x7f00000019c0)=ANY=[]) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 15:03:13 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x11xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 681.495249] protocol 88fb is buggy, dev hsr_slave_0 [ 681.500388] protocol 88fb is buggy, dev hsr_slave_1 15:03:13 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x88100, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0x1, &(0x7f0000000140)={0xff}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x1, 0x3}) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 681.764096] audit: type=1800 audit(1574348593.556:239): pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16552 res=0 15:03:13 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000005) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:13 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x12xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:13 executing program 2: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x13) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="24000000260007031dfffd946f610500070000006700000077000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000002680)=ANY=[@ANYBLOB="01000000cc91c5547caf31b977bb2573e3e374425ce22b453bb6bee1fcb61c35cadfa7a66d871c8d4347a07f3d88da8277eeb567f767ba3e25c5", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000026c0)={0x0, 0x1f, 0xfff, 0xcef, 0xf1, 0xffff}, &(0x7f0000002700)=0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_UIE_ON(r12, 0x7003) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}, 0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000002740)={r13, 0x3, 0x200, 0x3, 0x3, 0x2}, &(0x7f0000002780)=0x14) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x1, 0x3778, 0xfccc, 0x3f4}}, @init={0x18, 0x84, 0x0, {0x6, 0x8, 0x2, 0x9}}], 0x30, 0x20008008}, {&(0x7f0000000200)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002500)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="5a4d92837b5b8d77f4fe2c23134d4804ba856f5ae0cb9be7408153a24f792bf5ddf04e49010f51ab4d7fc55855909dbe9298533a65c1eb17409937100ea1371d78776e0960e1736e61ac6c558e39816a31fb8ab3a9d6509ce26154f7c3c7a94164a7e31a1a56f2729a1736ba09954bd40392e1f791fb1f90b161ef2f1a1427752fd086ea82c1373dd546e2487db856001ed1eac965cfcd631949e9aaa684629cdadba76d926decc38ea5f9ab5ff2bfa832fdc2f91e727c8d0e7a", 0xba}, {&(0x7f0000001300)="50d303313c9a4755a3dad67cd72f10eca4acd0a51676113a3e43104177780d7400702ecc196a020daee92373e64e0c6f54c4c5783bd573f83dd97e59d3159d5fef577210b636bb1dbb8d7af223c6f045e855bdf03f2e6e95d9c02ebba6085d3e98eedf7196ce55013b98f9375729d37e3cc67d79dcd26a170943ece4d37c2c5e17531d0e341bc655bdedf2fc35c318a03e80fc5673bbe1db3b0a4847f978dacd460a3d19166f70a07db615bf663295384b5e1f88a42dee8fa017bf415dec01710aa0bfc7d6be75a7013d5145025960e699a8f76e0f443c1533a053ce439a88f5e9af80349a52b7f3b01d4c484b71a68f835364251d5019cf36b04854804fcbda8197743f5b8ff159e009f042f884267533e78c60b3c7f3ef05699163e99713107f1600700cead897d9c92553d41ef434f1a983ab3ca295d500ade0b785b2c93d2b5ce38f9768080392fa6a7b3b80e20a4e1611883d1a5e2d1c9de84cd168dbb93fc73833dfab8847b04dc5b74eea06070b735abf26726cc06c43cb7fe37ce410221f411fda5323c68b079698f490f528e1aee527e556aeaa72a69c7a1641a0b15ef8db4ae9f6373d68b2fe47731d8b28154bc5c388714f3b3c64f7961308820f63403b0fd7ed2efee14b653e07b542910ec932571a11233693197deb7c1368011db7206fdc18a41d89a101ff3a9829c27753e17bbf4dfc8d444d00ae9c43356e38c4b70c09376a70c2a84b5f8b3b586125559a07205221ed7970bb5132289f3b9ca8175ce69d49b427433ed7463214cb677f34d25ad64fa7643ce26e3d7ec578968e835f52aa3503c2c33b86b03111bbfdd38ee15190867a802008e510759e32de51474e23846f0108f219c07ce1557f66106c4eaaf0e5c68ac18f3c2f5b5f07773a40742929801ba990b7b2cef0eb38d4e8977df44e4c61a0096069ad91efe58053bf9b5ea1736a38ed99bf41078789071be91a79588c11fd976ea54fd15c2416f4bc5b92de728bd3359c4ec0e686bed5e1b918e241043841ce3039bb331459e52cd76773e166e0248515b2ae95b3a782190e942bbef3df28d1e9fb78156570ccb46df7ea2fee7944590c66e1317b80cc584c5c3af8c70a8881e9a84c8dac6201e51d70c596fa232acab6beab920e39e3941626a023b37d557a118171ce27fe7be7b4cf2512caffc5b1842ee0e30e49cbfab3a0af6c796bb30a18bcd57c0b93527213e97143ea67847063006a37ead11a6ab2fb151674756b995603578ff2d496678079388287bf90af14635b248f51b0fae67d16bfff80c88a473c64972e1694b7772ee6fc52df5b0b849bea8f9c3dfb92dcfcb6bccf8f08203a6a281dc1c7503f4fc8c5019f3d5ec24ebc9056d8679771b4e3cdfe9edfcf9fb47fcaa4f6a9dd1700946c06088f3fd76624c9b05cf508cb53bcbd228bd987c0ff2cf44f4712a05d64f78b62fb5c9226185c18033d7bbb9178f5683a6b2ade3bf0206e6340dfc00868234969f6a956edbff15e8f1fbb2b343d3781e9cd8d3da8b533d114942bf00403f23f45413c1e567a4b1a9b909e525c63741c219f0e4cc55f20721551460d8307bdd819dd3b13ff6aa3f72dde31e8ec79343c923063d83fc295290972877931c799985fcb9bb8a9709c356b5b5a54cb39db4f882aecfb731e52e2219c26df335938274bc2c1440410f86e76532bea2399c9bf6c76d2ff64f0951188c27a8f42e1ff8126bed78221e0b64c7d9d27d7bc8ef9b9abc829feedff7e18ef5d50a2d8e5de0c4e1a476f86518270b5dcca927595f5e3b867a999a04114b6b896dd49c767b15d318cc3c6208040337cd84e2e8977dd4f1773f9f300cb682e7428546f78ed0ad3dbc53f5f7a89b006f52216c17a214b654da1377787277a2572e904e7039bb019e8caf112535b64c884bb1644fe982eb03324690e0852f261800b5d53bf544ea30b9be368592b4152ed961e9f5adf41b59f2465bcfda7b730a390e017055d3fcb36b65a2d8efe6d283743561b8f5767bd4cdc2016c92be26a5d69d641099b5fed1a87f09d80a1fe35f06a672193d309a5a0b676cb5cc0e5757909a59dfd0d0a0da9d4fa4262645accfc59dce5413df616f59b2970d82537463f52338e5735c77c416a58d913515ba2a8400e4a8855fb9e0bcee3d1b7c3b61a9ecc71820aa47bf23597c3b51d3b2ba453f5917025c41d6d2cc194e4008ba95ef443298e7d513ddfef55d2bb42bd5bbf06dcc0c5245cbb0972ba94df14fa5454fc9f002dc10f8d516edde10fdeabf02b8168f1d03abf59d2a5c151b2127f4fb30f965b74a9f62491ac8fb79026656bf69efbc6eecbb4bd880f357a1e58799aa592cd5727077e28aaab497b537bef05464f5fbc14543dde2899c3f303e3c1cf81bd62335a1f8296acfe88fa779015467dfbfbbb33a57db8808c28d4b5fda11314873678ea2850ab2282dcca763500b71353abf1921732499d3d0dac3a04f88d643f83d20dacdbd655e19154d3e1755aa2a199a6ffc832854fa72d66cbf765337c3fce1f41a4c17d4661cc12e7e2b0312c6dcab6951bd464e869079727a6b34db366cd84d4512445442b0443b6c4b6d827fb1b1ae61c770be8a71854c0bbc1d54a1c567f98aa02680923b9291b30966b0a31c63176c3b7f246b917768251f262a9c15fb1b937ec1d8a5f6987723253b3cb8c5ec5e4eb86463c04a583b75c8f93e01ef26b3fdbd688984e4e94f5a8097f90c7a98ed24852e4764ce2c0027af61478305446bfb00557c7f28ad6475e478a543dd3a732f34d33c9d1689602c98276c688594f7a87f321c31c70912ee13ef301aba6d5d2c96a054b47e898c81dec305ba434c3f7ef56fd7f54983b3a387221c5a7959f62641398233102a71efec4e0b70c78dbaf9a271f9fd797cbe66cf69b23e7a6efb214ae671efdd7986fa7c826ab351368b4a225e10dbc644af98c007f490d42b2c612483a3be055751cdbfbfc17792faa721ce3f44d52fff2671116647d8a2aa108eea5a174d7068be1dee7b10ad6a3483b1a3eaa28de7dcc94bd7d96b59f53cfd77e555a494bf34d87fedcb1a70fb5ec423628653591d661c574b74e9abddeb8909b97dffa52e32da8effc5e7c2fc7d750e1d5a452532df29eae6b2295e02124817f09d7fc88443de9c6adfb9aeb9847502917dedf5988f8bd67357915c24f471a2f447b30f8968feaa87ce386ce02cedd50f214b094c23b14b7233380ba60481735ce7f9643489b1efc08f4de27dbefbfe5fbc096ac2c7937334541dbb3c7ab802d53a8acc8ab4cc887800b235a5f901803c0d0eafac84ece6f5fdc795727a580e6ebc31e1b689f4ff21a65becde04f5ea1e99e1ccc34285692359e9eb1202e73a4a1329b7ab8cbeacd4493a34baa6c46ca6cec0241eaee6e9210131ed48d38640f7e26132f75a572470a31fc83242820fbc399854d8fa9113ed603acc32a9b09ba42100d4ee5971c874a026bf13c77629304a003b47cfe5e3f5b069043603e9a07d41c5d6acaaf44911014e4f491db5c6d9c9336650fb7703c7a7987f8b07d33d76f53e384dc40544dfb1597082d8f23f1b7dcc97f8d8b37f3280cab2f5cd516303568609355c4b50acb9b63d50020f81c8c957121198ff966865c31b2cf0ee30d18c492ff432f43baaa0bca34024232734e16c41c59da2e077b81b7ca2f325a82080c18d292906bbaa0bb80ae1a1e95d6e46a17b756a3d7c113e00d546d42b4723a0cd01e7352271a72edaa168cd0c99bc3410a32469f38e069687b493b5d81f4318aeadad9599636b8bb49313d42da89f08ce3777a6f3173c7543e3e36ea3a6936fe79dbc2ac840d3bee7cdb6e9cb7ecaf8f630c404da833ebc78d95924465083479780a405edc45f165dd338c9c58d8b2fcfada365e6dc127c6b337c46859b1c7e6de2ab297b54cee21893ce5f3b45b3ca5e5bae6a2b40c9b95d276c0bd2bbad0b12facad367b3452a43b7306adb7ecd487bb8e86f372202d617b85fa829f01f4881eb65e0356a7612048cafa1f37faecf81d1bf700977933bfce1a7c1d7177ee7e0f5bac4482aaeb0150b9980d834c96b8a0da0da7488fee2076e1f6315364557aae5f5375a0dfb5f207e8432c28af33d0b8fc98aa866c5c4da072c20cfd1c437009b67f0e26b8ec8cc2dbda536041c51b84b228a7c8f612321270d7bd29c64d0fa74c16ca614cd985211e8e958c240753caae03193ebaabd99f9c0ae140581f4a0a1cd72a1aedc78e133801d90ed2f536ba62f8aef0ed590f396a6cf0abd7ffc52c6f7fa9a678f22449d75fe5641d4b4d336dd4c4d68b4f9ae4b3d8eeaef66c49f3ca510229ff0f06860fed2250305bd466abab0b76d63ae2e79cb1a0b58b0832f1853eca85833511560d6056ef3c952bee2d6dcf3fd021e919f8472df6a74ecf7dfa5b4c4d928ecbc8fcaaa00e2854b8fd9ce6e437aab69731ac8faf3db8b4f74cf69fc3b2132a51f67702ef4ee0f9c79cc8ef4ddb263ce7a4d7f727394174c6d0fb2cdc6530782782a3b4f5804b33088d6390ad16a13aa357f20d35d6684edeee1743936268b193e02c8f6d930d3064c7feefee8c752ce6da8e614208c630d7723e002a34b0a856f02c6dd47c049a297d50bb100b835542d84e9582ce405cdf1094bc8ee4a8a8a24177ac47799c64e33da7dfb11d6dcd30637fc29a4e9b1cc528f61a59d1117acb76524f8fdb5d86d0563417fa3614c69c9c1953532a84a9d3dea60a8851673c171673380a796788030c28e4ac8bad49e8481a76ba08b6227356a1c5221b2df2ab25ffecfc89334c338a639c1059e927614288b9d55bdfda8365aad262188a4ff20a375a469c113f7085d2ea11e4df75a6d7f0f9a2f04368177efbcb45f53d4784b19ef62e21253992e1c7fcc35598f04642ffc0266c6eca426439a7125801a38a5df0ff91816d21eeb8fbbe8b2351892774d65ee3d1e988dfc41a738fce426734cf1dba89f13b97e9d40ae8879691fe48c9b2386af1c074a4e0fc5fe1c8f810181eb3a2f5c4945be192383c8484f7dabb131934d50dc6ac0b2f547140fef6f3ee4ff1154ebe55eee7732b1058137deb1a68813490e8fba790ec2e5e31e7fda3d9d59ef3622520bb6336d655fa75ab7676828363e4e1792cb4728cd28a247ed193c0a8ffdbd8540456e12a659bae6ac8d75efded9af2f57d3ffddb66c50f68efad702faa0a05b6b3402f11b64839526c378ebcd80fd1a54331f6c49c6f9419f0ccb43847e8de856e5645ebca0b151626607df8cbedd670f5b78c3d144a56e464b942ec9fcf4ec027c8df4b1ddfbd0f98d437ec9f3d4936646ee558bf709e4ea3809e76c5adc3cbb124a7b3674fb60b290c0bc644f4ca660167e500e74eb80fb880eb7ea8b9b624c9010770aa7583029b670a2ce8785e12724af8d5cc9fed368abae8a286c8e33e2b730a1f42fdb62bddcd7db0341d15ee2d602574564408bcd4db46d655b194822524e1a73e6ab53d407c286a21c1a282ffcbf8f2653aa21d4eb8ed2fcadd81455c6a5c523eeff8f1ae341282424e76f41a2c4cfb8337ad29363f29ae8dc9f779c5d47315d69cdad6058cc7c483d58fae8991e7399908b0756a83abc7c652765aa85059da70281cde0239e72af2509f00f9c4f70b0ee53807c24c5f69f5542122a37f1a294d6d347d45a641fcc1faae29448d73b2ad35690c01a30c91323c4e89a7ea40cf69a34f14f47a719718b6f02be22f2072f85d8cfd90daaa02f5661904f8e32fe2c43ce6a955fb80aca4142780672d3baf830277278df9570abd6a", 0x1000}, {&(0x7f0000002300)='+', 0x1}, {&(0x7f0000002340)="eff0775dff91468657b26b1def8e7daf113f1e60aceb383a2558add8016b0efbedd606049d8e7f4047710926052140890762c6555e2fcb60e556fe6392033476ea317dd861d12105d8a42d518cbecd933de6ebe0fe2627d100a365db8e585c54", 0x60}, {&(0x7f00000023c0)="439fc05e3e76c59e09b203d247bd997eafda2aba26a9f54a12bf683d330eb326ebec060eaba7cba30f1bdd2b6495a6ed71c2e1e706caa5a356dbef5da7bd5001de204a4d03e84a9f62a15b80ef5dd5242bb5d6eb07c7b0626a749e29fbe688d644905fe5a004e292ba9daedd3efebc40e0a9b2b880f63c5e82281bea7d0e73b35e0dd376f0cbd70ebb8520432d1a204b6298e71f7bf2d54f", 0xfffffccd}, {&(0x7f0000002480)="588e411210fbc4e5f74706a14aeee6830527ff3d94f7fc7557f449226390c4a2f6cd661c682a6c73302c058c5a14be02525cb3fc8e87f01b3638f66b3b0b2e76ccb60d0afe2d5f8a1844bef8c9485b67cfd46420bc38c10457e9e817d0a15cab01cb4968c4b85dae5a45e7efd0c50102aea15c5389738975", 0x78}], 0x7, &(0x7f0000002580)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x200, 0x8, 0x0, 0x100, 0x9, 0x5, 0x1, r4}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7fffffff}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0xffff, 0x18, 0x0, 0x4, 0x17b, 0x10001, 0x2000000, r7}}], 0xb0, 0x400}, {&(0x7f0000002640)=@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x16}, 0x4}, 0x1c, &(0x7f0000002680), 0x0, &(0x7f00000027c0)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0x599, 0xc, 0x3, 0x4000, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x11}}, @init={0x18, 0x84, 0x0, {0x401, 0x7, 0x100, 0xc219}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x9, 0x20a, 0x5, 0x401, 0x7, 0x7fff, 0x3, r14}}], 0xa0, 0x4f4039cb9b5b45a3}], 0x3, 0x54) 15:03:13 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000006) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 682.129596] audit: type=1800 audit(1574348593.926:240): pid=20407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16582 res=0 15:03:14 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x13xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:14 executing program 4: socket$inet(0x2, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280)={0xffffffff}, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000080)=0x9) fcntl$setpipe(r3, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}]}) write(r3, &(0x7f0000000340), 0x41395527) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 15:03:14 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x5, &(0x7f0000000040)=0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r1, 0x0}]) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x80) r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x8, 0x340) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x94, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in6={0xa, 0x4e22, 0x7, @rand_addr="5b080618a01d9c90c02f9631c5a06f3e", 0xffff}}}, 0x90) r5 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x5, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140), 0x4) [ 682.503655] audit: type=1800 audit(1574348594.296:241): pid=20432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16570 res=0 15:03:14 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000007) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:14 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x14xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:14 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x15xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:14 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000008) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 682.852616] audit: type=1800 audit(1574348594.646:242): pid=20463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16570 res=0 15:03:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2e26ff56", 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:03:14 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x16xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 683.151278] audit: type=1800 audit(1574348594.946:243): pid=20476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16570 res=0 15:03:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000009) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:15 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x17xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:15 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2048, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x10}, 0x0, 0x8000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x501, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000500)=""/247, 0xf7}], 0x3, 0x7) r3 = socket$kcm(0x29, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000206201) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xa7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000180)=@raw=[@map, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2712b011d2548b93}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x70ad) 15:03:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20600, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x8001002, 0xb4, 0x3}) clone(0x51220000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 683.496414] audit: type=1800 audit(1574348595.296:244): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16539 res=0 [ 683.526421] device nr0 entered promiscuous mode 15:03:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000000a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 683.600455] audit: type=1400 audit(1574348595.396:245): avc: denied { sys_admin } for pid=20502 comm="syz-executor.1" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 683.621976] IPVS: ftp: loaded support on port[0] = 21 15:03:15 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x18xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:15 executing program 2: userfaultfd(0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000100), 0x0, 0x0) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/45, &(0x7f0000000140)=0x2d) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="a52769085663e0ff95178f5cf190aa61ba62ae68815c655529799e209b61dc45da", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000300)=""/83, 0x0) tkill(0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r3, @ANYBLOB="000828bd7000fedbdf2503000000900005001c00020008000100070000000800010020000020088c7000040001000000020002000800030009000000080003000000000008000300010000000800020081000000080002007f0000000800010006000000080004000000000008000200080a00000800030006000000080001006962000008000100657468000c000200080004000299972c00000000080001006962eaff644e6bee59e495294d9df54e00e7faf12c12a4301829e3b496e1d9f48d0d30bb8c42"], 0xa4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000240)={0x148, @time={0x77359400}, 0xc0, {0x81, 0x7}, 0x40, 0xee720ec273b80d55, 0xf}) msgget$private(0x0, 0x20) msgget$private(0x0, 0x4) r5 = msgget$private(0x0, 0x8d7e630aab4839e0) msgrcv(r5, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r5, 0x0) msgctl$MSG_INFO(r5, 0xc, 0x0) 15:03:15 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x19xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 684.183684] IPVS: length: 45 != 8 [ 684.189880] sd 0:0:1:0: [sg0] tag#6114 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 684.198803] sd 0:0:1:0: [sg0] tag#6114 CDB: Move medium/play audio(12) [ 684.205739] sd 0:0:1:0: [sg0] tag#6114 CDB[00]: a5 27 69 08 56 63 e0 ff 95 17 8f 5c f1 90 aa 61 [ 684.214725] sd 0:0:1:0: [sg0] tag#6114 CDB[10]: ba 62 ae 68 81 5c 65 55 29 79 9e 20 9b 61 dc 45 [ 684.223803] sd 0:0:1:0: [sg0] tag#6114 CDB[20]: da 15:03:16 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x1axt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000000b) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 684.444547] device nr0 entered promiscuous mode 15:03:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x17f9, 0x1}, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000180)={r5, 0x9, "e15cc4f66b97691cf4"}, &(0x7f00000001c0)=0x11) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r6, 0x4}, &(0x7f0000000280)=0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getsockopt$netlink(r7, 0x10e, 0x8, &(0x7f0000000000)=""/22, &(0x7f00000000c0)=0x16) syz_read_part_table(0x2000023, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0), 0x0, 0x1c0}]) 15:03:16 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x1bxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3810c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x4000) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b80)='cpuacct.usage_percpu\x00', 0x2761, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, 0x0, &(0x7f0000000380)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d623455e1ffb5ea3544438cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) accept$inet(r5, &(0x7f0000000200)={0x2, 0x0, @multicast1}, &(0x7f0000000400)=0x10) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) getegid() chown(0x0, 0x0, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0xc9d, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000680)='devlink\x00') ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f00000003c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xee00}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user='access=user'}, {@afid={'afid'}}, {@loose='loose'}, {@afid={'afid', 0x3d, 0x2}}, {@aname={'aname', 0x3d, '9p\x00'}}]}}) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000740)={0x0, 0xfb, 0x4c, 0x0, 0x0, "3535612161354c0fb81a15fda9d281b4", "a4d60b5094548af077bcabee2adf4e35466eba17e1aaac20f41178deca0e6663f5edc458c3cbe8b58dd2d47817d51c61f4bdc7d839a191"}, 0x4c, 0x2) 15:03:16 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x1cxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 685.015239] net_ratelimit: 20 callbacks suppressed [ 685.015247] protocol 88fb is buggy, dev hsr_slave_0 [ 685.025448] protocol 88fb is buggy, dev hsr_slave_1 [ 685.224689] 9pnet: bogus RWRITE count (2 > 1) [ 685.366946] kauditd_printk_skb: 1 callbacks suppressed [ 685.366959] audit: type=1800 audit(1574348597.166:247): pid=20581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16556 res=0 [ 685.655317] protocol 88fb is buggy, dev hsr_slave_0 [ 685.660490] protocol 88fb is buggy, dev hsr_slave_1 [ 685.666006] protocol 88fb is buggy, dev hsr_slave_0 [ 685.671213] protocol 88fb is buggy, dev hsr_slave_1 15:03:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80800) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) fsetxattr$security_capability(r4, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0xf78, 0x8}]}, 0xc, 0x3) 15:03:17 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x1dxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:17 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f035000c803cf", 0x2f}], 0xaaaaaaaaaaaad09, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0xba8e}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:03:17 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x1e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000080)="632063dda5d13dbffb1ca86b3e55f74460eada4d7f16c636aa4d18e4b0958eae9cbffed16d3b693df1e6f24766f9b391", 0x30) ioctl$TIOCCONS(r0, 0x541d) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x7, 0x3, 0x800, 0x9, 0x6, 0xaf5, 0x6}) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='udf\x00', 0x0, &(0x7f0000000280)='\x00\x00\xbe\x88\x8b\xefO-Y1\xecc\xaaq\x8e\x82\xfcC\xe8\xcf\x91\xd6#;\xa4\x7f\xb8y\xa7+\xa1g\xb7\x87\x98WE\xc9\x81%\xf9\xf49\xf5\x19%\n6\xad\xd3d\xcb\x9dj\x9f\x8d\x12C\xc6u\x97?\x81Z%\xbb\xd0K\\\x0fdL\xae,\xc2\x12Obw\xf4\xf1Qn${#\xe0YM\xfa\xfcT~p\x80\x11\xf8Tj\xc3N\xdek\xbaBr\xc8\xac\xf8N?8\xbb\xe2J*\v\xcbL\xc9M\xae@-\ncg\x1f\xaap\xd0') 15:03:17 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000000c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 685.983295] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 686.006583] UDF-fs: Scanning with blocksize 512 failed [ 686.015506] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 686.030456] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 686.055773] audit: type=1800 audit(1574348597.846:248): pid=20598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16542 res=0 [ 686.078858] UDF-fs: Scanning with blocksize 1024 failed [ 686.093736] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found 15:03:17 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000000d) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 686.114313] UDF-fs: Scanning with blocksize 2048 failed [ 686.132339] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 686.158713] UDF-fs: Scanning with blocksize 4096 failed [ 686.183559] IPv6: ADDRCONF(NETDEV_UP): veth13: link is not ready [ 686.192119] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 686.213705] UDF-fs: Scanning with blocksize 512 failed [ 686.215273] protocol 88fb is buggy, dev hsr_slave_0 [ 686.224149] protocol 88fb is buggy, dev hsr_slave_1 [ 686.235077] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 686.246067] team0: Port device veth13 added 15:03:18 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\x1ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0x70, 0x400, 0x8, 0x6, 0x9, 0x7, 0x2, 0x8, 0xa9, 0xffff70c7, 0x80, 0x4, 0x200, 0x2, 0x1, 0x8, 0x5077ac05, 0x6, 0xfffffff8, 0x10000, 0x1, 0x40, 0x4, 0x4, 0x8000, 0x2, 0x1, 0x4, 0x3, 0x6, 0x1, 0xfffff1f1]}) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x100000111) r5 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, r5) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 686.301424] UDF-fs: Scanning with blocksize 1024 failed [ 686.329187] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found 15:03:18 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000306052000"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000017c0)=r2, 0x4) splice(r0, 0x0, r5, 0x0, 0x4ffde, 0x0) [ 686.381514] UDF-fs: Scanning with blocksize 2048 failed [ 686.405865] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 686.421872] UDF-fs: Scanning with blocksize 4096 failed [ 686.429466] audit: type=1800 audit(1574348598.226:249): pid=20615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16611 res=0 15:03:18 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x44ee) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$selinux_access(r2, &(0x7f0000000000)={'system_u:object_r:auth_cache_t:s0', 0x20, '/usr/sbin/cups-browsed'}, 0x4e) 15:03:18 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000000e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 686.594033] audit: type=1800 audit(1574348598.386:250): pid=20634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16548 res=0 [ 686.625280] protocol 88fb is buggy, dev hsr_slave_0 [ 686.630509] protocol 88fb is buggy, dev hsr_slave_1 15:03:18 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='!xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 686.682446] audit: type=1804 audit(1574348598.416:251): pid=20634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir406472309/syzkaller.X6RZkc/104/file0" dev="sda1" ino=16548 res=1 15:03:18 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000000f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 686.909363] audit: type=1800 audit(1574348598.706:252): pid=20645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16597 res=0 15:03:18 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\"xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 687.202761] audit: type=1800 audit(1574348598.996:253): pid=20655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16529 res=0 15:03:19 executing program 2: r0 = socket$inet(0x10, 0x800, 0x3f) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\xff\xff', @ifru_data=&(0x7f0000000040)="cb54859336463ee2bf58cdcea256728e4cd5d026baa2d2ddf006b3fe785e5fa0"}) 15:03:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:19 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) recvmmsg(r1, &(0x7f0000002200)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) 15:03:19 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='#xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x99, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2f8b927000000000, 0x80}, 0x0, 0x2000000000, 0xfffffff9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x43b) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000001800030a00000000000000001d01000008000a00", @ANYRES32=r2, @ANYBLOB="084cc074d1f11aea7f4fc8dab5ea0638c1abfc3b293c23a40763aff43fd28e62bed5a019ef12fd542f3672a8a9e39477995239c57301d41f47ddb27f6a82b18e91cc3f375d43b7afb749066b68685795970d4721a122f4ac413f9864614c14be495a1931be0d7a712bd4a82d9a4caca61d9a07259aa65ce692e84e6dc3762a8d8707e44a32c10e108a42b2797153db1eab015d34121c826ec85d0fbfd06ba77dab1a10ee04de9279e890ad90259d4aec0158d30f4179f5faa1f4119d23601b32020e6f37784c6e3722164fb79930f6a5bf67ec2a8373a00c4b14df779cc13364ef159d8f28172f9af0689109b8dadc71c5a4811e947013e20b9ad8747aa4f2cfb481ebff07a0ef8280a532a1c91e956c70d3f0b5c6d6feb9bfff56596a2560a5e50e4ec644694f28d9677085d5230ebc8c2124b4d34a1996ff65a97eb7d386a62c55011d1cdf004676af4a6035dafeeac75aa7e76d8ef6652a5fa75bd090815bb6f18bc9ca602c27f5d98082af29b1667ee6c6fb5733374893bfa5fd32db735f8530cf099fb5f47980d928c4726e76df6033f6d874bb5a91612acc95c84669fabfb994c2136212384f85ddf14518e4e278761f8e084a57332f9bb19be1f97ef574bdb8bc750c2478d7f0e63771e9be65f8b1e3eec7c6f7b511bd2aba661997105ae929e77647baa64864aa1fee6a5fc554fd1cd8f24e7b46cf188c100caef39ceaf94e3d49c2caa0d69bb508fdb1b175ee2eb49e8e8c868da310befcb8583220536de0ec8ca861bc61e9010ccf0b94c1b9f3060cd8d2a2", @ANYRES32=r3], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, [], r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) syz_mount_image$xfs(&(0x7f0000000740)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0) rt_tgsigqueueinfo(r4, r4, 0x16, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x5f}, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$radio(0x0, 0x3, 0x2) read$alg(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r9 = open(&(0x7f0000000340)='./file0\x00', 0x8201, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(', @ANYBLOB="0085f0c4a1000017204d"], 0x4}}, 0x0) r10 = creat(&(0x7f0000000140)='./file1\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6609) connect$netlink(r10, &(0x7f00000000c0)=@unspec, 0xc) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), 0x1, 0x0, 0x0, 0x40804}, 0x0) 15:03:19 executing program 1: msgget$private(0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) msgget(0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in6=@dev}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) ioprio_set$uid(0x3, r10, 0x80000000) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x8, 0x1ff], 0x3, 0x0, 0x400000, 0x9, 0x2, 0x16451eec, {0xfffff801, 0x5, 0x9, 0x1, 0x1, 0x4, 0x8, 0x1f, 0x3, 0x8, 0x5, 0x5, 0x3, 0x6, "959ded6eb755d5b0a16895573de7b81870185a39a3b4aca65e58c9868c7aca9a"}}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r12 = socket$inet6(0xa, 0x803, 0x3) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/268]) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) [ 687.642800] audit: type=1800 audit(1574348599.436:254): pid=20681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16547 res=0 [ 687.721875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 687.741210] audit: type=1800 audit(1574348599.466:255): pid=20673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16555 res=0 15:03:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000011) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @remote}]}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000080)={0x3}) sendto$inet(r0, &(0x7f0000000300)='\f', 0xc3f2, 0x11, 0x0, 0x0) 15:03:19 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='$xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:19 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TIOCSTI(r2, 0x5412, 0x3) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x9, 0x8040) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) epoll_pwait(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x0, 0x7, 0x0, 0xfffffffffffffe83) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000580)={0xa000201b}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x4, 0x7, 0x0, 0x3}) [ 688.093792] audit: type=1800 audit(1574348599.886:256): pid=20710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16562 res=0 15:03:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000012) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:20 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='%xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") close(r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="2f63351bcadf38a48eb4cf9ce1e07d413a4e3df239bc568beb3bc4ee7867953bb84866d1d9e00dfe666a81d7e21d60a225ffe4a83dda1f87edb333bd0517a4e41a361e6c12fbffe60e1fc8fbdfb4e61014a85c19a0435aa7dbdf58b69ad1c3977573a1562a1bac213ed5c375cee38ccca5b999d3b97bbc2a645089f9487d1099a9ef564b6635637f3fdf914ca153f3dc689172a970e42fbef32c2f1665a9fdbe2e931e1b64ae06af5a077de364266fe870d11411b330a25bbec2e533f77753d227ed1f355b60a2c43844228da712fb5ac8f7972641807b2776a0a0fac21637ecc05e2d98cdc83e8be6"], 0x8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x5, 0x0, 0x6, 0x0, 0x41c1, 0x60800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)={0x9, 0x0, 0x7, 0x5}, 0x6) r3 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfa\x81\x00\x00\x00\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7.\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r5 = dup2(r4, r3) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000180)='}\x00', 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x0, 0x0) ioctl$TIOCSBRK(r5, 0x5427) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000280)) connect$inet6(0xffffffffffffffff, &(0x7f0000d83fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000140)={0x10000}, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080)={0x100000000000000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in=@remote, 0x4e23, 0xcc, 0x4e23, 0x0, 0x2, 0x80, 0x80, 0x77, 0x0, r7}, {0x1, 0x6, 0x1, 0x0, 0x7, 0x2, 0x10001, 0xba}, {0x8, 0x6, 0x2, 0x100000000}, 0x9, 0x6e6bb5, 0x2, 0x1, 0x0, 0x1}, {{@in=@local, 0x4d4, 0x3c}, 0xa, @in6=@mcast1, 0x3504, 0x3, 0x3, 0x80, 0x4, 0xfffffffc, 0x5}}, 0xe8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, 0x0) 15:03:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000013) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:20 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='&xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc3376003639405cb4aed12f0000000000ae", 0x1a}], 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) 15:03:20 executing program 2: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700a51409ac4cb3cbcf00000000000000000000000017"], 0x80}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x284}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x2cc, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x138, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb62}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56e5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3797}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a4413ae}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b27}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x211}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40000}, 0x6008810) sendmmsg(r1, &(0x7f0000000180), 0x40000000000002b, 0x0) 15:03:20 executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x7}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x3, 0x400000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000380)=""/192, &(0x7f0000000440)=0xc0) getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r1 = getpid() sched_setscheduler(0x0, 0x5, 0x0) ptrace(0x10, r1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000, 0x40}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') read(r3, &(0x7f0000000040)=""/230, 0x1c02fa81) pipe(&(0x7f0000000240)) writev(0xffffffffffffffff, &(0x7f0000000600), 0x2f0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$netrom(r4, &(0x7f0000000280)={{0x3, @netrom}, [@default, @default, @remote, @bcast, @null, @remote, @netrom, @null]}, &(0x7f0000000140)=0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f0000000300)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:03:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000014) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:20 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\'xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:21 executing program 2: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700a51409ac4cb3cbcf00000000000000000000000017"], 0x80}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x284}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x2cc, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x138, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb62}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x56e5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3797}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a4413ae}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b27}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x211}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40000}, 0x6008810) sendmmsg(r1, &(0x7f0000000180), 0x40000000000002b, 0x0) 15:03:21 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='(xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:21 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000015) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:21 executing program 2: fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) ftruncate(r0, 0x2007fff) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000140)={0xbcf, "a85d52a1d1cadcdf94a136fc8aca08e17223ca89d5c5503c5ef61c958c9dc61e", 0x0, 0x1}) lstat(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, {0x0, 0x4, 0x3, 0x0, 0x3, 0x1}}, 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write$smack_current(r3, &(0x7f0000000340)='workdir', 0x7) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000100)='o', 0x1, r2) keyctl$describe(0x6, r2, &(0x7f0000000280)=""/156, 0x9c) [ 689.879766] overlayfs: conflicting lowerdir path 15:03:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x20, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 15:03:21 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)=')xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:21 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000016) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x18, r5, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x28010}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f00000003c0)=""/222) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d00"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080006"], 0x3}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f00000004c0), &(0x7f0000000500)=0x4) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 15:03:22 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='*xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 690.375249] net_ratelimit: 20 callbacks suppressed [ 690.375258] protocol 88fb is buggy, dev hsr_slave_0 [ 690.385457] protocol 88fb is buggy, dev hsr_slave_1 [ 690.454907] kauditd_printk_skb: 4 callbacks suppressed [ 690.454921] audit: type=1800 audit(1574348602.246:261): pid=20812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16689 res=0 [ 690.489813] selinux_nlmsg_perm: 102 callbacks suppressed 15:03:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000017) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 690.489830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20817 comm=syz-executor.4 [ 690.583515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20817 comm=syz-executor.4 [ 690.665500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20817 comm=syz-executor.4 15:03:22 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='+xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:22 executing program 2: socket$inet6(0xa, 0x400000000001, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xffff}], 0x600000) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = open(0x0, 0x141042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2010, r1, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8404}, 0x0, 0x0, 0xffffffffffffffff, 0x3) openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r2 = open(0x0, 0x0, 0x0) write$P9_RWALK(r2, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x0, "e4b80b549026321cd9e8af965a413c51a8f281ab19f01dea1af56603ae52bb5d8981a539b56de71d901630e949f38ae55a7249cd4b42e375bce9beba0778fb94c809ee5f1273a9a82dc736c48bb798a9"}, 0xd8) bind$inet(r3, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000003}, 0x14) shutdown(r3, 0x1) getsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r5, 0xaea3) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000007, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e21, 0x8, @local, 0x4}}, 0x0, 0x6, 0x0, "e4b80b549026321cd9e8af965a413c51a8f280ab19f01cea1af56603ae529684cef0ffffb56de71d901630e949f394e55a72491c12756a00bce940000778fb94c809ee00040000a82dc736e48bb798a9"}, 0xffffffffffffff90) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x82) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup3(0xffffffffffffffff, r7, 0xfa26a5b7d2921f70) [ 690.765489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20817 comm=syz-executor.4 [ 690.777754] protocol 88fb is buggy, dev hsr_slave_0 [ 690.777815] protocol 88fb is buggy, dev hsr_slave_1 [ 690.788916] audit: type=1800 audit(1574348602.586:262): pid=20828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16567 res=0 [ 690.855735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20817 comm=syz-executor.4 [ 690.902247] audit: type=1400 audit(1574348602.686:263): avc: denied { map } for pid=20831 comm="syz-executor.2" path="socket:[79379]" dev="sockfs" ino=79379 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_route_socket permissive=1 15:03:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000018) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 690.965699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20817 comm=syz-executor.4 [ 690.993372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20817 comm=syz-executor.4 [ 691.007637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20817 comm=syz-executor.4 [ 691.037138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20817 comm=syz-executor.4 [ 691.059277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20817 comm=syz-executor.4 15:03:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="6581da5b21c934e8402156d0039f1800463aabba95d05a3dfa4d8588edf625b5c91cc703cd9a79e26a71a11ae8cd615fcfed785faf45caf0d453a520ff48646dff8947b54cf40a9a706592fc780f56a934e262581af35f724067", 0x5a}, {&(0x7f0000000100)="eb78cb3d160c419dbc27a22b5373d7de9100ce08efd180a61e3d3442a6b33c1bcb2160613549d4ac083f5200304752582140275eb764854efdbb90ba6c84aefcf2a3f746942defe85463eeb1ac0d43cc109ad8fdd372748f6babfaaac6631c2275203c80e2af13338fdf521860419605d26af37b1f5910b643e3e6513ae9b456c29192d2e01a4a4077119cc74f0d3489c11d779b9a5ee9c6d441d760cd038652d5802ceed6ddf5eb56d6e7dcf50f868b6d5f5a53e4118451bd2b913db788421c0078150a0cd05cb5aa0b2ea97f8f3722f902fdbf398d9222fa06c45df614dbe23a02ab4c87cfd42729f6d4ee8cd614a62963db", 0xf3}, {&(0x7f0000000000)="e1d96ef61282a91a9da9aa047de0e6038f88e4b4b335008034", 0x19}, {&(0x7f0000000200)="5dc641d62a3ae5ace9df3b54de04013c92db519539d4b5a5c3af3c7a92691eb9559405d93bd1dd5745630c6b", 0x2c}, {&(0x7f0000000a80)="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", 0x1000}], 0x5, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x1f4, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1, 0x0, 0x0, 0x3c00}, 0x0) 15:03:23 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)=',xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 691.175220] protocol 88fb is buggy, dev hsr_slave_0 [ 691.180406] protocol 88fb is buggy, dev hsr_slave_1 [ 691.233956] audit: type=1800 audit(1574348603.016:264): pid=20844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16567 res=0 [ 691.255936] protocol 88fb is buggy, dev hsr_slave_0 [ 691.255990] protocol 88fb is buggy, dev hsr_slave_1 15:03:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000019) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 691.895252] protocol 88fb is buggy, dev hsr_slave_0 [ 691.900479] protocol 88fb is buggy, dev hsr_slave_1 [ 692.286995] audit: type=1800 audit(1574348604.086:265): pid=20864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16565 res=0 [ 693.304825] bridge0: port 3(gretap0) entered disabled state [ 693.312208] device gretap0 left promiscuous mode [ 693.317460] bridge0: port 3(gretap0) entered disabled state [ 693.732292] audit: type=1400 audit(1574348605.526:266): avc: denied { map } for pid=20867 comm="syz-executor.1" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14975 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 693.759883] device bridge_slave_1 left promiscuous mode [ 693.767768] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.816301] device bridge_slave_0 left promiscuous mode [ 693.821966] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.415223] net_ratelimit: 18 callbacks suppressed [ 695.415231] protocol 88fb is buggy, dev hsr_slave_0 [ 695.426019] protocol 88fb is buggy, dev hsr_slave_1 [ 696.055263] protocol 88fb is buggy, dev hsr_slave_0 [ 696.060395] protocol 88fb is buggy, dev hsr_slave_1 [ 696.065612] protocol 88fb is buggy, dev hsr_slave_0 [ 696.070679] protocol 88fb is buggy, dev hsr_slave_1 [ 696.615257] protocol 88fb is buggy, dev hsr_slave_0 [ 696.620432] protocol 88fb is buggy, dev hsr_slave_1 [ 696.812051] bond1 (unregistering): Released all slaves [ 696.988403] device hsr_slave_1 left promiscuous mode [ 697.038522] device hsr_slave_0 left promiscuous mode [ 697.090633] team0 (unregistering): Port device team_slave_1 removed [ 697.101676] team0 (unregistering): Port device team_slave_0 removed [ 697.119020] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 697.202368] bond0 (unregistering): Released all slaves [ 697.253747] IPVS: ftp: loaded support on port[0] = 21 [ 697.314744] chnl_net:caif_netlink_parms(): no params data found [ 697.351421] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.358013] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.364972] device bridge_slave_0 entered promiscuous mode [ 697.372321] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.379581] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.386834] device bridge_slave_1 entered promiscuous mode [ 697.404321] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 697.414324] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 697.415258] protocol 88fb is buggy, dev hsr_slave_0 [ 697.427220] protocol 88fb is buggy, dev hsr_slave_1 [ 697.442276] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 697.449740] team0: Port device team_slave_0 added [ 697.455894] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 697.463275] team0: Port device team_slave_1 added [ 697.520763] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 697.528749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 697.608147] device hsr_slave_0 entered promiscuous mode [ 697.655654] device hsr_slave_1 entered promiscuous mode [ 697.706115] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 697.713427] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 697.741384] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.747815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.754459] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.760860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.831651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.841764] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 697.858244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 697.872188] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.879184] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.896385] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 697.902503] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.917530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.926467] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.932858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.957593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 697.967219] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.973607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.982672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 698.006783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 698.014346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 698.023478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 698.038408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 698.052313] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 698.060079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 698.080855] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 698.089909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 698.101571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 698.116099] 8021q: adding VLAN 0 to HW filter on device batadv0 15:03:30 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000240)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x28000000, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1300dd", 0x0, "f53475"}}}}}}, 0x0) 15:03:30 executing program 4: io_getevents(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x6c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x8, 0x94c, 0x2f}, 0x2c) 15:03:30 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='-xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:30 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default}, [@default, @default, @remote, @bcast, @default, @bcast, @default]}, &(0x7f0000000180)=0x38) recvmmsg(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x39, &(0x7f00000000c0)=0x8, 0x3914d4aff4079d37) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000040)={r4, 0x7}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x18, r7, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2003}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x11c, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x52e8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff6484}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9c96}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x6ac33fb25a4bcbc8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000240)=""/180, &(0x7f0000000080)=0xb4) 15:03:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000001a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0x478, 0xe, 0x0, 0xfffffffffffffe2b) 15:03:30 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000240)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "1300dd", 0x0, "f53475"}}}}}}, 0x0) 15:03:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004200)=[{{&(0x7f00000006c0)=@in6, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000240)=""/32, 0x20}, {0x0}, {&(0x7f00000008c0)}, {&(0x7f0000000a00)=""/174, 0xae}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000001c40)=""/147, 0x93}], 0x6, &(0x7f0000000c80)=""/131, 0x83}, 0x1000}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000d40)=""/131, 0x83}, {&(0x7f0000002f40)=""/70, 0x46}, {&(0x7f0000002fc0)=""/1, 0x1}, {&(0x7f0000003000)=""/230, 0xe6}], 0x4}, 0x80000000}, {{&(0x7f0000003180)=@can, 0x80, &(0x7f0000003480)=[{&(0x7f0000003200)=""/137, 0x89}, {&(0x7f00000032c0)=""/9, 0x9}, {&(0x7f0000005800)=""/175, 0xaf}], 0x3}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000035c0)=""/59, 0x3b}, {&(0x7f0000003600)=""/66, 0x42}, {0x0}, {0x0}, {&(0x7f00000057c0)=""/47, 0x2f}, {&(0x7f00000039c0)=""/26, 0x1a}], 0x6}, 0x401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003cc0)=""/243, 0xf3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004100)=""/207, 0xcf}}], 0x6, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x9}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) 15:03:30 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='.xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 698.456052] audit: type=1800 audit(1574348610.256:267): pid=20895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16579 res=0 15:03:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000001b) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:30 executing program 1: socket$inet6(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0815b5055e0bcfe87b3071") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0) 15:03:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) dup3(r0, r1, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(0x0, 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, 0x0) 15:03:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_team\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 15:03:30 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f0000af8000/0x1000)=nil, 0x1000, 0x0, 0x400000000006b, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:03:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000001c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 699.110982] audit: type=1800 audit(1574348610.906:268): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16580 res=0 15:03:31 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x7, 0x80000) 15:03:31 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='/xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:31 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@srh, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xa808) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', 0x0, 0x5, 0x0, 0x0, 0x1002, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000180)=@v1={0x2, "eec4ba"}, 0x4, 0x0) 15:03:31 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x417500, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") fcntl$getownex(r0, 0x10, &(0x7f00000004c0)) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x2a4, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r4, 0x9) r5 = open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) accept$packet(r5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffdf6, &(0x7f0000000400)='\x00'}, 0x30) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000001c0)=0x4, 0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00', 0xffffffffffffff94) accept$alg(r7, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000280)={0x20, 0xfffff800}) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @empty}, 0x150}) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@dev, @in6}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x3}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) open(&(0x7f0000000140)='./bus\x00', 0x14103e, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) shutdown(r6, 0x1) recvmsg(r6, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 699.502163] audit: type=1800 audit(1574348611.296:269): pid=20950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16513 res=0 15:03:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000001d) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:31 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='0xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:31 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@srh, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xa808) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', 0x0, 0x5, 0x0, 0x0, 0x1002, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000180)=@v1={0x2, "eec4ba"}, 0x4, 0x0) [ 699.877445] audit: type=1800 audit(1574348611.676:270): pid=20974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16595 res=0 15:03:31 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x20600200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 700.545425] net_ratelimit: 24 callbacks suppressed [ 700.545433] protocol 88fb is buggy, dev hsr_slave_0 [ 700.555582] protocol 88fb is buggy, dev hsr_slave_1 [ 700.775293] protocol 88fb is buggy, dev hsr_slave_0 [ 700.780530] protocol 88fb is buggy, dev hsr_slave_1 [ 701.575257] protocol 88fb is buggy, dev hsr_slave_0 [ 701.580366] protocol 88fb is buggy, dev hsr_slave_1 [ 701.655245] protocol 88fb is buggy, dev hsr_slave_0 [ 701.660528] protocol 88fb is buggy, dev hsr_slave_1 15:03:33 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='1xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000001e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:33 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000080)={0x6, "49455245773f5cceb9fd82ab4bb3251bbf854ada7abbe37a3c6e4b9f15a3c518", 0x6, 0x1}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:03:33 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@srh, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xa808) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', 0x0, 0x5, 0x0, 0x0, 0x1002, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000180)=@v1={0x2, "eec4ba"}, 0x4, 0x0) 15:03:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x2) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_TIMERSLACK(0x1e) 15:03:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, {0x0, 0x0, 0xdf, 0x4}}, 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 702.295226] protocol 88fb is buggy, dev hsr_slave_0 [ 702.300456] protocol 88fb is buggy, dev hsr_slave_1 [ 702.309075] audit: type=1800 audit(1574348614.106:271): pid=21017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16551 res=0 15:03:34 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000021) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:34 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xa) close(r2) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88", 0x12}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 15:03:34 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='2xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) uname(0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ftruncate(r1, 0x48280) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000dc0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[], 0xffdc) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000080)=0x200006d26, 0x4) read(r3, &(0x7f00000000c0)=""/186, 0xba) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0xa88, r3}]) r4 = openat$cgroup_ro(r1, &(0x7f0000000180)='pids.current\x00', 0x0, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000600)={0xe4, 0x29, 0x2, {0x322}}, 0x6f) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = getpid() tkill(r5, 0x9) memfd_create(0x0, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x39e, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$inet6(0xa, 0x3, 0x0) bind$inet6(r6, &(0x7f0000000dc0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[], 0xffdc) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000080)=0x200006d26, 0x4) read(r6, &(0x7f00000000c0)=""/186, 0xba) setsockopt$sock_int(r6, 0x1, 0x34, &(0x7f0000000100)=0x401, 0x4) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc66) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000140)={0xd000, 0x2000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f00000001c0)={0x100000, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0xfffffffffffffd9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000"/18, @ANYRES32=0x0], 0x2}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) [ 702.521865] selinux_nlmsg_perm: 5 callbacks suppressed [ 702.521882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=21033 comm=syz-executor.1 [ 702.551694] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=21033 comm=syz-executor.1 15:03:34 executing program 4: getsockname(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6, &(0x7f0000000080)=0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0x9, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 702.594570] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=21033 comm=syz-executor.1 [ 702.628380] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=21033 comm=syz-executor.1 [ 702.667670] audit: type=1800 audit(1574348614.466:272): pid=21041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16585 res=0 [ 702.694826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=21033 comm=syz-executor.1 15:03:34 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000022) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 702.732149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=21033 comm=syz-executor.1 [ 702.757607] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=21033 comm=syz-executor.1 15:03:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xc, 0x2011, r0, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x4000, 0x1000006, 0x10, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 15:03:34 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='3xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 702.778931] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=21033 comm=syz-executor.1 [ 702.803484] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=21033 comm=syz-executor.1 [ 702.875615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=21033 comm=syz-executor.1 15:03:34 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(0x0, 0x149142, 0x0) ftruncate(r2, 0x88001) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$P9_RXATTRCREATE(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 702.987624] audit: type=1800 audit(1574348614.786:273): pid=21064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16565 res=0 15:03:34 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000023) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) 15:03:34 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) munlock(&(0x7f0000874000/0x2000)=nil, 0x2000) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) socket$isdn_base(0x22, 0x3, 0x0) [ 703.123673] audit: type=1400 audit(1574348614.916:274): avc: denied { map } for pid=21058 comm="syz-executor.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=80162 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 15:03:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) gettid() perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) geteuid() mount$9p_tcp(&(0x7f0000000040)='127.0.0.1p', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0xa}}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000100)={'lo\x00', {0x2, 0x4e20, @local}}) 15:03:35 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='4xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 703.401177] audit: type=1800 audit(1574348615.196:275): pid=21095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16769 res=0 15:03:35 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000400)) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') shmget$private(0x0, 0x8000, 0x800, &(0x7f0000ff5000/0x8000)=nil) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) waitid$P_PIDFD(0x3, r2, &(0x7f00000004c0), 0x0, &(0x7f0000000540)) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="7261770000000000000000002ad36fac000000000200000000000000000000000000f0ff0300000000000000000000ea5550df861284c750ca5ae145cf57f19b2459f4942f29df0116d5297ce3ceb74c3279d27759a93ea7fd8a487ef80aa1cabba05895554f20a66fe103809891"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000cab000)=0xc) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x80000000) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e280000001100ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:03:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000024) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(0x0, 0x149142, 0x0) ftruncate(r2, 0x88001) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0xcfc, 0x7ff, 0x0, 0x0, 0x80, 0x40, 0x3, 0x1ff, 0x7f, 0x52d6, 0x1f}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 703.602056] 9pnet: p9_fd_create_tcp (21098): problem connecting socket to 127.0.0.1p [ 703.642537] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 703.691421] 9pnet: p9_fd_create_tcp (21105): problem connecting socket to 127.0.0.1p 15:03:35 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='5xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:35 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) setrlimit(0x7, &(0x7f0000a9cff8)) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 703.775985] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:03:35 executing program 4: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000000)='\v0', 0x2, 0x8002, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "9a31b36635fa3d51baa81e8f0060de98bb03c3e1ce759b8dcabb9a79298aced2b16e7862ea0b0556a5a1acf941224ce5b04ab7ad887be070c0770da94c5fdeeb"}, 0x48}}, 0x0) [ 703.876337] audit: type=1800 audit(1574348615.676:276): pid=21127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16723 res=0 15:03:35 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000000), 0x0, 0x0, 0x0) dup3(r2, r0, 0x0) 15:03:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000025) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 703.964626] audit: type=1400 audit(1574348615.736:277): avc: denied { create } for pid=21132 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 15:03:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) gettid() perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0xa}}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000100)={'lo\x00', {0x2, 0x4e20, @local}}) 15:03:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r4, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:03:35 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='6xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 704.227462] 9pnet: p9_fd_create_tcp (21155): problem connecting socket to 127.0.0.1 [ 704.263092] *** Guest State *** [ 704.279112] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 704.301819] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 704.348166] CR3 = 0x0000000000000000 [ 704.364976] RSP = 0x0000000000000000 RIP = 0x0000000000000000 15:03:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0xffefffff, 0xc, 0x2011, r0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 704.400217] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 704.438760] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 704.470776] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 704.485988] audit: type=1800 audit(1574348616.286:278): pid=21168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16613 res=0 15:03:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000026) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 704.536058] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 704.557401] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 15:03:36 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='7xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 704.580624] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 704.599955] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 704.608262] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 704.620671] GDTR: limit=0x00000000, base=0x0000000000000000 15:03:36 executing program 1: socket$inet(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) epoll_create1(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'dummy0\x00', {0x2, 0x0, @loopback}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) [ 704.653557] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 15:03:36 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x114, 0xffffffffffffffff, 0x2000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) r2 = semget$private(0x0, 0x1, 0x2) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000000)=""/3) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7006) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 704.702815] IDTR: limit=0x00000000, base=0x0000000000000000 [ 704.778088] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 704.833750] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 704.858168] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 704.870205] Interruptibility = 00000000 ActivityState = 00000000 [ 704.879129] *** Host State *** [ 704.882600] RIP = 0xffffffff811ced13 RSP = 0xffff888056be78c0 [ 704.892155] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 704.902805] FSBase=00007f7bf504d700 GSBase=ffff8880ae800000 TRBase=fffffe0000034000 [ 704.914307] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 704.922875] CR0=0000000080050033 CR3=000000008697f000 CR4=00000000001426f0 [ 704.933232] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87001400 [ 704.942603] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 704.952125] *** Control State *** [ 704.963660] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000e2 [ 704.990736] EntryControls=0000d1ff ExitControls=002fefff 15:03:36 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='8xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 705.039732] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 705.054136] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 705.084485] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 705.109368] reason=80000021 qualification=0000000000000000 [ 705.132883] IDTVectoring: info=00000000 errcode=00000000 [ 705.162550] TSC Offset = 0xfffffe84bf69859a [ 705.178368] EPT pointer = 0x000000005307501e [ 705.191090] Virtual processor ID = 0x0001 [ 705.579422] audit: type=1800 audit(1574348617.376:279): pid=21210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16529 res=0 [ 705.735238] net_ratelimit: 18 callbacks suppressed [ 705.735246] protocol 88fb is buggy, dev hsr_slave_0 [ 705.745496] protocol 88fb is buggy, dev hsr_slave_1 15:03:37 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [{}]}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 15:03:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f45414600000300b1ef000000000000add2ad015e0d00c42d000004f6ffffff00000020259eb8d19e00004000000000000000000000000800007f000052040008000000007e9f00000000feec06be00770096ff0000008104d759ade57a9715d59ce0e0a835a4d6b9fe56447cb80474f9ed4f0600000026d0ea4dba20c687b44020e148cf81be4fca8acfba6a3af862693840d6d1de3e5b8ee8006559012adeda552401b4cbfb66352cffb6bb9624b482c6413caa253ff7889f33a2b233677c5e0000000000000000"], 0xc9) recvmmsg(r0, &(0x7f00000085c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/226, 0xe2}], 0x1}}], 0x1, 0x0, 0x0) socket(0x0, 0x1, 0x24) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr="f3577ebb99187bf84d79684a5e4a6f58"}, 0x17) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000580)=ANY=[], 0xffffffcc) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendto$inet(r0, &(0x7f00000012c0)="03", 0x1, 0x0, 0x0, 0x0) 15:03:37 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='9xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:37 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000027) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:37 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 705.815223] protocol 88fb is buggy, dev hsr_slave_0 [ 705.820764] protocol 88fb is buggy, dev hsr_slave_1 15:03:37 executing program 1: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1142, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) syz_open_procfs(0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ptrace(0x11, r0) 15:03:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x03', 0x0, 0x0) [ 706.085194] audit: type=1800 audit(1574348617.876:280): pid=21228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16527 res=0 15:03:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000028) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:38 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)=':xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 706.455221] protocol 88fb is buggy, dev hsr_slave_0 [ 706.460429] protocol 88fb is buggy, dev hsr_slave_1 [ 706.465634] protocol 88fb is buggy, dev hsr_slave_0 [ 706.470813] protocol 88fb is buggy, dev hsr_slave_1 15:03:38 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)=';xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 706.775224] protocol 88fb is buggy, dev hsr_slave_0 [ 706.780433] protocol 88fb is buggy, dev hsr_slave_1 15:03:38 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f00000001c0)) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 707.129794] audit: type=1800 audit(1574348618.926:281): pid=21263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16513 res=0 15:03:39 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) splice(r2, &(0x7f0000000000)=0x10001, r1, &(0x7f0000000040), 0x993, 0x0) mbind(&(0x7f000047b000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x5, 0x10000000007) inotify_init() 15:03:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0xb2, 0x0) 15:03:39 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='=xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:39 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='>xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:39 executing program 1: [ 709.009173] IPVS: ftp: loaded support on port[0] = 21 [ 709.174701] device bridge_slave_1 left promiscuous mode [ 709.180742] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.245988] device bridge_slave_0 left promiscuous mode [ 709.251496] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.935232] net_ratelimit: 20 callbacks suppressed [ 710.935241] protocol 88fb is buggy, dev hsr_slave_0 [ 710.945854] protocol 88fb is buggy, dev hsr_slave_1 [ 711.176545] protocol 88fb is buggy, dev hsr_slave_0 [ 711.181671] protocol 88fb is buggy, dev hsr_slave_1 [ 711.975214] protocol 88fb is buggy, dev hsr_slave_0 [ 711.980328] protocol 88fb is buggy, dev hsr_slave_1 [ 712.055213] protocol 88fb is buggy, dev hsr_slave_0 [ 712.060338] protocol 88fb is buggy, dev hsr_slave_1 [ 712.311436] team0 (unregistering): Port device veth13 removed [ 712.537888] device hsr_slave_1 left promiscuous mode [ 712.580068] device hsr_slave_0 left promiscuous mode [ 712.640664] team0 (unregistering): Port device team_slave_1 removed [ 712.651980] team0 (unregistering): Port device team_slave_0 removed [ 712.663181] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 712.695331] protocol 88fb is buggy, dev hsr_slave_0 [ 712.700792] protocol 88fb is buggy, dev hsr_slave_1 [ 712.735779] device bond_slave_1 left promiscuous mode [ 712.744569] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 712.776138] device bond_slave_0 left promiscuous mode [ 712.811206] bond0 (unregistering): Released all slaves [ 712.891897] chnl_net:caif_netlink_parms(): no params data found [ 712.926066] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.932510] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.939740] device bridge_slave_0 entered promiscuous mode [ 712.947365] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.953730] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.961233] device bridge_slave_1 entered promiscuous mode [ 712.977779] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 712.987188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 713.006919] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 713.014300] team0: Port device team_slave_0 added [ 713.020334] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 713.027932] team0: Port device team_slave_1 added [ 713.033495] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 713.041159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 713.098319] device hsr_slave_0 entered promiscuous mode [ 713.135634] device hsr_slave_1 entered promiscuous mode [ 713.176380] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 713.183864] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 713.205523] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.211940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.218666] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.225993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.320813] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 713.331955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.343042] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 713.358897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 713.371599] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.379287] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.391476] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 713.403760] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 713.415484] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.432417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 713.441024] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.447452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.469755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 713.482608] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.489033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.522772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 713.531357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 713.545756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 713.557525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 713.573192] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 713.580090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 713.592696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 713.600889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 713.622236] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 713.633155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.640846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 713.654055] 8021q: adding VLAN 0 to HW filter on device batadv0 15:03:45 executing program 4: 15:03:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000029) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:45 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Axt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:45 executing program 1: 15:03:45 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@remote, @empty, @loopback, 0x0, 0x8}) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:03:45 executing program 2: 15:03:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000011c0)={r0, &(0x7f0000001140)}, 0x20) 15:03:45 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)=@srh, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) lseek(0xffffffffffffffff, 0x0, 0x2) listen(0xffffffffffffffff, 0x9ae) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xa808) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000180)=@v1={0x2, "eec4ba7c0d"}, 0x6, 0x1) open$dir(0x0, 0x0, 0x0) [ 713.965092] audit: type=1800 audit(1574348625.756:282): pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16658 res=0 15:03:45 executing program 2: 15:03:45 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000002a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:45 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Bxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:46 executing program 2: 15:03:46 executing program 2: [ 714.421675] audit: type=1800 audit(1574348626.216:283): pid=21356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16519 res=0 15:03:46 executing program 4: 15:03:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000002b) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 714.846774] audit: type=1800 audit(1574348626.646:284): pid=21378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16513 res=0 [ 716.055444] net_ratelimit: 22 callbacks suppressed [ 716.055453] protocol 88fb is buggy, dev hsr_slave_0 [ 716.065548] protocol 88fb is buggy, dev hsr_slave_1 [ 716.135256] protocol 88fb is buggy, dev hsr_slave_0 [ 716.140358] protocol 88fb is buggy, dev hsr_slave_1 [ 716.215227] protocol 88fb is buggy, dev hsr_slave_0 [ 716.220354] protocol 88fb is buggy, dev hsr_slave_1 [ 716.263331] IPVS: ftp: loaded support on port[0] = 21 [ 716.530958] chnl_net:caif_netlink_parms(): no params data found [ 716.559175] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.566183] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.573295] device bridge_slave_0 entered promiscuous mode [ 716.687664] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.694166] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.704164] device bridge_slave_1 entered promiscuous mode [ 716.722455] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 716.732270] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 716.855257] protocol 88fb is buggy, dev hsr_slave_0 [ 716.860464] protocol 88fb is buggy, dev hsr_slave_1 [ 716.861707] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 716.872998] team0: Port device team_slave_0 added [ 716.901184] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 716.908811] team0: Port device team_slave_1 added [ 716.914433] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 717.030259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 717.077359] device hsr_slave_0 entered promiscuous mode [ 717.115544] device hsr_slave_1 entered promiscuous mode [ 717.156188] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 717.185251] protocol 88fb is buggy, dev hsr_slave_0 [ 717.190495] protocol 88fb is buggy, dev hsr_slave_1 [ 717.279552] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 717.294559] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.301179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.307813] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.314157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.457568] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 717.463977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.473310] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 717.594818] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.601905] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.613882] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 717.623999] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 717.631854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 717.639326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 717.649921] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 717.656515] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.770964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 717.778831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 717.786776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 717.794379] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.800784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.810759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 717.818243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 717.826574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 717.834231] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.840657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.957221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 717.967271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 717.974191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 717.982762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 717.995913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 718.003270] device bridge_slave_1 left promiscuous mode [ 718.009332] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.056294] device bridge_slave_0 left promiscuous mode [ 718.061808] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.287466] device hsr_slave_1 left promiscuous mode [ 721.329444] device hsr_slave_0 left promiscuous mode [ 721.368467] team0 (unregistering): Port device team_slave_1 removed [ 721.380357] team0 (unregistering): Port device team_slave_0 removed [ 721.390234] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 721.429690] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 721.496433] bond0 (unregistering): Released all slaves [ 721.539132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 721.550655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 721.558937] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 721.573372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 721.580738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 721.585235] net_ratelimit: 20 callbacks suppressed [ 721.585243] protocol 88fb is buggy, dev hsr_slave_0 [ 721.589138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 721.592943] protocol 88fb is buggy, dev hsr_slave_1 [ 721.614002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 721.621211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 721.629115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 721.640068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 721.647278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 721.654864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 721.667145] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 721.673246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 721.687551] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 721.696479] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 721.702733] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 721.710072] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 721.755686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.785301] protocol 88fb is buggy, dev hsr_slave_0 [ 721.790784] protocol 88fb is buggy, dev hsr_slave_1 15:03:53 executing program 1: 15:03:53 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Cxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:03:53 executing program 4: 15:03:53 executing program 2: 15:03:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000002c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 721.905254] protocol 88fb is buggy, dev hsr_slave_0 [ 721.910373] protocol 88fb is buggy, dev hsr_slave_1 15:03:53 executing program 1: 15:03:53 executing program 4: 15:03:53 executing program 2: [ 722.025243] protocol 88fb is buggy, dev hsr_slave_0 [ 722.030462] protocol 88fb is buggy, dev hsr_slave_1 15:03:53 executing program 4: 15:03:53 executing program 1: 15:03:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) [ 722.145235] protocol 88fb is buggy, dev hsr_slave_0 [ 722.150491] protocol 88fb is buggy, dev hsr_slave_1 [ 722.159641] audit: type=1800 audit(1574348633.956:285): pid=21406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16530 res=0 15:03:54 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Dxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:54 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000002d) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:54 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000400200) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000380)=""/187) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x7, 0x40, 0x7, 0x3f, 0x3, 0x2}) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) syz_open_dev$radio(&(0x7f0000000000)='/dev/r\x02\x00\x00\x00#\x00', 0x0, 0x2) 15:03:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000200)={'trans=tcp,', {'port'}, 0x2c, {[{@privport='\xe0rivport'}]}}) 15:03:54 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x100000003, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 15:03:54 executing program 2: ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = open(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000043}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000240)) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x81, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) pipe(0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13\x00'/258, 0x275a, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000002c0)={'nat\x00'}, &(0x7f0000000340)=0x54) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 15:03:54 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) clone(0x4000003102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000009300)="7d489437", 0x4) [ 722.564450] 9pnet: p9_fd_create_tcp (21448): problem connecting socket to 127.0.0.1 15:03:54 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000002e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 722.611854] audit: type=1800 audit(1574348634.406:286): pid=21450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16674 res=0 15:03:54 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:54 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000002f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 722.916010] audit: type=1800 audit(1574348634.716:287): pid=21466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16502 res=0 15:03:54 executing program 4: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSBRK(r0, 0x5427) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) read$alg(r2, &(0x7f0000000040)=""/99, 0x63) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc040563e, &(0x7f0000000100)={0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xb}}) 15:03:54 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Fxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:55 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) [ 723.356274] audit: type=1800 audit(1574348635.156:288): pid=21493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16502 res=0 15:03:55 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Gxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000030) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000000)={0x2, 0xffff, 0x80, 0x1, 0x6a}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) remap_file_pages(&(0x7f00002d8000/0x4000)=nil, 0x4000, 0x1, 0x200005, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40003, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f00000000c0)={&(0x7f000049f000/0x8000)=nil, 0x8, 0x0, 0x80, &(0x7f000086b000/0x1000)=nil, 0x1}) 15:03:55 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='schedstat\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/133, 0x85}], 0x1, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(r5, &(0x7f0000000000)='net/sctp\x00') mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4002}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 15:03:55 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 723.794452] audit: type=1800 audit(1574348635.586:289): pid=21521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16630 res=0 15:03:57 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xfff, &(0x7f00000001c0)=0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x100, 0x9, 0x7, 0x5, 0x0, 0x2, 0x0, {0x0, @in6={{0xa, 0x4e21, 0x8, @ipv4={[], [], @empty}, 0x8001}}, 0x0, 0x80000001, 0xd8, 0x3, 0xa8}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={r3, 0x88, "5a358b5ba34b0921e7b72363326e89c23127b65d5dc3c88dbd4e19bb0d398cc0ce174aa0f9133e28fb64e380a2ad3ad5cc5dff0a5381b0950dcb0b8a4933a3a05452dc7d09162ec736a4afcbc7a71f9a63164f71c31022c1dedee331c130ab2937bae60c7550afa7cf527aaecd053e7fc3541e42914d1990026882067742d0639025f0e70208ccf0"}, &(0x7f0000000100)=0x90) inotify_init() connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x38}]) 15:03:58 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Hxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:58 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x81800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000240)=0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x400}, r2, 0x0, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, &(0x7f0000000340)) fstat(0xffffffffffffffff, &(0x7f0000000640)) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000017c0), 0x1000000000000304, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100040000000000040002000000000008000400", @ANYRES32=0x0, @ANYBLOB="10ef11a5070000002000020000000000"], 0x2c, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r5, 0x0) chdir(&(0x7f0000000100)='./file0\x00') setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="00000009480c007b00670cbbfa889078ac1e000107f5dbb9db8773ab0800000000000000ac1e000194060000000200862700000007020f4040efde206bf5173d69d4f9830012cc3e9794b0ca8f6dcb33952997e62ca2831bfbac1e0101e0000002ac1414aa0000000000000000000000000000000000000000000000000000000000000100004e2200004e23000000"], 0x7f) 15:03:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000031) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:58 executing program 4: creat(0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0xc0, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) fcntl$notify(r2, 0x402, 0x28) r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x8040) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f00000000c0)={0x4, 0x1}) r4 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8, 0x80680) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x70, 0x4, 0x6, 0x1, 0xf0, 0x0, 0x0, 0x1405, 0x19, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x100}, 0x20030, 0x101, 0x0, 0x6, 0x100000001, 0x7, 0x5}, r4, 0x3, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000000200)=""/250, 0x20018200) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x0) 15:03:58 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000e22000/0x3000)=nil, 0x3000}) remap_file_pages(&(0x7f0000efd000/0x1000)=nil, 0x1000, 0xe, 0x4, 0x4010) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r6, 0xc0305616, &(0x7f0000000140)={0x0, {0x996, 0xffff}}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000000c0)={{0x2, 0x0, 0x1, 0x0, 0x8000}}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x0, [], "7705b1eea4fbc6c96f89f02169855b8f"}) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0x5, 0x80000000, 0x1, &(0x7f0000000040)="7f"}) 15:03:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000032) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 726.370519] audit: type=1800 audit(1574348638.156:290): pid=21550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16739 res=0 15:03:58 executing program 1: getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f00000001c0)="1ab68564f1b06e5f4fc8f89badb52e18b76091ed7c269b703abf2a430bdfb2010e166a776ab9a1a5470fe0b70c5655607c2673da4952f74b9e43db774607db67db774b6d7c74e15cf950ccc8de53491f006aa979c240803874f327598047bb47276c8f922b7f347004e12628a9d56b562137862da64c5ed4c96fbec873cc6ee2b7edee73d0e3c0a6b9995698cfd6433c373d7efe6c42d1a0617d9c5db64ba1cfff1716306dfa0c7550c392eaf29af539c50f242f3343a79c131604fe296f508da1a660691d63e9fc711e4d6ed6637095127c0ceddacbd202a7b8bd0200d47c94baa8e52c21530b24", 0xe8, 0x4004010, &(0x7f0000000080)={0xa, 0x4e22, 0x10000, @remote}, 0x1c) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x18, r2, 0x113}, 0x18}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xb0, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe042}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10e3e1a2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioprio_get$uid(0x2, 0x0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x200}]}}}]}, 0x3c}}, 0x0) 15:03:58 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Ixt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 726.520726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 726.615327] net_ratelimit: 28 callbacks suppressed [ 726.615335] protocol 88fb is buggy, dev hsr_slave_0 [ 726.625486] protocol 88fb is buggy, dev hsr_slave_1 [ 726.727310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 726.784723] audit: type=1800 audit(1574348638.576:291): pid=21574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16525 res=0 15:03:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000033) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:58 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x8, @mcast2, 0x311}, {0xa, 0x4e24, 0x3, @remote, 0x10000}, 0x80, [0x0, 0x80, 0x8001, 0x4, 0xfff, 0x6, 0x2, 0x2]}, 0x5c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu//y\xf3l\x00@\x05:$\x92\t71\xf7|6\xaf@W\xda\xea\xf2\x897~', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x1ff) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000003c0)=@xdp, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x103}, 0x48010) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = gettid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) perf_event_open(&(0x7f00000007c0)={0x0, 0x70, 0x96, 0x1f, 0x20, 0x5, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000780), 0xb}, 0x1000, 0xccd4, 0x4, 0x1, 0x8, 0x8, 0x8001}, 0x0, 0xd, 0xffffffffffffffff, 0x2) ioctl$TUNSETFILTEREBPF(r0, 0x6609, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000002c0)=""/73, 0x0, 0x49}, 0x20) 15:03:58 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Jxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:58 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000000), &(0x7f0000000040)=0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:03:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffe4b, &(0x7f0000000180)={0x0, 0xfffffffffffffdbe}, 0x1, 0x0, 0x0, 0x50800}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0xe, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r2}]]}}}]}, 0x4c}}, 0x0) [ 727.250413] audit: type=1800 audit(1574348639.046:292): pid=21599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16611 res=0 [ 727.255802] protocol 88fb is buggy, dev hsr_slave_0 [ 727.277944] protocol 88fb is buggy, dev hsr_slave_1 [ 727.286049] netlink: 'syz-executor.2': attribute type 14 has an invalid length. 15:03:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000034) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:59 executing program 4: creat(0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0xc0, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) fcntl$notify(r2, 0x402, 0x28) r3 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x8040) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f00000000c0)={0x4, 0x1}) r4 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8, 0x80680) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x70, 0x4, 0x6, 0x1, 0xf0, 0x0, 0x0, 0x1405, 0x19, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x100}, 0x20030, 0x101, 0x0, 0x6, 0x100000001, 0x7, 0x5}, r4, 0x3, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000000200)=""/250, 0x20018200) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x0) [ 727.320895] netlink: 'syz-executor.2': attribute type 14 has an invalid length. 15:03:59 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x800) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x8, 0x9, 0x4, 0x40, {}, {0x6, 0x16, 0x8, 0x80, 0xb5, 0x1, "6b56b670"}, 0x4b62, 0x3, @fd=0xffffffffffffffff, 0x4}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0xdca69ada0db07f43, 0x10, 0xde, {}, {0x0, 0x7530}, {0x2, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x1}, 0x28, 0x0, 0x0, 0x0, "5547e59252ceeb588cf27d5f94204067c2dac1ffb581c19995fb83fc6e3a29c96fbf4a7dd7b4df9d9a3a9c6bbdb0021d2eda344557fbea7f80abc0ff0f1eea3a"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={@rand_addr="e4b50b75427e52a5ef989b3d6a2a9e1e", @empty, @mcast1, 0x5, 0x8, 0xff01, 0x900, 0x40, 0x4400000}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/enforce\x00', 0x400002, 0x0) r5 = perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x1, 0x5, 0x7, 0xec, 0x0, 0xffffffffffffff00, 0x4, 0x16, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000005c0), 0x1}, 0x400, 0x7, 0xfffffffc, 0x2, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xe) r6 = perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x70, 0xfb, 0xf8, 0x9, 0xb0, 0x0, 0x1, 0x8000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0xf9}, 0x0, 0x8000, 0x5, 0x9, 0x1f, 0x1, 0x6c}, r4, 0xf, r5, 0x10) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000680)={0x6, 0x1ff}) fchdir(r1) fcntl$getown(r6, 0x9) r7 = getpgrp(0x0) sched_getscheduler(r7) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x1}, 0xc) write$binfmt_aout(r8, &(0x7f0000000700)={{0x10b, 0x1, 0x3, 0x58, 0x3d5, 0x5c71, 0xb9d, 0x80}, "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", [[], [], [], [], []]}, 0x1520) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000001c40)={0x3, 0xffffffba}) ioctl$RTC_UIE_OFF(r0, 0x7004) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/sequencer\x00', 0x40000, 0x0) write$P9_RATTACH(r9, &(0x7f0000001cc0)={0x14, 0x69, 0x1, {0x89, 0x1, 0x2}}, 0x14) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000001d00)=0x5) r10 = syz_open_dev$sndpcmc(&(0x7f0000001d40)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) mlockall(0x2) r11 = syz_open_dev$adsp(&(0x7f0000001d80)='/dev/adsp#\x00', 0x7f, 0x2a80) ioctl$VIDIOC_ENUM_FRAMESIZES(r11, 0xc02c564a, &(0x7f0000001dc0)={0x7c, 0x49323159, 0x1, @discrete={0x1, 0xcf}}) ioctl$EVIOCGABS20(r10, 0x80184560, &(0x7f0000001e00)=""/132) fsync(r11) r12 = syz_open_dev$sndpcmc(&(0x7f0000001ec0)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x0) ioctl$BLKTRACESTART(r12, 0x1274, 0x0) lsetxattr$security_selinux(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)='security.selinux\x00', &(0x7f0000001f80)='system_u:object_r:scsi_generic_device_t:s0\x00', 0x2b, 0x1) 15:03:59 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Kxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:03:59 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:03:59 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000880)=""/4096, &(0x7f0000000140)=0x1000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@dev}, {@in6=@empty, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) [ 727.661561] audit: type=1800 audit(1574348639.456:293): pid=21622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16510 res=0 15:03:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000035) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:03:59 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e20, 0x8, @mcast2, 0x311}, {0xa, 0x4e24, 0x3, @remote, 0x10000}, 0x80, [0x0, 0x80, 0x8001, 0x4, 0xfff, 0x6, 0x2, 0x2]}, 0x5c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu//y\xf3l\x00@\x05:$\x92\t71\xf7|6\xaf@W\xda\xea\xf2\x897~', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x1ff) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000003c0)=@xdp, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x103}, 0x48010) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = gettid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x3) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) perf_event_open(&(0x7f00000007c0)={0x0, 0x70, 0x96, 0x1f, 0x20, 0x5, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000780), 0xb}, 0x1000, 0xccd4, 0x4, 0x1, 0x8, 0x8, 0x8001}, 0x0, 0xd, 0xffffffffffffffff, 0x2) ioctl$TUNSETFILTEREBPF(r0, 0x6609, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000002c0)=""/73, 0x0, 0x49}, 0x20) [ 727.815258] protocol 88fb is buggy, dev hsr_slave_0 [ 727.820460] protocol 88fb is buggy, dev hsr_slave_1 15:03:59 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000880)=""/4096, &(0x7f0000000140)=0x1000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@dev}, {@in6=@empty, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 15:03:59 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Lxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:00 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000880)=""/4096, &(0x7f0000000140)=0x1000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@dev}, {@in6=@empty, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 15:04:00 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 728.271546] audit: type=1800 audit(1574348640.066:294): pid=21655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16631 res=0 15:04:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000036) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 728.387095] protocol 88fb is buggy, dev hsr_slave_0 [ 728.393659] protocol 88fb is buggy, dev hsr_slave_1 15:04:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/444], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28}, 0x48) 15:04:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() [ 728.535254] protocol 88fb is buggy, dev hsr_slave_0 [ 728.540427] protocol 88fb is buggy, dev hsr_slave_1 15:04:00 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Mxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x200, 0x400102) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getpeername$packet(r4, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000022c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)=ANY=[@ANYBLOB="28000000640020002bbd7000fddbdf250000000000000000", @ANYRES32=r5, @ANYBLOB="0503f3fff3ffdc2210000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x804) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/context\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r7, 0x5380) write$selinux_context(r6, &(0x7f00000003c0)='system_u:object_r:login_exec_t:s0\x00', 0x22) 15:04:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000040)={0x6, 0x0, [0x5, 0x5, 0x4, 0x9, 0x3f], 0xb66}) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x40000000000004d, 0x2}], 0xfe72) [ 728.708596] audit: type=1800 audit(1574348640.506:295): pid=21679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16583 res=0 15:04:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000037) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/vga_arbiter\x00', 0x8000, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0xfffffdb0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"8f61829884df686dbffca152ff0aaff83e24831923b2f9e99c60864013dab64e5b493280d0152ef847e5a33d3b6bee6e1478b1e6946aa22b7e4fce39796d4cb89d4446efb05f13fd82b5395f92084f33032e4dbd50cbbf5e80abc83d41ac5030b42f2940a593a85007f7926e62ec3f6b7fd66805dba1aff036fb221b5bd0b7e289c50ce33b2476f41bc2591c5a8e206ee80001e905e9650e6efdd949b8190943f54a307e89e4ec31176fca7a70e28a0c93fc84b8502b95aadd114e9d65462ccac0500a47750ace3ef933734e97424b7c513b86fe99d428e983d95406d543bbf9131fea7bcc486f2655dc0fd99144d4ab4c283b82627bbc7b426d41fdd6b057847b3f61bc2870af0f46238402062243f95dc34162df1dad662fc64929e5800246eb081ee1374069c3a7439c35282a2bad65168d897e2d51d6d5c10e751f9842fb0276050349f0d0605a1e2fb4721334b9f642ebd84774a10b49ed9c5590275b8ca1c5657ac9c1d4b4ddb739b5e6cbbbf3ca44e5748dd7a929c74edb224de199023875515eb955bef590ce5c201c71507bd08b8546b51b640f55e4a38bb8dc83e0f58a228f71fad06e3b3b824fb21d3892e3117018857bc7c32a9ff8732e8b10ee7202926f3b65467db97c2d94e1d915e284a0b5bcc650cec39b0122bbc0d28578ebd86668320de779519426b62554636fcc8b3f0b021e82873f1734ceb3a33ba585df03f1cbd831113f1817614b96e213c163238f8e85e1dcbeb56121cf504c5506f35ddabfdbca90df701323b8bfee67b7c8eafd0fffbcf293ee7a7c08005076b1e2caee8ca74a06d965fab668bc014e1f8e5b8b542e75358417c6e81cfddcc31a79da6fb7b0e16107ea3f9b5f401f9ab025de892dc3ab701463f84c909d19163dfcc4b68abccff00e6b8b168e3b4fae7bea5be5c85c803c455f07d58e692aedbf167b36a6c818e7c48e433693080f860f4247725b3158501a0478c3fb034eedc20c5216ab2dcccebbbc0e5b606df790c5da086e10eb557d78db97896599bc9ea89084f1e03c45ea85f51d7c4ae0406e79ecc16b52971b56762bddded02f9758b9fd0ac8f0ee4f99f70a92a4b13eafcea20a98531d60820f238eb67da77860a364ccab999a5cc4db103203f9631bcc9e908cf1f7aee7c44d693377e96673b80286a144b6467e2512cea3c80bc0dcab9c9eed642d6948238c731a63d067c0407d8e804b83fc043ebb590919cd0b60f63a865cdbba8d641611275114251c61870ba2cf0616c9978752b4b1992076bb4b7f2dca8643e3db92a5b11de0abafd137512480eda5d698bcda5a751379e8c222212faaeec2aa48d462d461e4d45def94b14b75bd11342fe5350853ba5f8fb7f71831a781dfed5456941d96df5c3cfa7030051639c1c4cee1e64bd4fcb4fbb5158c2a2ed7390c454c9acf2981d658cec136"}) ioctl$KDDELIO(r2, 0x4b35, 0xffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) 15:04:00 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0xfffffffffffffe91, 0x3, 0x0, 0x0, 0x5, 0x1, 0x0, 0x8000000}, 0x0) ptrace$getenv(0x4201, r1, 0x3, &(0x7f0000000000)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:04:00 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Nxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:01 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000038) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 729.149568] audit: type=1800 audit(1574348640.946:296): pid=21714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16614 res=0 15:04:01 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000100)='o', 0x1, r2) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$invalidate(0x15, r3) 15:04:01 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Oxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 729.474894] audit: type=1800 audit(1574348641.266:297): pid=21735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16513 res=0 15:04:01 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x800000000039) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:01 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Pxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe2e, 0x24080890, &(0x7f0000000300)={0x2, 0x4e27, @local}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x800, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000500)=0xffffffc2, &(0x7f0000000540)=0x4) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30080080}, 0xffffffffffffff2d, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd26, 0x0, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10002}, 0x800) geteuid() socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000400)=0x1) r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000440)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'L+', 0xfffffffffffffbff}, 0xfffffffffffffce0, 0x6) r6 = gettid() fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x1, r6}) fcntl$setlease(r4, 0x400, 0x1) close(r4) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000140)=0x1, 0x4) 15:04:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000e60aa2edf61405c6b2732db484cc43c0192417f12e417eae3bf99c1099c9504709bb3d07ad664631ce35cb1d21e098349259f2599842e36f64c820e5d123275e860f937e01df981a5570ee935df3cc3bc820a595ec8cc38029ca582424e809f0722ed5cab73755a40766affe4286531859f24c6524593b772039782b51e7b92b"], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='iso9660\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) exit(0x0) 15:04:01 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Qxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 729.888311] audit: type=1800 audit(1574348641.686:298): pid=21757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16530 res=0 15:04:01 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000003a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:01 executing program 0: mmap(&(0x7f0000ae8000/0x3000)=nil, 0x3000, 0x4000000, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write(r3, &(0x7f0000000340), 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000000)={0x100, 0x2, [0x7, 0x1, 0x400, 0x5, 0x3f], 0x9}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$UHID_DESTROY(r4, &(0x7f0000000040), 0x4) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000080)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:04:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000001c0)) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)=ANY=[@ANYBLOB="0400000000000000d4d336d60400000007000000070000000800000001000000000000000000001bf878ea000000000000000000000000c056770000050000000000000005000000030000000700000000000000000000000000000019000080217460500d00000000040000400000000700000001040000000000000000000000000000000000000800000004000000040000000800000000b78344080000060000000000000000"]) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000100)={0x200, "ec6ad87a1d2bf0805b95e4ac012b727c8280b2ae8a3965a1f1fb1dd48cf6f0d9"}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)) r5 = socket(0x8, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setuid(0x0) socket(0x10, 0x0, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/checkreqprot\x00', 0x20000, 0x0) accept4$tipc(r6, 0x0, &(0x7f0000000440), 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000cab000)) add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) lsetxattr$security_smack_transmute(0x0, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="a7724bdef64346b903000000000000abf9d14000000000000000040088639c525503000000000000009eef0000000000000200000040847bf22adf06000000"], 0x3f) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 15:04:02 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Rxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:02 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x8005}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0xc502, &(0x7f0000000100)={&(0x7f00000004c0)={0x28, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x14, 0x11, @ipv6=@local}]}, 0x28}, 0x1, 0xfdffffff00000000}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4}) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000380)=0x4) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01084000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x75, &(0x7f0000000180)={r6, @in={{0x2, 0x0, @loopback}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r6, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r7, 0x1f}, 0x8) setsockopt$inet_int(r0, 0x0, 0x39acc0b849934209, 0x0, 0xfffffffffffffea7) shutdown(r2, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r8, 0x21, 0xad7ceb7f3ebffe2c, &(0x7f00000002c0), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x2040, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000340)) 15:04:02 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000003b) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 730.559434] bridge0: port 3(gretap0) entered blocking state [ 730.596780] bridge0: port 3(gretap0) entered disabled state [ 730.631585] device gretap0 entered promiscuous mode [ 730.669750] audit: type=1400 audit(1574348642.466:299): avc: denied { write } for pid=21793 comm="syz-executor.1" name="net" dev="proc" ino=83334 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 730.709568] bridge0: port 3(gretap0) entered blocking state [ 730.716466] bridge0: port 3(gretap0) entered forwarding state [ 730.722316] audit: type=1400 audit(1574348642.466:300): avc: denied { add_name } for pid=21793 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 730.903937] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 730.911935] FAT-fs (loop2): Filesystem has been set read-only [ 730.918005] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF 15:04:02 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0xd23e41, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x101, 0x7, 0x80000000, 0x0, 0xa6}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x10880, 0x85) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x80, 0x840000) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) ptrace$setopts(0x7abb990919170921, r3, 0x10001, 0x111) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000a00)={"c5c48455550c5f15d6a1e54e8434d392b1ee8ce0d8cc789e6f9f5fff37ea66e3ca2631545d2fac4abc17eb7ac022137c40ce9850330e934af106b6d2b7b23ab19ac6157f94543f7759d7d90386c0a66d13d3e29cd3c6af3aacf0403dfd57a8f8135dc35686b0919abd7055617083c2d27e3b8f482c0f739c8d5b6b8550e111346a569c4ef7974920a0d7d047f3aa354d1ecdd6032a60c603c404884d346b4f5f2a11da56be949d0f7631fc8cfaaad5c4a62696e3e255e89ea6a55cd3d7c072f17a1259489e5c8c35e774bdf939b28c750dbbcabb6f8243e7ddc524c53053d507b8d8841c66088bb387c003a38c6b56c6d3943436d3bfaee3a64f70cf0786eeefcb20c20d6ccab79d6b56c389e2c2036dd5c530cf9375fcdfc5c64ed37d249442e633724fc2a1c05ceb01c61a1ec83aa77af2a86431dbd70b1f57d83b558d5b7f991e59e4de3d94ecfd0d1ee35e28b03fc0c4edf919b649dbe0bee545c8a523de067f6d4c93585430d396a84a8128244e7880b3fb27d3e25bbdae3248a60f3835a8e5c1b8ec9054f0b28c3b8f3bb8805756908d313f77fe38934b57b1626bf795f20ded88ac5593dfd331d6ee199ae59864a789c50a0716705a5066680491ae4865f94eb777f1af9cecf98eba79e57ba4f056fc2faafc2b6b876323a192fad3e9e2328191df6def6cc8a74e7bf7032a69810371780f6035b205461f06194bee219f01225d7770067d4b8368b6e76cad966e9c68b3fa9129196dc06422e56a72c96dd97c436c97fc9c0fafbe9a70db131c4ccc0c16e37b3dd16b47c80c8dbf457f5eeb2a0bd1bd121d55092b7a421af41520af3a14d021ac7a5b687be522b7077604441a420679cc1f7dc60c6a7a9c38d5cc925f45180bf6c3d03296df35e80cee74a9d5112ad31d9f73a929f26ab98b78034136f5c780db45f6685ef241766a1b1e6b1022867fee580f6d4edd7209d80a69d5a9c14f5c8f40d0146fd345c293f8f528fd0f769ba1d3e1afb2d7ecc7642d84f5427bc7eb8d3df8587fdf9c8a1ae6fb8da5f4c7f41dcc4357aa174bc748f2b7b936acf1a571b37051f582e64662547b5b5a300dad70abe401d31ab0ee0f954836e504b2600fac22a7563f765a5e28a9c8e5070f87c7108d2bba9dd471e07f853794ecc5b07ed9613474efee45e3cbf4d1e8731f6f2fc4916eeb5477e38618149221fdcb7fa0b96dc6d93300310ac036e2bca6de88be17d01ef15da72524dc3c3414aeb8035892e6cb9a8a8e0ede1f083fe121e6d968e2c5974db5a86f9087e11c0e07ed02df3cf64be47e80c63925975d2514335b6cd952154bbc1bf2b52adf0c6529d9d05acf16f5b2178395e7df8ad6223d19a38d63d6785ef1fc69100b79a92325e358f75f8213f858e725fc0c1246ad2f0c1cdb3fc933e7ba971de2707689bfe56cc62cb0179b090d83435d3b"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000880)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', 0x0, 0x0, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000040)=0x3ff) getpgrp(0x0) setpriority(0x0, 0x0, 0x100) read(r0, &(0x7f0000000340)=""/175, 0xaf) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r6 = gettid() kcmp(r6, 0x0, 0x0, 0xffffffffffffffff, r5) setpgid(r6, 0xffffffffffffffff) setpgid(0x0, 0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000640)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='wlan1\x00', &(0x7f00000002c0)='proc\x00']) [ 730.957249] audit: type=1400 audit(1574348642.516:301): avc: denied { create } for pid=21793 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 15:04:02 executing program 2: syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="71756f74615d71757f6e74756d3d3078300800303030303038636666666666664bf39588346f9952b7ad206c694c030906"]) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x40) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000900)='/dev/uhid\x00', 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000880)={{}, {0x1, 0x2}, [{0x2, 0x3, r2}, {0x2, 0x6, r3}, {0x2, 0x1, r4}, {0x2, 0x8, r6}, {0x2, 0x4, r7}, {0x2, 0x3, r9}, {0x2, 0x4, r11}], {0x4, 0x1}, [{0x8, 0xa, r12}, {0x8, 0xc, r13}, {0x8, 0x2, r14}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) 15:04:02 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Sxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:02 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000689000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x2000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 731.184270] gfs2: invalid mount option: quota]quntum=0x0 [ 731.225959] gfs2: can't parse mount arguments 15:04:03 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000003c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:03 executing program 1: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x3c) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') 15:04:03 executing program 4: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="800200000000000000004080"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0185879, 0x20000000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='m_\x8djA\x1a\xd6\x1f(\xa0/\x05\x15\x1d\x14)m\x9f\x8e\xe6\xad?u\x00\'e\x90CGs\xa4\xf6\x7f\x18\x94\"^P\xaa\xbd\xb5\xb40\xfb\x90\x95\xfc\xaa#\xe6\xd5\x92\xd8\x96\x05\xca\xce\xb7(\b:6b\x893\xd0k\x00\xca\x8c\xdd\x85\x96', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r0, 0xb, 0x1}, 0x14) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) keyctl$get_persistent(0x16, r4, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000440)={0x0, 0x16, 0x8e}, &(0x7f0000000300)=ANY=[@ANYBLOB="656e63ff7f617720686173683d6e68706f6c79313330352d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000970b680f93c9948753e6a0f77df709636dc8b731e0f23407c64bcac87aa884cde40788929a880a3799622d1cb0b0b36cf32f027d5a6b7c9a889d54a089e799d509ec5d082bd6056b4acbf371c7bb923056b95620818a08eb9f7ac70885879aba7d5e979c2c3bb9e6c36ce306e22840611ca605be36ff9e96962dbc13695fdd5d90f024355104b8f2c37e92aa106f470700c76ea8f0a3ad501604cfafe31054d4274991d2cc5b697500000000000000"], &(0x7f0000000480)="5ac099084d440802f0f5b38f704a38cc811dd6f9df96", &(0x7f00000006c0)=""/142) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xfffffec7) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x80000001, 0x0, 0x0, 0x5, 0x8, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xd}, 0x20, 0x100000000, 0x0, 0x0, 0x0, 0x6, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000105000020000000000002000000", @ANYRES32=r10, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @multicast1}, 0x34, r10}) getpid() socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cc, 0x1a0ffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 15:04:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = getpid() r4 = getpid() r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000180)={0x40001, {{0xa, 0xffff, 0x0, @ipv4={[], [], @local}, 0x3}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x110) rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000100)) ptrace$pokeuser(0x6, r3, 0x388, 0xb8) ptrace$pokeuser(0x6, r2, 0x388, 0xffffffffffff664d) r6 = creat(0x0, 0x0) ioctl$VIDIOC_G_INPUT(r6, 0x80045626, 0x0) syz_open_dev$midi(0x0, 0x3, 0x402) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:04:03 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Txt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:03 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000003d) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:03 executing program 0: setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='#keyring\x00', 0x9, 0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x10000000000000da, 0x0) r3 = accept4$tipc(r2, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10, 0x1c0000) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000140)=""/153, &(0x7f0000000200)=0x99) 15:04:03 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Uxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:03 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x80000000003e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 731.975229] net_ratelimit: 18 callbacks suppressed [ 731.975237] protocol 88fb is buggy, dev hsr_slave_0 [ 731.985457] protocol 88fb is buggy, dev hsr_slave_1 15:04:03 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x400400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000080)={0x4, 0x25ca}) syz_genetlink_get_family_id$SEG6(&(0x7f0000001200)='SEG6\x00') mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000200)=0x40, &(0x7f0000000340)=0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x458683, 0x0) r3 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x3, 0x551282) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000280)={0x0, 0x1, 'client1\x00', 0x4, "cb62800afa9897b3", "b80ee11941f024743ed8582c13b735ac633676f253a2d590dd2347b5ba74dd86", 0x8, 0xfffff1ec}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0xa7, @local, 0x4e24, 0x0, 'lblcr\x00', 0x10, 0x2, 0x74}, 0x2c) write$binfmt_aout(r1, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x7ff, 0x4, 0x401, 0x6, 0x100, 0x2}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) 15:04:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f') setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000680)={0x77359400}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000700)) sendfile(r0, r1, 0x0, 0x1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000640)='k', 0x1, 0xfffffffffffffff9) r4 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f', r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000600)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x2000) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r9, 0x800442d3, &(0x7f00000006c0)={0x7, 0x5, 0x5, @dev={[], 0x15}, 'dummy0\x00'}) lchown(&(0x7f00000003c0)='./file0\x00', r6, r8) keyctl$read(0xb, r4, &(0x7f00000002c0)=""/204, 0xcc) 15:04:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0x1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x43}, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) socket$inet(0x2, 0x3, 0x7f) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000180)) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc0, 0x1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000580)=0x80) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x801) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000480)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r8}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003940)={'team0\x00'}) r9 = syz_open_procfs(0x0, 0x0) socket(0x0, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000003980)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') getpeername$packet(r10, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000003b00)) socket(0x5, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) [ 732.331803] kauditd_printk_skb: 4 callbacks suppressed [ 732.331816] audit: type=1800 audit(1574348644.126:306): pid=21904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16582 res=0 15:04:04 executing program 1: syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) memfd_create(&(0x7f0000000100)='selinux&\x00', 0x4) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$alg(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000140)="703def6028e0ea4a68e4e00f2a9c7ecc2ffb7700143a130a43651e48829e359180374dcf344a1c9ffa7417ae0dc112a0c246c4e32e42f9a2bb85b3b881759d3fb97025d3795e3c3ffb0f087d2e8a0b91ca9ae25b235da15ca2fb23b6b294e54368f813d982285faae1f4e8392eeafadf56c5cfe37cec936bc1d8f6132b098831bcedc5b3180d6e6aa024e59da3fe5780", 0x90}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000200)="44fb0cd2936ad30100fd907c86cd554fbdd294bc75c471a9eacf07f71f2701393c98bcf08576d795a7b8d3e6f576d47898e47f5e9d64c2bc029471e0c6508bb8b66613c2cb73fad9a3fa0bc8e7e5ed11d06899796ae25c5d050b1d232773200c4f9050278d2d9f04881512ab6af7f19fcf732d09c35e6d30db0ad49783fc7c1ec90e6b57cdc2ad4adb715066", 0x8c}, {&(0x7f0000001380)="4846cb71488693d65bbdc2a2fbf72a8ed277ce3b51668c6b07fe80b4b98bf2153243b71853c3accd09f0d63ed8496279f942c6f865eeca4e7a845c479a50be4ae6bae9dda844a88572ffc5fa6b3e864e5c5db9c99485b4639ba0ff5f613c5b88a450cb752780aa75130effb7ac9d55d8439e18b004ec179c2d9ee274e8d106db1fde4587f3899c695758f655fea0b77c145ba9876848c96304", 0x99}, {&(0x7f00000002c0)="eab6c80465eb9e9716460c14a50621689591708e7074126317081cab6e3d3044f1604d017a2500603d88290bddd50a6c1f47e2398da7acff1494ce", 0x3b}, {&(0x7f0000001440)="34f5b3274685ae3a32ae0065c8ca5ce1b539be5010c297474f410d8dbd52ef4dd06132f91dacd0a18bf9d117f6f6e9dbafeec208da83bb6486e8eb70b0bc4fd7df5a1f9c23f3241722aecdc61ce86ece2fd36ac2f7f31289baeb603f3d209cc94baa316ab864e43706a173c7922ff0e8a0a6493453c780a918b6db8a42f3a10a79566c614b9b6f07ccf03b1617b9aa3703b7292fb14e60620a620319db", 0x9d}, {&(0x7f0000000300)="c7717d2251e1c16458efe82ba165855df83f5663b6c9268fb28a733f00890806b6bc18726b7032f8b1d2dbe11648247a", 0x30}, {&(0x7f0000001500)="b527ce314a501157fc4e92bbf66e0817b56f79a45239fd8df3ebfe204915dc1320dbda457631d3f3a85c2b0bdb6587f3ed9c32f6603b6874d906782135a52b14da297fc247f72234763d5d7214b59b2e3425885b7cc7addf7250795484beb0288284d66337b44dc54512cf99e3e677d5a8f6eb5323fd0052cecc0dc25bf4038293bc3042b4674a3cfb65217084e1da3d61b497c285b6c4afbfad6efca69ee32d2de6d62ef3a35d6e3674dc0a6239060739", 0xb1}], 0x8, &(0x7f0000001640)=[@iv={0x78, 0x117, 0x2, 0x60, "3d6e609db163ad754e97ef1e123e421d57c7821eb82bebbd421c44e391187a5d26afe7e570416f9fbae09b4a24875cbdddb3791ceae1a5928f15ad9c830f6d5ace1cc47288cd0021fa9ec1c7ceecc245589045b2e924da274a0d3ecb1ffcbf77"}, @iv={0x88, 0x117, 0x2, 0x72, "62a0bbae1aa56c8eb217bc023ee9a590189c02befdad19fcfbb88bfe245d9011b38302316328aa69b18e9fe7a3b03d3c0a061f708fe2dddf8e6a60df0d68408be264937d4b2c9fc296fd6de0dfb6fb1dbfb785c8b0117683fffb6397f2d6ef50efa4a45006bfb8e1839200231295210532ab"}, @op={0x18}, @iv={0xb8, 0x117, 0x2, 0x9f, "2b4d244cde11c7c3526c119dbbcc08d0dc4bdab777b9ed7475642c5db7b950fc0fe2bc8900943406d1ed2bb07490becc11718b143535ec10e474aff1ede7fe56803a10566d4c03db9d63cf83afbbeba009724580822a29d08570e26a058a88eec7e3dc2d469bc648e51110657c02236d83453a30cf9adcfd5c6f49efe9eddb0457fc5b9e2d295fc2916d82dc92682c2b3df64e501670abeb698b0a15759541"}, @iv={0x78, 0x117, 0x2, 0x64, "e2228b6a1671635d1919b939be49d6931b9caa3f72c285c7866185cd2d224509ab10d8ba72370ab7d246d9d29b94019c1867e8376a6dd2a1f93d09cc62dbd1ed50c9762d368b9a321a5ccb092c43f45cead8e3ce6898eb9b992768502265835448dbb262"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffffe01}], 0x290, 0x4}, 0x4) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) r4 = open(&(0x7f0000000340)='./bus\x00', 0x161042, 0x0) ftruncate(r4, 0x2007fff) fallocate(r0, 0x100000003, 0xff01, 0x28120001) 15:04:04 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Vxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 732.535243] protocol 88fb is buggy, dev hsr_slave_0 [ 732.540445] protocol 88fb is buggy, dev hsr_slave_1 15:04:04 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)='-\x00', 0xffffffffffffffff}, 0x30) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 732.695260] protocol 88fb is buggy, dev hsr_slave_0 [ 732.700464] protocol 88fb is buggy, dev hsr_slave_1 [ 732.775222] protocol 88fb is buggy, dev hsr_slave_0 [ 732.780424] protocol 88fb is buggy, dev hsr_slave_1 15:04:04 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Wxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 732.865263] protocol 88fb is buggy, dev hsr_slave_0 [ 732.870578] protocol 88fb is buggy, dev hsr_slave_1 15:04:04 executing program 2: r0 = socket$inet6(0xa, 0x20000000080002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) socket$inet6(0xa, 0x800, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0xfff) sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000002900540660976f86eca6cc0f5acfa42cbb0dbe0000084b113329520502ff000000e526e9985c404b3ee66409401904a782dedbf6cd5d78699e15442f1bbee26091a0ef000044dfe4fdaae877b094c28db6431019580548faa88d45adbb19dc3a7644298ec508ecacd29d54730abafd2dda3b3bf84d764ef737d7321c96ab87b6c50c7ea77d4eb23223ebe802e5793a9f63d976491dcd1598c6250831bd86af70780417581591d784433466bfc85f323dc4fea21c265a7dd1bd5c70a6e8ec280fa8182efc1d0a"], 0x18}}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ptrace$cont(0xffffffffffffffff, r2, 0x9, 0x5) 15:04:05 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Xxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:05 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x10076) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="736563758733c641726961792e656d3065746817b86f747275737465642470"], &(0x7f0000000000)='\x00', 0x1, 0x0) creat(0x0, 0x0) fanotify_init(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x0) 15:04:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000200000002, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={r4, 0x5, 0x8, 0x7, 0x7ff}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r5, 0x7fff}, &(0x7f0000000200)=0x8) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffffffbe, &(0x7f0000000b40)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 733.358272] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 733.380165] audit: type=1800 audit(1574348645.176:307): pid=21969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16565 res=0 15:04:05 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c72185559b364c2f7b8dff165d3be03c66f6f746d6f64653d28303030303030302c000400004000"/57, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) write$FUSE_ENTRY(r0, &(0x7f00000005c0)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x81}}}, 0x90) r1 = socket$inet6(0xa, 0x3, 0x100000006) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000004acb700000000000000000000000001000100000000"]}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000001780)=""/4096, &(0x7f0000000380)=0x1000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0xa040, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="dac75a67e883b3ce7c897ef34b385067311185347855cc4947908a5bba4da6c5142c281c710b2c0e6507c8c221f2a184647ae18e63dd0ab7fb707d742a60ffad", 0x40) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000300), 0x4) llistxattr(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0) 15:04:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800a1695e1dcfe87b1071") pipe(&(0x7f0000000000)) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f7e615f7187616e74756d3d3078062b303030301c8b30303030060000002c0077720473644c6f12b834c4de8e7853f31e0107e70cd84173d7732e899ee3a7d76b92a5f1de86886010d1f4f71b28d12a0e006632ffc5e58e28cfa2e7ba5b85cb52ca79708660f5782f83d5cb0d983204397c19730287ed41018f4e3023eb75541262ba9640c7c910f5cde809557451941bace59e5ffc6d54ee5d0d7878ca7219d628a6a047d8e0044263e3b33c917001d869cfc7cb5303ee8b97e7d4eda88476a200"/209]) [ 733.460462] audit: type=1804 audit(1574348645.206:308): pid=21969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir515178884/syzkaller.2RZA7l/17/file0" dev="sda1" ino=16565 res=1 15:04:05 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Yxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 733.573562] gfs2: invalid mount option: quo~a_q‡antum=0x+0000‹0000 15:04:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0xffffffffffffff9e) r2 = accept$inet(r1, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x7f, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r0) [ 733.628545] gfs2: can't parse mount arguments 15:04:05 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x40, 0x101000) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) remap_file_pages(&(0x7f0000a0b000/0x2000)=nil, 0x2000, 0x2000009, 0x3, 0x800) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write$P9_RSTATFS(r3, &(0x7f0000000080)={0x43, 0x9, 0x2, {0x2, 0x2, 0x7fffffff, 0xfff, 0x1, 0x1, 0x7, 0x3f, 0x3}}, 0x43) 15:04:05 executing program 1: socketpair(0x25, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 15:04:05 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)={0x1}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x9, 0xf}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:04:05 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000180)={0xc0000000, 0x101, "0c8678031209c3eabb988e7e4f93bfc0f6e81466b61225bf48cd9c21af9ce67b", 0x8000, 0x8, 0x2, 0x4b3, 0x1f, 0x38136fb4, 0x5a2b, 0x8001, [0x400, 0x3, 0x2, 0x80000000]}) open$dir(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffef4) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1000005, 0x810, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000100000000000000"], 0x90) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setresgid(r9, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f00000002c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x3, 0x2, 0x1ff, 0x429f7ffe, {0x1, 0xda9b, 0x1f, 0x7, 0x0, 0x328, 0x5, 0x2, 0x40, 0x5d6, 0x1, r7, r9, 0x1, 0x8}}}, 0x90) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0x3, @null, r5}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) write$binfmt_elf32(r10, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c46050000d1030000000000000002003b00890000001101000038000000ce00000008000000070020000100ec00ffff00000000000001000000080000000f0d00000100010000000000050000000800000007000000050000000700000006000000fae100001d1900000104000000040000070000000748700d58ca58284bb8c6bbee3e8fe79179b1c449a228c9a86f5da629a82622bba050d01770bbdc0bc7fb63e2fdb24dbb2312f8c1a9521d932440f4b3c8fba5b0a8858225691364e828446ce199fedc81dd756b93438b10c86031d4924bcfcb6d8917a517954a1862a37bb49f46c0e59080ad64fb7e39428d2d5baad32bde3c5d745de250d244b617ec8ef9c28a7728f77a33cb3f8a806d8cee17c9e04a82d6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005096f215e700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7c678eabc862e95853f5003ef24186316b8f3486576d2f7eb3ebe61c8b25774f28484f912c8435f59a1aa4d7223"], 0x918) capget(&(0x7f0000000100)={0x613b41a7d35a0596}, &(0x7f0000000140)={0x3, 0x0, 0xfc000000, 0x3, 0x9}) 15:04:05 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000100)=""/127}) setxattr$security_evm(0x0, &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_open_dev$sndpcmp(0x0, 0x6, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:04:05 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='Zxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb158ee38eeafa732}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x65) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x109001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000000c0)={0x1, "9d"}, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000040)=0x5, 0x4) write$cgroup_int(r1, &(0x7f00000003c0), 0x12) socket$kcm(0x11, 0x0, 0x300) 15:04:06 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='[xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:06 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000001200)=0x1) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x1c0000, r1}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00000011c0)={0x10001, 0xf738, 0x1, 0xb7, &(0x7f0000000040)=""/183, 0x1000, &(0x7f0000000100)=""/4096, 0x84, &(0x7f0000001100)=""/132}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:04:06 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='\\xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) socket$packet(0x11, 0x0, 0x300) getsockname(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100)={0x0, 0x3f, 0x80, 0xc}, 0x6) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000008380)={0x0, 0x0, &(0x7f0000008340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0f4fbf68cd0828490f000000000000753e67", @ANYBLOB="d38c25a7f1eb44e0ee47c0fa06000000241e"], 0x2}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 15:04:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb158ee38eeafa732}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00E\xab\xcbw\x83.\xf3\x8a\xf6\xb3\xac\xfe\x9ek9\xcd\"\x84\x18/~[{\xfb\xc2\t}\xaaCSM^Z\x98\x0eZ\xfca5b\xd6\x92\a\xd6*\xd8v\xd0\xb1\x00=k|\xf1P\xbf\x17\x1b\x8f\xd6LT`V\\\xaeuJ[:\xcd<\xa1L\xec\x9fU\xe9\x14_g=\xfc\x7f\xbd-\xb2\xfa\xee\xe3\a~\x90\xd4\x90\a\x83\x81\xac\x1bWE_\x05;\xefk\x1e\xed:\x90\xc1\xba\x96\xde\xfac\xf0\'&:dn`\xe8\xa6-\x1dh\xb07#T\xa6\xa3\x9c\x91_jM@\x06\x8c\xf5\xbb\x81G\xb9\xa9\x8b\xf3\x8f\xa2\xee', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x65) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x109001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000000c0)={0x1, "9d"}, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000040)=0x5, 0x4) write$cgroup_int(r1, &(0x7f00000003c0), 0x12) socket$kcm(0x11, 0x0, 0x300) 15:04:06 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000368b5cb2f8e10d27448d56a219597f2e16233ff429b03da4518bc118abe032293539ee607666f1e3d10c668008cfd5acd82ed3064eb1d0b2674c06ab1267716f126b29086a15bd97955f7a4fd8c482c6a71351b14ba7b902dcde9a828f6502912e405bf7665605269ee0efa13e05d7b0a2b0624decf0000", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r6, 0xa7b}, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x400}, 0x8) close(r7) 15:04:07 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='^xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:07 executing program 0: openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x50, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x2400) splice(r4, &(0x7f0000000080)=0x800, r2, &(0x7f00000000c0)=0x4, 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2004001fc) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:04:07 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='_xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 735.733685] audit: type=1400 audit(1574348647.526:309): avc: denied { map } for pid=22094 comm="syz-executor.0" path="socket:[82772]" dev="sockfs" ino=82772 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 15:04:07 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="640f4bef0f01cb66b8c74400000f23c00f21f8663500000b000f23f8660fd2b005000f3266b8010000000f01c1baf80c66b848e2658e66efbafc0c66b80e00000066ef0f01c50f090fae01"}], 0x338, 0x0, 0x0, 0x184) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90003}) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fanotify_init(0x2, 0x101000) 15:04:07 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='`xt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:07 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000180)={0x1, 0x4}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') preadv(r4, 0x0, 0xffffff89, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a6, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e20, 0x6, @local, 0x9}, {0xa, 0x4e22, 0x0, @empty, 0x7fffffff}, 0x8, [0x10000, 0x4, 0x80000001, 0x6, 0x0, 0x9b, 0x1, 0x5]}, 0x5c) pread64(r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 15:04:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) [ 736.273491] QAT: Invalid ioctl 15:04:08 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='axt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:08 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) ioctl$int_out(r2, 0x2, &(0x7f0000000000)) 15:04:08 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x73, 0x2}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x53f, 0x2000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r6 = getegid() fchown(r4, r5, r6) io_submit(0x0, 0x2, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x80, r1, &(0x7f00000001c0)="8b35a4a02b876b1eda2b5aa82fe82a658bfbf6e15f9415f0555d99f4a19f9d5b525a1d38071b2137d81e04f1ee86b3eaa4fc016f0a6b8a2af515eba5ad30b2dafb9b64f2c3722c8b9e719fc139926923054b7150d1d47abacd1aa022472382cf004684c9fdf419bc6fcef8b8bcc3e40f7795f60b0eb04d14735737740aabbc1f44560587ff20fbaa4b82089e7a46618761665df488933d9e2cfce52da02d22e5c79bd27586cd05562c52e7669ccfc8e5e4bd4715f1ac9840616f02626fddff11ed6ce62dc65cc6472bbc3d325e8a9b567b44786b3b8fcd932e820c43310a0fb08d", 0xe1, 0xc7, 0x0, 0x3, r2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x20, r0, &(0x7f00000002c0)="944c775d27dc5835240b91bad120ca01b46059d3a7aeeba0428468a1ebeac3d9c7c45efce642e175d7ef5fe77628598614978e104e9e258e0276c0b2d9b93b6bc7223054b1e1fadb3a14", 0x4a, 0xffffffffffffff5e, 0x0, 0x4, r3}]) r7 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000000000018040000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027327243426c7d2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff00000000"]}, 0xa38) 15:04:08 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff01800000684fb5161a18d5476679dd24bfdc0800395032303030c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b3f000000000000008dc540473786cd89e9b08e3f5972fea19a01c49ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d467907a186000000000000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xf}, 0x30) write$P9_ROPEN(r1, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x1, 0x0, 0xfff}, 0x9}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 736.906921] ebt_among: dst integrity fail: 3cd 15:04:08 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='bxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 737.015238] net_ratelimit: 23 callbacks suppressed [ 737.015247] protocol 88fb is buggy, dev hsr_slave_0 [ 737.025461] protocol 88fb is buggy, dev hsr_slave_1 15:04:08 executing program 2: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x52, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="066304400000003a2e634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000006308fd45f9c26b91000000671e0000000000000000106308400000"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) write$selinux_load(r0, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c208000000000000000100000000676800000000000000000000007fffffff00000008d8a613"}, 0xfe66) 15:04:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000140)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101000, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r6, 0x7, 0x10}, &(0x7f00000000c0)=0xc) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000018002551075c0165ff0ffc021c14020000100f05", 0x18) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15:04:09 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xffffffffffffff81) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000240)={{0x4, 0x0, @identifier="357a030ecf834a48d54785aa53be0f13"}, 0xd1, [], "c162aa38beea1782c7dd280770926391ac36364d996de9f8295a948bc2c1e9ae126040e771c0b0fbb00c43c83bcca4cbd036c623eba81cc6a242240ece60bd0e2d3eaab5c121717ff4f2a372d678c2a168dd0c6cd669663790d8e2ccec79319fd0b0684c8fac7af147a897435e0b62aa2d4aadc375028531a260ded209d669f17f9dbf51b87c33b52fcf5705165dc0c0d397a37ea8c534efbb844aa5136daa4f7fcbe7311b9d4e96e328d8c97c2a81a06edee72ac8cded04fe17479a3b9946000328f914eca01f91a90fa33e7429987408"}) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r5 = dup3(r2, r4, 0x100000) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x7f, 0x6, 0xfa, 0x7f, 0x0, 0x100, 0x400, 0x996f414620f8bc8b, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3a62, 0x4}, 0x2004, 0x10001, 0x4, 0x8, 0x3, 0x3, 0x49d}, 0x0, 0x10, r5, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) [ 737.219129] SELinux: ebitmap start bit (1048576) is beyond the end of the bitmap (320) [ 737.243575] SELinux: failed to load policy 15:04:09 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='cxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:09 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='dxt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e3ecfe87b1071") r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) close(r1) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x8100000, 0x0) write(r1, &(0x7f0000000100)='c', 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f0000000140)={0x0, 0x4aef, 0x1, [], &(0x7f0000000000)=0x41}) 15:04:09 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='e\nt4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 737.655457] protocol 88fb is buggy, dev hsr_slave_0 [ 737.660606] protocol 88fb is buggy, dev hsr_slave_1 15:04:09 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='e\x18t4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:09 executing program 2: shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002c80)='net/dev_mcast\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000000080)=0x6, 0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) munlock(&(0x7f0000feb000/0x3000)=nil, 0x3000) sendfile(r4, r3, &(0x7f0000000080)=0x6, 0x7) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000002780)=')\x00') sendfile(0xffffffffffffffff, r2, &(0x7f0000000080)=0x6, 0x7) linkat(r0, &(0x7f0000000480)='./file0\x00', r2, &(0x7f0000000500)='./file0\x00', 0x400) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000002800)={0x0, 0xba, 0x1, [], &(0x7f00000027c0)=0x6}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) recvmsg(r6, &(0x7f0000005000)={0x0, 0x2a8, &(0x7f0000003f40)=[{&(0x7f0000002840)=""/52, 0x34}, {&(0x7f00000029c0)=""/166, 0xa6}, {&(0x7f0000002a80)=""/194, 0xc2}, {&(0x7f0000002b80)=""/171, 0xab}, {&(0x7f0000002c40)=""/26, 0x1a}, {&(0x7f0000005040)=""/1, 0x1}, {&(0x7f0000002cc0)=""/236, 0xec}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/237, 0xed}, {&(0x7f0000003ec0)=""/125, 0x7d}], 0xa, &(0x7f0000004000)=""/4096, 0x1000}, 0x41) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f00000028c0)=""/255) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000002880)={0x20000160, &(0x7f00000050c0)=[{0xe04, 0x4, 0x80, 0x8}]}) fchdir(r5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) recvmsg(r7, &(0x7f0000000380)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/145, 0x91}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000200)=""/166, 0xa6}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000002580)=""/194, 0xc2}, {&(0x7f0000000300)=""/124, 0x7c}], 0x7, &(0x7f0000002680)=""/195, 0xc3}, 0x8040) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r9, r8, &(0x7f0000000080)=0x6, 0x7) ioctl$RTC_WIE_OFF(r8, 0x7010) 15:04:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000000)=0x6e) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000180), 0xf0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) r4 = dup2(r2, r2) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES16], 0x1}}, 0x0) write$cgroup_type(r4, &(0x7f0000000140)='t\x02\x04\x00', 0xfffffefa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 15:04:10 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='e%t4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 738.215297] protocol 88fb is buggy, dev hsr_slave_0 [ 738.220508] protocol 88fb is buggy, dev hsr_slave_1 15:04:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000300)=@md5={0x1, "30c1224f820ef51d70c7b464ecd29655"}, 0x11, 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100736671004800020000000000000000000000000000000000000000000000000000000000000000000000000077000000000000000000000000000000000000000000000000000000000000f3"], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='|\x00\x00\x00,\x00A\a\x00'/20, @ANYRES32=r3, @ANYBLOB="00000000000000000300000008000100627066005000020008000400164f9404dffcb63d400002003c000100000000080200002000000000000000000000110000000000010000000000000000002ce700"/100], 0x7c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) r6 = accept4(r5, &(0x7f0000000400)=@ipx, &(0x7f0000000340)=0x80, 0x100000) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x300, 0x0, 0x0, 0x1a8, 0x1a8, 0xe8, 0x268, 0x268, 0x268, 0x268, 0x268, 0x4, &(0x7f0000000480), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x5cc4d6a0c843742a, 0xc93c921a305a03f0, 'ip6gre0\x00', 'vcan0\x00', {0xff}, {0x101}, 0x89, 0x1, 0x61}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@multicast1, @broadcast, 0x0, 0xffffff00, 'rose0\x00', 'bcsf0\x00', {0xff}, {}, 0x0, 0x1, 0x4}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7fff, 0x5, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x6, 0xff, 0x7f}, {0x3, 0x7f, 0x2}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000004c0)={0xfffffffa, 0xffffffe0, 0x3, 0x84f, 0xd, 0x4, 0x38, 0x0, 0x5, 0x7, 0x9, 0x2}) [ 738.573815] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 738.581559] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:10 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='e\\t4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:10 executing program 1: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x48, 0x7, 0x1ff, 0x9, 0xee, "47127228c09dbd1e64654f74c57df0365ad355", 0x84f, 0x100}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r2, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xc451687366da7bf1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x95}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_mount_image$xfs(&(0x7f0000000080)='\x01\x06\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES16=r0]) [ 738.639663] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 738.647267] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 15:04:10 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x41c1, 0xbcefdaa3a053c373, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000004c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x378}], 0x100000c7, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\xa4h\x04\x00', 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 15:04:10 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@remote, @empty, @loopback, 0x0, 0x8}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@remote, @empty, @loopback, 0x0, 0x8}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1000, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) r5 = fcntl$dupfd(r3, 0x203, 0xffffffffffffffff) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) r6 = socket$inet_tcp(0x2, 0x1, 0x0) request_key(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='/dev/kvm\x00', 0xfffffffffffffffe) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000180)=""/143, &(0x7f0000000080)=0x8f) lsetxattr$security_smack_transmute(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0xb872e8a7da3d9e02) [ 738.775261] protocol 88fb is buggy, dev hsr_slave_0 [ 738.780437] protocol 88fb is buggy, dev hsr_slave_1 15:04:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000009008f22f859708038a19500000000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) [ 738.945279] protocol 88fb is buggy, dev hsr_slave_0 [ 738.950533] protocol 88fb is buggy, dev hsr_slave_1 15:04:10 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ett4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:10 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}, 0x0) 15:04:11 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x453, 0x12f880) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xe8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x40004, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@euid_eq={'euid', 0x3d, r4}}, {@context={'context', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@uid_gt={'uid>', r6}}, {@obj_type={'obj_type', 0x3d, ':bdevwlan0nodev:\'\x00}\xc8'}}]}}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB="141273dc9099000000001e"]}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f00000000c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000005c0)={r10, 0x6, 0x2, [0x51a, 0x4]}, 0xc) [ 739.227435] IPVS: length: 143 != 24 15:04:11 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='e\xa8t4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:11 executing program 4: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x40}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000001c0)={0x9}, 0x4) 15:04:11 executing program 1: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = getpgrp(r0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e5"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 15:04:11 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='e\xc0t4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:11 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000008108dd04a46d87cd2071218faa91a4ce5788fd4a1410f161062275198688d3e9f09488fab86850e394106542b772784aa26da03b6c706090f67cdd0992121f1bf6d73cd5a49f5094d20fa238026ef001f68d324e7caa3901f30848f63584cbd597b8399080cfe3ddfdbbaed0dc2d2574e4cd662115fe16a39c2fb488391d3553a9dc81eb3028bd19677de8e600a2bdc5dc6e116b1c13ef3c6b0f333ded4910b2b2dd7bc3dd74e43def21d6b5003b2d14191e7d27bf5f8666acb3e56448", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x356) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={r4, 0xe0}, 0x8) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x6) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:04:11 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(0x0, 0x220000, 0x180) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000140)=0x8800, 0x8800000) [ 740.065641] audit: type=1800 audit(1574348651.866:310): pid=22323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16551 res=0 15:04:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0xe8}, 0x1) 15:04:11 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ex\n4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 740.430578] audit: type=1800 audit(1574348652.226:311): pid=22323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16551 res=0 15:04:12 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, r0, 0x4, 0xffffffffffffffff, 0x9) socket(0x200000000000011, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x400000000000058, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='\x00\x00\x7f\xef\x00\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$rose(r3, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setresgid(r5, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) listen(r2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r6, &(0x7f0000000380), 0xfffffffe) mkdirat$cgroup(r3, &(0x7f0000000140)='syz0\x00', 0x1ff) 15:04:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./bus/file0\x00', 0x213000, 0x34) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) keyctl$clear(0x7, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r3 = creat(&(0x7f0000000000)='./bus/file0\x00', 0x84) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x800) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$nl_route(r4, 0x0, 0x8040) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)) syz_open_pts(0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x27, [], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000140)=""/39}, &(0x7f0000000180)=0x78) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffe) 15:04:12 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ex\x1b4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 740.663858] audit: type=1400 audit(1574348652.456:312): avc: denied { map } for pid=22346 comm="syz-executor.1" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 15:04:12 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000001c0)) fcntl$dupfd(r0, 0x0, r0) pipe2(&(0x7f0000000240), 0x80000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000200)={'lapb0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000180)) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='1>N\xa0f\x8e \x85\xa1\x8fq\x99it_pending_bools \x00', 0x1, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x24100, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000509000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9a50300000f32f3663e0f1e2cb066baf80cb8ed646480ef66bafc0cecc7442400c2000000c744240200580000c7442406000000000f01142466b867000f00d0660fdb5fb4c422b9b73dc57dffff0f01c966b8e1008ee066baf80cb8d0f68b8cef66bafc0cb84e000000ef", 0x6b}], 0x1, 0x38, &(0x7f0000000140)=[@dstype3={0x7, 0x9}, @cr4={0x1, 0x20200}], 0x2) 15:04:12 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ex\"4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:12 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x1d7) listen(r0, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000000)={0x30000, 0xc900c0, "caa36f514dbca78fa6200276d2b2ad0f9c70c3d47d456c79", {0x10000, 0x5}, 0x1}) 15:04:13 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ex%4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:13 executing program 4: socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getown(0xffffffffffffffff, 0x9) getsockname$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x6c44c0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x10, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000000)='ip6gre0\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000640)=0x9) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)) openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x248180, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@empty}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@mcast2}}, 0x0) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', 0x0, 0x6, 0x1, &(0x7f00000001c0)=[{0x0}], 0x801800, 0x0) 15:04:13 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ex,4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, 0x7, 0x5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@remote, @empty, @loopback, 0x0, 0x1}) r6 = dup3(r4, r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000000240)={0x8, 0x401, 0x0, 'queue0\x00', 0xaee}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300568f785f4f607a24b5834f8285626f6e6430000000f7ffffffffffffff180012000c000100626f6e64000000000800020004000800f85c9225de29eb5c2434ab01edb97e8833e14754c0289de9b3e77162c2558dba903718c143b033939cbf57ef243967d6db6c553bd2ed9005d5f4247868670e77c88ac4d440aa894265108574d4abdc3c291bc8ff0f3a482198cdacb58817bc7ba63a8ec53313"], 0x4c}}, 0x0) sync() 15:04:13 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='exl4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:13 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='exx4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:13 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U-', 0x10000}, 0x28, 0x1) 15:04:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x4000, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r8, 0xa05, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, r8, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x88, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xf2}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48084}, 0x8000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}, 0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000003c0)={r14, 0x7}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x7fff, 0x0, 0x6, 0x6, r11}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r15, 0x511a}, &(0x7f0000000180)=0x8) setsockopt(0xffffffffffffffff, 0x5632, 0x1ff, &(0x7f0000000180), 0x0) r16 = accept$inet(r2, 0x0, &(0x7f0000000240)) sendto$inet(r16, &(0x7f00000002c0)="8b97242bed1d078f7e95dac00408f697e5a8f6061e929391f9c6727e66ffdc1310a6f66afe44d9e83a134086f373609aa41c", 0x32, 0x20000000, &(0x7f0000000300)={0x2, 0x4e24, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) 15:04:14 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ex\xb44\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 742.375241] net_ratelimit: 20 callbacks suppressed [ 742.375252] protocol 88fb is buggy, dev hsr_slave_0 [ 742.385570] protocol 88fb is buggy, dev hsr_slave_1 15:04:14 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@remote, @empty, @loopback, 0x0, 0x8}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x2, 0x1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:04:14 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext\a\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:14 executing program 4: add_key(&(0x7f0000000080)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x2}) getgroups(0x3, &(0x7f0000000140)=[0x0, 0xee00, 0x0]) setregid(0x0, r1) 15:04:14 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924924924924f0, 0x0) ftruncate(0xffffffffffffffff, 0x4) r2 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setns(r3, 0x0) sendmmsg(r2, 0x0, 0xfffffffffffffe5e, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = accept4$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x800) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)) syz_open_pts(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4000) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 742.814595] audit: type=1400 audit(1574348654.606:313): avc: denied { name_bind } for pid=22472 comm="syz-executor.1" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 742.865026] audit: type=1400 audit(1574348654.606:314): avc: denied { node_bind } for pid=22472 comm="syz-executor.1" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 742.935202] protocol 88fb is buggy, dev hsr_slave_0 [ 742.940519] protocol 88fb is buggy, dev hsr_slave_1 15:04:14 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x80004) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x3000003, 0x7f, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:04:14 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext\n\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 743.095288] protocol 88fb is buggy, dev hsr_slave_0 [ 743.100527] protocol 88fb is buggy, dev hsr_slave_1 [ 743.175771] protocol 88fb is buggy, dev hsr_slave_0 [ 743.180946] protocol 88fb is buggy, dev hsr_slave_1 [ 743.255226] protocol 88fb is buggy, dev hsr_slave_0 [ 743.260527] protocol 88fb is buggy, dev hsr_slave_1 15:04:15 executing program 2: syz_read_part_table(0x0, 0x227ba081cfa2a53d, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x24300) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = epoll_create(0x7c44) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x2, 0x51802) sendmmsg$nfc_llcp(r6, &(0x7f0000001940)=[{&(0x7f0000000280)={0x27, 0x1, 0x102, 0x5, 0x1, 0x6, "b530b4b834de4c4d80c9f94b2436145e34f0080df173d316524ee3ba5000f3238fc12441c7543ef09c1066e555c0c7098e8ebdceb1810ccc70d268881bee02", 0x14}, 0x60, &(0x7f0000001700)=[{&(0x7f0000000300)="8b6a9e099b7eeb1a75b2040c69984687553574ab4c0f707948915d0b2ddf4adc6a639843cad85a0f7e9e708ae85bd6b3ecbcf9d4be5636ec0ed630b0e1804009524c4951ce70f85df13313f2ceb70212b3868ce58cb583312f4279f04e17102995f5bb6f10d0c52d5db14586f3c29831ea18ad4b741c9b66444de64e70388418beb77d5a843be2ff010bfb00fd5b395fdf88e1fd600c271b80bd0042462b4f22da74c93d9aae78fc579c", 0x4f}, {&(0x7f00000003c0)="7f464f946e4c412d14df2996052b1b6a589d1b9c91b4fdf2a7010c0713f7f241c38ae2a365549b31a8e5065aae30fbe44acb7b6b9c2a1cca35c16e1be29583e03627c6beffb8e0e2a10bb2e9269b09db4e88746ab3ccc9aab60dc40ba6e08d41444bbafe105981a9b08fb91bd4a5543eb772bf0821c842", 0x77}, {&(0x7f0000000440)="b9b107d5e1812dbe73e69cce1b17e904d61abd7d36860cd6a706ccac669ab04d3c21c514b9ca1fa52fb7041968c02207457451ed4ae04627da0f77f8d7c47ff73c5807a0943f9a0d1adfcfb8794848", 0x4f}, {&(0x7f00000004c0)="da35bc274ba6d18b0f473006a1aeeed00f0c2d2c3202a02588582aaac48b7adb5acb41752ab1a93372c5522334679763afb622f8f4aadc573e4821c1784db5b57512fd242012ebfc7ff5c0b4a3e8828380f3e425113e9d10305e8c6750699b3594ac36d793c3b7b25fce24e99655494d88655d976e790f904b3d87b5636df4b39b4d6556357da7aeeebe9383661b829a3f9b851dbab1aa8762db82fa5f6f41a357f461573a8f70f0136e8d72b2be812ceeebf7", 0xb3}, {&(0x7f0000000580)="c3c0fb455804f308160df0f871f2e8121334aea65caad4b7b6582789ee09ee94f2950932149a702aeb7500d5ca8559ca319a560eb4e7ac3c7cf7785e57e326cd7d0f832345e734f940ceb512cd748a77777e78138352a3581b3f24641d17fdfe928e85e305863c8ebdc401c0eead6c3c54", 0x71}, {&(0x7f0000000600)="269ba2227daeef4c99f9783d6530bf575208a66596dadc9f053a091d40d112ae59f287a6ab66fbfb05c0bd52fc03a9cb69dd4f092dcf6ace641daa2afc558e8ae2c74a4f6aa63095aa9110f2a33f945c2e3110b2d5064ecbab89e79054845a88d8352d60c591b808c4e59d851215fa30eca7628fb188c65a06debbd54e3b3c60cd29fb6b76559a4a3624e21d32d544ae9f3657b8182f5deacf426f9ddd60eb17108ec66223f9a373d8a819aed113ec8f88fdb587a1dcf430653c9263ffa562d2ddcba8343692568e160ed113c941f3d8b865776558519ccd9d0e", 0xda}, {&(0x7f0000000700)="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", 0x1000}], 0x7, &(0x7f0000001780)={0x38, 0x114, 0x800000, "a4e066be731d5ff73111609b8876cdb358d83fb2ed845fa2f8b9dad8a9d8969d161901"}, 0x38, 0x5c00}, {&(0x7f00000017c0)={0x27, 0x1, 0x2, 0x1, 0x80, 0x1, "ae183a4ed39eb951ad768ed51e70b2592d2f5152251eb46a46390272c9297a529c960e13f3e7329d1a8e79fbb9f7bdb839e6ae39a7d29b95a3c81efc22e7d9", 0x9}, 0x60, &(0x7f0000001880)=[{&(0x7f0000001840)="b0142254e5", 0x5}], 0x1, &(0x7f00000018c0)={0x70, 0x0, 0x2, "f7d13340dd41c15b3c390a17006edf0b56b076060f1091f720cc160d4803872402d73ccd2f610e689d64d9578c99f3ec6c8b1dc24c5021bee0f6cdaa0c6e042417813f73f0ead72645eb55d8f70489445f0be21622c4ddfa134f186b7a40"}, 0x70, 0x1}], 0x2, 0x40) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x3, 0x931, 0x10002000, 0x4000, r5}) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/validatetrans\x00', 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ppoll(&(0x7f0000000100)=[{r0, 0x80}, {r1, 0x26b0}, {r2, 0xeb1ec3ae5984a648}, {r3, 0x9019}, {0xffffffffffffffff, 0x8000}, {r4, 0x20}, {r7, 0x100}, {r8, 0x40}, {r9, 0x4}], 0x9, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={0x2}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 15:04:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x17f) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x6c, 0x0, 0x10, 0xffffffff, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x504ec34}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff00}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7b3}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0x6c}, 0x1, 0x0, 0x0, 0x94}, 0x40081) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x2, 0x401, 0x1000, 0x0, 0x7}) 15:04:15 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000100)="1f000000010841e20c050054a8c98cca029b189f1b882de4e41b0e982de47a", 0xffffffffffffff61) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 15:04:15 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext%\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 743.792616] audit: type=1400 audit(1574348655.586:315): avc: denied { dyntransition } for pid=22503 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 15:04:15 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:04:15 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext-\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:15 executing program 1: r0 = socket$kcm(0x10, 0x5, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) fcntl$getown(r1, 0x9) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)=ANY=[@ANYBLOB="1100001a00"/21]) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff8b, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000020000502d21a80648c6394fb0824fc0004000b400c000300053582c13715e28e37b97712ff611700d1bd", 0x30e}], 0x1}, 0x0) 15:04:16 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0xa5f2f000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x9821) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:04:16 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='extd\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:16 executing program 2: mkdir(0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x220040, 0x0) close(r2) write$P9_RREADLINK(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d7abf9d1a51c4bfce1e775"], 0x19) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x400) sendfile(r1, r3, &(0x7f00000000c0), 0x8080fffffffe) 15:04:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000015000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000055000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000175000/0x2000)=nil, &(0x7f0000175000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000b8000/0x4000)=nil, &(0x7f0000013000/0x4000)=nil, &(0x7f00001f1000/0x3000)=nil, 0x0}, 0x68) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x103) getsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, 0xfffffffffffffffe) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x109000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffdb6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000180)={0x8, 0x25a, &(0x7f0000000300)="cf864f701b48b2ca7a9c9c4e2d340c075cec284a653f9509ec35f4064f8099c71a907e03d1da31565bdd0bc94c96647bb6e991a7f17510f02bae69096fdc62255daac2a9b67d0bc8aee6a3ae371accae9a7563e23789d69a6863f9e59c4c6f809663680a857906a566e1f26fc73bac2a1df74f6e3cf563e3e5222152dba8c7a23429897333414897492367b0b22fb987d3ac0e5a084076da142e96e1e348a32052b73df42d6bea4e84aa98be519e659ad4d48026bfbff6cf9dd898adf7de93453198a0a344d25a0a40527dc47e9b71076d0e7c28044cbef4b69781b84be2e533eacb7b9c84b12490d64b3b", &(0x7f0000000440)="b021d75676d6b574a4ed3b25415566746f7fb9349ae661077f231925a6e2fe974431cd794aad29820bec0ba6f8345cc97eea8fe1b903a38c3a52313c2f828dd53ff4cf9feb6c0cb567e02e34921cde754ed1ad2da56ed16bf30c99973209426b603098a5079a6c6d80a807ec915581d769d6b4ba7b57208099a3645d82a051d973f9fd520a3010e7a6bf0663d11025921c9d4eea67ea1b5ec7d5b7daf8fb3669c0947f4f20f929bf1ddf4f2a587a1508ee570aa381514d95b8605749c9cdf2821abfedbc83e853151f7510c58d08e05ada5cfee90bf533db52861112481a3ae2e2ccf7e73b", 0xeb, 0xe5}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_NMI(r2, 0xae9a) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x98d, 0x7f}) write$P9_RWALK(r5, &(0x7f0000000280)={0x57, 0x6f, 0x1, {0x6, [{0x4, 0x1, 0x7}, {0x92, 0xfffffffe, 0x6}, {0x42, 0x2, 0x5}, {0x80, 0x0, 0x1000000000000}, {0x111, 0x1}, {0x84, 0x2, 0x8}]}}, 0x57) 15:04:16 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="dc2ac86d4b66732e66617400080441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0xffffffe1}], 0x0, 0x0) 15:04:16 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='exte\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:16 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = accept(r3, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x80) getpeername$netlink(r4, &(0x7f00000000c0), &(0x7f0000000100)=0xc) fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 15:04:17 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x02', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000700)={0x0, 0x3, 0x1ff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x0, 0xff1, 0x14a}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000580)=""/85, &(0x7f0000000600)=0x55) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @local, 0x1}}, 0x24) select(0x40, &(0x7f0000000780)={0x0, 0x9, 0x0, 0x0, 0x6, 0x8, 0x7a}, &(0x7f00000007c0)={0x7, 0xfffffffffffff1ab}, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x6, @broadcast}, 0x0, {0x2, 0x4e23, @multicast2}, 'bond0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x3c) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) write$cgroup_subtree(r5, &(0x7f0000000800)=ANY=[@ANYBLOB="6d70656d6f72a1b210e26f204572176d61202d72646d61202b706964735ae66d656d6f7279202b72646d00800000428c90b44388f4f6a3668f7a41409070153b2a0198b688a741df530afc369580e495e2a5d32aef1a8bb03f0783ba925a4d1be04e5f8adb447a6824094c9ea90c930394ceeb7e1c1b1fc225e04e57dd719add63f631fa8ac79dc4a7848a5fb4e67a9f5b77850929415af22c9023e023540e8369898eb14006001502b6fe1a820000000000000c5404d1c75594a300000000000050bfd36dcd00"/222], 0x34) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000080)={0x3, "8266b3"}, 0x4) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040), 0x2) chmod(&(0x7f00000001c0)='./file0\x00', 0x100) 15:04:17 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @multicast1}], 0x40) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@initdev}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000300)=0xfffffffffffffe35) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getpeername$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400080, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f0000000280)={{0x0, @broadcast, 0x4e20, 0x0, 'sed\x00', 0x0, 0x5, 0x26}, {@rand_addr=0x1, 0x4e22, 0x400f, 0x5, 0x3, 0xc34}}, 0x44) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r8, 0x800442d4, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffffc) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) r11 = accept4$inet(r10, &(0x7f00000004c0)={0x2, 0x0, @initdev}, &(0x7f0000000500)=0x10, 0x100000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1ff, 0x68452, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x244c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15:04:17 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x03', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@remote, @empty, @loopback, 0x0, 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@dev, @in6}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000000)={0x9, @random="df2e5dda272a"}) 15:04:17 executing program 1: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$rfkill(r3, &(0x7f0000000100)={0x6, 0x7, 0x3}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f00000000c0)={0xfffffffffffffffe, 0x100000001}) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000001c0)={0x0, @reserved}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="9b9e39ceb4419228f6be7ced74962d406b49f5264b20ad5f4e7c5edec8ebba45c5f7084fc30380399877bab285c44b442f49a4a4fe72ba4fa93d2c5d2714d950521681884a23679b4e9814230f06384eef9225c21392a91f275e79821437c54b5d77cdea491938f8d6a76cd817141279a3a7a76e27d555e9f78d5b90dfbc96f300233d00a5432133be09eeaf5fbd2ca1b91148e6d1d23886b5bb5148cc47c8b9446194739b2dc23ae4bf36ea6e92c0a41e6b6150f450dbe2df0a5b45b0ad5b4778b5f423429d93c131fac6aa1c0e0fd1b2ab85ea8148e9c06e239e7ce2082146d393d0f750b50e8752bab8f7fe7cd3bfe52fd4f20beb17b9b3ac9a35c01ae8a098bc178a7f1ed1e6cae68b67259e519e699552ca76ec66455a3642da0f3474a0288bbbfffa48eb601e4f03261f727d5adfca332e949f87d84d0b6d74993d3767e22d6fc143262969ff5a67ac749461a0b98576f1d7386dee8ae172daaf2cce53fced277a5d145b0c383432cc6d511eacb792a3e09017a43469746ab0787a57823e7a43b5445ed7b4a500d15b076d7ab76501412db144c690d522166953afaca82a627234aa68dbf25b5f6d682fef52dc284e7f0c80a5ab7bd044bf16cd7ef1d656ffc8f7a45e52734ab350a4496f572220a45f2a352563152b581204d8c199d6eead96d372d388295374ec07368c05f10a07e43c4eab5faac524e39090a08a29e51442f59edbc1f1566154da2d5fbcbaf33537ba1587312b04abadbe50c901b0a2fa4b5c9edd7e4ca01c1078e40a2d1dfc32484797e131817289b226077e24942aa1e6b7bb41f81986adefee3f7b188eee6ea64d01c687ff57fcb6bf5a5b0efc3ef2542a33696064ad07cee770dd6d399cf214739a0a73aa889613fab72897e4a3c0e167e411503dac2327ef75c3be86cbe31f4228fead81f1d15df970e0bdcccde78a8c5019df1428ea45266f8cfd9c3b502486c654870250d5e282a0f53ab053f539c926b89e81223d1cd62ae0f7957dfd6eefcdf9484901a6432f61df6357465da5046e5759221f1a0871c2046352e8369367a5ab5a3de5a4bdb94ffe464a529f7a806910e54369fc0f52235145a8944664374579bda0fcb2a7058788a63570e7587958a9486325cb56c9cd5f9bb45b28e5cda5889eec703e99f281065100b0cc2999fca569843b2b80b0a3db3d0ac4fe93f2a3d2fbacc621e2af08281bb04a05f8266bd3ad51e6e263db5eabfa779191bdcb1799aebb9aefe1dd1be57e95c557f20ebb866b92f98cbd326d358377aed6ef76076ce99d481997c02dad2aa1b33ba462685168addb587ed28dd180775243d861c4bd0869f59ac4f5523edffa8963cb829a2260c03782a150d4bea1f242f7d5cae0cbed07f68cee94508162360fc1b3b24ea4adee49d2014b9ddc97c959878b574934e72f4435835c216ead8eb55b6b3dd0819db69d530deca8a2da6e99d2acfa26158bb6872812ddd014279ca85d3e089697ed08534d56f074deabc6dad0118e9fbbbf74bc38d02e8b66368961f2fb58a02db2f1615d46cf7f86f75b07950977445c502fa81ebb11512d04231e06f332ce65c4510d1bfb100ec5e30fe582bf0eae9dfeb2fd93a1b3a5605b9c72ddee5ca896e54fd7ab68c6e849027ac70e9f89f0ed07dd1bacb3c5b092c9ad18958eaab800856f4b3807d73b453b190f5a88a629ef50bfa99118d82d9bcebf6aa76e0cca2421b671c48235d3bf787bed9dd6668c0ecce9574a7d59786ca344b2245fbadb31089a2b1d7c63570e082e1a2e03dcb0fb259ec0a7cc722c5ba964b0e314db7128490f1a8a5bf3e81f0ae8dfd9e231915884ee8b80d6ade2e3522e63d29bd2b3c496adf3a4ff3cbdc8a9a499164c0b01dee1efae977cb8d0d836f12480d47fe5f9ddde8fc4aa9233efb81fc0f45aa103fb6b97961e1696cec5d14afb811573872aa0b92bb871df6297d6996a823e38ac8b05c004b4208398b4fb53f63efb17b7f601237e535d6e134014b7c457aa93e54783568e709ee9cc3949b347f0a89b2f597143089c5d56a0ee9c8eabac88327cb3ac4c902ee710ff57f5861e0881f47ad74137a20d6d768427136050287286a578dfbca552a19e1a51553dd3dfab92edf7a0c676147dea8efbe3511ba19b6626c5cf51b3c3dda91182b0bb6abf916b2d18a801f73e795944add2fba88944d89979923faade80ad32c71a944cab5b7d54f218bc702cd0aa6c83d59526399c7c9da0cc8d3ae2384fbe20ffb8664dc89aafaecc2bc2b0e21a9467a19079b0d81eb4cd2922131221cb00e07d6d7b2b322b23a0b109eba40bbf38a9336a1da77c3b8813e028e23e9541f389337ef6a88bd4d09994590d5ba59462447bd52307cc9bd3766bbd5b4e81e9d54aca75aac0af4bc19739e4b3d4401d70c49551495068edf87f881a61c4adae84a512bb949fde56974005b9678c3ef6d5e266da08de162f92788a3ecb43c012d6dfc4853d3e841b1c8bc8b7680e188ae71dcb1c4c72699b7ff4d5bc7229d92e7c58a8fce7a94b5367ab341a8abb9a18ef4d9bbf16f266bb5b7ed852930f17a7f5126c3da317950ffcbb2f03032d14536daa4307312211e88b20db6f07ee8548170fc888ba85f378ada63af7aab7468f5ec64f19e76a297996d54c8cd38e220f753dcc51748d8b4946fddd43ad6e0609eb0bc95c475d5dc383a78e3c89c152eda28ad7973cb87a2f001ec1d4cce17a530a9d2ecd9443b38cb2b28943f18a13756c9935a056f887b295b055fa8206e1b5d88e6a8b6a0562b2462c2ecf03ca6b0ee2420f90d35fc3f0179838b4d2d3a310465b3f7c3ed2d78ae29c01096e8710d7aad0355c1804f6ce26939c089228b2d452ea9788dde8d26962a0e1562806f8e5c330d1130df40e98f5f037dd58cf807a1d19e654a96fdbc80613f8c54971cb9970e4d3bac798e7e0929db57a5f00859bcf0972bd65159d3a88dc78d556a4cb2ea4c2e817e7ddb4fee02ce7528484d81444fb61e32a55ec193d7cf8eeba876157120e82b9d879d557923fd644cb4de766bc483975dbb86525c3d93d87212d1c38d105a01508a3dab1b69b64ff69596bbe70781ffdd0d93418d0cdabfbb6043139730956941a5cde633b7fdd4bf4d4a5a8dd0e29ae502e163c7fbed3680da3d1e29556fbe5b79c308553f83519740e89a3b716ac2c384f9b4b03f8c01bf26814979a79d93524c9a7a82477f60f64131c721b26a65964e5a0c9459151f8571311881e1d5f42498c3493009b84952b682369a959821a6375e106177d0a99a2067e05202fd57bf387c672080ccd5f518768a17bd6bfdc99dec87a591ddb81be20125c7b938eb0fce930bac55094e0e46e2fb24c70df3489507934f3b5e8597c5eb3556cedf7488d76a853c5729782aa55a050a4adce99ac3e3431d56a916953e2f4dd792885dc8c71c762e0f2dd40b435808ae3140dd238198b66d2910b6bedefa283ce3901d982c451e2be0bc556b2fc948fffc3223dfe44d57438880cb1d917e31ae5aa609d3cdc775d395c0180d714acbdee5fb343421460b32de235bfdbc6fb2c2d8eade9e5b37f9b6ac4cc8cfc6dbb1e35c8466e79d856595aaebae79a7889890c51c6fc52eb97357a9a8cd3fe38c8ea1688a9c947ab3f7ac02f6b885f967606abb8ea55792765f99e5032dd6c4617c4605fab134ecb12a80f0a163be7625f1371b133d8e090adee0ef6256da971f46547121c6b99ce53935aa7a6bce6dc53f2e31d83ec2998e96e242b934129fcd8d06f5341a1b8693eaf66be37e0f476ee113478689631931fc7ce8be5f16ad97dc4e6ece5ebf22aab4f3f59c833e58064254ccc2cf5afed186b93b9e38fefc604e67e301d2b2f6fde8f5eb6fa80de1354a69e827cfbb6d49b68b30eccd8fec17e9f631f1f3b56a1013a3677e423aef44d7dc28e75bbe61dc6164f91e19f1846856ca54d8c7ec319cb506916c083912da62f288b5d61cb573b91d938f9aebb3f2067973500172b692717f44d039a77d01b5e40126e606678309273f649df96e9392d1c57e522a5157268f15e6b244581deb13d3a95d0ddf574371f06197a4f03d47b39170b97bd8059f3805fef7d81bbf91383a65565f8cd62542fdf3cd1240a46fd4b6537e7620a9e00ec2fc43547a702f9ff44ce35287fdc47bb331d89685c176ae7f3540174f90d78e4aa0ca4117d36f957759ce1d523e5719fd339aca21432b0952c01b64628210c217b1360eda21b70d37679aaa2d7c2a401f539a4d57e64f8536c1b283aeb0671d245781fbaf39ef7c7e9fcacac1e04e22d14b799592f7e3092d060add4728499a75afccf8ebbca53a5a6270f4315fc895b2e6c738025bda6f24ac95ca5a1cc7319e6ead3c69f590611f7d33cf3a2c66174f5cedaae238d09bef355b174c62b5e75a8b524a5911567bcca41cad525b0dd2dbdeb689200a0137984a90ea8334fcee5daeeb3f3d98ce0cc00145d8355b6d48e0d33eeb64aa5109c2c709c10374822839b679b679b10f1b635bbb10ec7043c511e0c317c5e6c6258ab571d013b27ec52d26f04ebc76f881c1bcc349122e81b6f0a18b61506e27d0b73e135b028b6401846902089f60716cd19182a4e2f974637b4bd3c5cc6728bc415173113e187286239d62d1ac3909870bc024cbb59b2d4fdb836e2f938b885e3add4efd7586e433bf6479c1abd54cbfcbfc50f9bedde17528be9ec9592a24883c2d1567e21a45a4055ae4a87d4cb5c286e45803141097f81e5bee894443ebd26313329ddf5ddfdd859197ccefba1509733ae3cce3bdc7bef5747ce6b2afebbb4494804e4a07519f4ed417c963830c89ed7e57466e3c42807df89a9f213402416cc173fc6ab6daa2291a7aabed1a9e6220a8cd71541cabb18cd7afe85a0c92c499b5861c68130f59bbc4351b25a10aa9dee7c3412757247f26b4cbe08c042a9a027b28ab5eb15697b5e879a720f1a662461d9d903137de6205417b52acff3527c05007a35ec308375fbea04e45fbf72cf924b40b0ef29435c80c23e89312e778cc5bd7746c9d1977f0a5c485f2f310ffa808faa12bdca0e1775a2e9b14c6deaf7fe750b38bcf9ff9366ecd78eb10376befc6d742e40c5a5507afa83c9ebcd1fc843977f6b37b3dcc4fa0579dc323b05a622dee048e2d70b1190f372ab4d2c3421f7e183af53d484d5ec26d689357ea361dc588c19e02ad1486160c1a154df221368338b153257de0ef1b24f484c19521cea080ae28d0de1a0f16c55ce4cda67d978bb019d419f3f64cef1208f9b0786f78a662e86775e5db38625d552536e8a2e46fd246861445821e01f409895a10fa9b48536df6cc0a476ae4c3ee41820b69294fee9114b35018188f07e503ac0aa8837b60e42392981a2812d676350c2181e26b04c7bd8dc7b15cb84ae06f9ba4a9358fa4f9a2ee541a197c1714e42ac3d83dbb63fd2c8fee254a7952cdfb8633b031028c33bd00330b450a2489e013cc78bd62e8155b56928de26a7144759833edbcb9053d91e0cb194fbdcffb194b71fb37b11b638b6251301592d0d2f001829f3e6077c708d6a2710bfd9bc692b7d02663333d7adbd3a6b27f6abe7966db0089159e865cc1fb1d8c4cdda4693870a3f844f14e6ffc08ae63bb96d3b51709d729a88b58a3d7abc8f96ac9c5d4b8e56bccf3f8e4acffc91524bf403bb0e821c0c6114ba63082d8a4c37aa8a1253d8bab8dbc0f34ce24d17e2351d580b108efe42c11f6c132adb064ecefc86761f1a670a46e1987d8f732ec43ee5d2e0c174fa5f079a5bc2", @ANYRESHEX=r6, @ANYBLOB="5cc0fcd30bdf40048b5eaf6b54782c9e5586a85e740c5ad716df717ef9c6a8a164314675d110039842d71cabb58bbbf0433c2ee3a4b29f4225247302c43d89a443de5a9dea102768f240396a8dfd8dfc96686e6ca23cfed4a7611773638be5217975d2638c784c28d9549c", @ANYBLOB="d2ca46b779ce8db06263305cc8d7cb9c762f2b19887da4be697c0b64dd11fe917cbc822592ca32b79828cba72afacdd9b3abb5a50feda42f75959fd0955f0b993ee9f9d35e6d2bd6a2e3cbd6d9ef2fb7d3a2732757eaf5d8bb7c200954ca1a6b1dc01c161127a05e94ac0f1ff4eed1e14b64bb24332f", @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR64, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYPTR]]], 0x1}}, 0x80) 15:04:17 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x04', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:17 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x3, 0x9, 0xfc, 0x1, 0x40, 0xab, 0x3, 0x44, 0x1, 0x9, 0x7f, 0x4, 0x5}, {0xcb6a, 0x7, 0x9, 0x3, 0x1, 0x81, 0x2, 0xfb, 0x6, 0x7, 0x9, 0x67, 0x2}, {0xff, 0xffff, 0x1, 0x0, 0x0, 0x9, 0x5, 0x1, 0xb3, 0x8, 0x8, 0x7f, 0x1}], 0x3}) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 15:04:18 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x05', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:18 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x06', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:18 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000700)={0x0, 0x3, 0x1ff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x0, 0xff1, 0x14a}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000580)=""/85, &(0x7f0000000600)=0x55) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @local, 0x1}}, 0x24) select(0x40, &(0x7f0000000780)={0x0, 0x9, 0x0, 0x0, 0x6, 0x8, 0x7a}, &(0x7f00000007c0)={0x7, 0xfffffffffffff1ab}, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x6, @broadcast}, 0x0, {0x2, 0x4e23, @multicast2}, 'bond0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x3c) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) write$cgroup_subtree(r5, &(0x7f0000000800)=ANY=[@ANYBLOB="6d70656d6f72a1b210e26f204572176d61202d72646d61202b706964735ae66d656d6f7279202b72646d00800000428c90b44388f4f6a3668f7a41409070153b2a0198b688a741df530afc369580e495e2a5d32aef1a8bb03f0783ba925a4d1be04e5f8adb447a6824094c9ea90c930394ceeb7e1c1b1fc225e04e57dd719add63f631fa8ac79dc4a7848a5fb4e67a9f5b77850929415af22c9023e023540e8369898eb14006001502b6fe1a820000000000000c5404d1c75594a300000000000050bfd36dcd00"/222], 0x34) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000080)={0x3, "8266b3"}, 0x4) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040), 0x2) chmod(&(0x7f00000001c0)='./file0\x00', 0x100) 15:04:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x290100, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0xa311bbda86302305, 0x100) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000300)=0x1, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') getsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 15:04:18 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\a', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:18 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0305602, &(0x7f0000001340)={0x0, 0x0, 0x0, [], 0x0}) 15:04:18 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r4], 0x2}, 0x1, 0xffffff7f0e000000, 0x0, 0x44040005}, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000080)={0x4, 0x2, @start={0x0, 0x1}}) 15:04:18 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x8) open(0x0, 0x882, 0x10) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000064c0), 0x3fffdb8, 0x2, 0x0) 15:04:18 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\b', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:19 executing program 4: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8983, &(0x7f0000000180)={'\x06\x00\x00\x00ge0\x00\x00\x01\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0) dup(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000040), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001800120008000800010000000000200000000000", @ANYRES32=r7], 0x88}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000105000020000000000002000000", @ANYRES32=r7, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', r7}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) write$P9_RLINK(r2, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) bind$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000100)) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x100800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 15:04:19 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\t', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c2f70000fdd37d5cc32b926355290010000000000000000000"], 0xff86) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/64) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000240)="e0a53fa3a15a9adbd43e4bface72684699f8408c57595cbe912cd30e1cc2cd3cd9c21043096ba7511694365ff4c7a682ba7a42b7f4063a7a06b3474bd032bcfeb352cef8121a916eeb72d040a88f8cc4238b98cdd04b08c2b0b0d7363b6e79076ead1b8eb3613f7f1a642ac581b4308a0fb8f2aa50449628362a6ab27ec9d6be53b9c3d34a9adfccd127c8de305725a00072dd0a4b1971b1f0a45eccbb589d297e62e1c89069c254ac42") r5 = dup2(0xffffffffffffffff, r3) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, r5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@loopback, @in6=@ipv4={[], [], @empty}}}, {{@in=@empty}, 0x0, @in=@loopback}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x80008c00, 0x0) [ 747.415245] net_ratelimit: 22 callbacks suppressed [ 747.415252] protocol 88fb is buggy, dev hsr_slave_0 [ 747.425367] protocol 88fb is buggy, dev hsr_slave_1 [ 747.444920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 747.624738] selinux_nlmsg_perm: 5 callbacks suppressed [ 747.624761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=22702 comm=syz-executor.2 [ 747.656878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=22702 comm=syz-executor.2 15:04:19 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\n', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 747.711198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=22702 comm=syz-executor.2 [ 747.766557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=22702 comm=syz-executor.2 [ 747.791867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=22702 comm=syz-executor.2 [ 747.814590] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=22702 comm=syz-executor.2 [ 747.843518] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=22702 comm=syz-executor.2 [ 747.870425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=22702 comm=syz-executor.2 [ 747.958086] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=22702 comm=syz-executor.2 15:04:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f00000000c0)=0x80000000, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x32dafc21}], 0x1, 0x0) dup3(r2, r3, 0x100000) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r4, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) read(r5, &(0x7f0000000000)=""/129, 0x81) read(r5, &(0x7f00000001c0)=""/145, 0x91) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='jfs\x00', 0xf78fd1e750561463, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r6 = memfd_create(&(0x7f00000002c0)='system.snckprotoname\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r6, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000100)={0x3, @null, 0xee00}) write$binfmt_misc(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="34c775820c3d249844e0fde460fc4ef1be01f58dff6aa640797ea9ed66a4f8fdeaef0ad9dfbe93fc6bccc58a45983021e94740e06994342c64dd8165ebea25878bfddcb23aff02a78a8da2560890b8f323579e28943ebcb8ff2137a52dc71c80e3c56001709c67a1ec8cb09597ca220c00"/128], 0x80) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000400)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 15:04:19 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\f', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 748.039371] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=22702 comm=syz-executor.2 [ 748.055229] protocol 88fb is buggy, dev hsr_slave_0 [ 748.060453] protocol 88fb is buggy, dev hsr_slave_1 [ 748.186140] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 748.243939] IPv4: Oversized IP packet from 127.0.0.1 15:04:20 executing program 2: syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f00000000c0)="4c5b66d18b958db53e9eaba970c962290cd64b8e543576efa6b997220a6b25480f07b619700dea58dd19acfed3f5563381656d86e9846ea054bc8f5dd937f41b08fc49891606c91546d90054fa5a2ddaf15a9376f6ab829529f2bc4e0d042ede811b696f79e612ec213e17192174589dec", 0x71) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x1a001b00, 0x297ef) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001880)='cgroup.type\x00', 0x2, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x1ff, 0x200800) socket$inet6(0xa, 0x40000080806, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7ff, 0x101000) syz_open_dev$radio(0x0, 0x2, 0x2) r3 = syz_open_dev$midi(&(0x7f0000000140)='/\x80Lv/\xc4\xeai#\x00', 0x6, 0x0) r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc08c5334, &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={0x0, r5, 0x0, 0xd, &(0x7f0000000780)='\x82#$\'wlan0self}user-)+em1\x00'}, 0xfd95) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000280), &(0x7f0000000340)=0x4) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000400)={0xa, 0x4}, 0xc) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x70, 0x0, 0x7, 0x9, 0x7, 0x0, 0x2, 0x1414, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, @perf_config_ext={0xfff, 0x7fffffff}, 0x1020, 0xd7b, 0xfff, 0xe, 0xff, 0xff, 0x2}, r3, 0x8, r5, 0xd) syz_open_dev$usbfs(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x40000000000}, 0x0, &(0x7f0000000240)={0x1ff}, &(0x7f0000000000), 0x0) 15:04:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f00000003c0)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') close(r1) syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f000001a3c0)) close(r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) recvfrom$rxrpc(r5, &(0x7f00000193c0)=""/4096, 0x1000, 0x120c3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x24) 15:04:20 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\"', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:20 executing program 4: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8983, &(0x7f0000000180)={'\x06\x00\x00\x00ge0\x00\x00\x01\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nbd(0x0) dup(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000040), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001800120008000800010000000000200000000000", @ANYRES32=r7], 0x88}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000105000020000000000002000000", @ANYRES32=r7, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', r7}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) write$P9_RLINK(r2, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000)) bind$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000100)) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x100800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) [ 748.615228] protocol 88fb is buggy, dev hsr_slave_0 [ 748.620451] protocol 88fb is buggy, dev hsr_slave_1 [ 748.634823] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 749.185256] protocol 88fb is buggy, dev hsr_slave_0 [ 749.190433] protocol 88fb is buggy, dev hsr_slave_1 [ 749.335285] protocol 88fb is buggy, dev hsr_slave_0 15:04:22 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x1f}, 0xfffffffd, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ff}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58eb16f88b9663da5668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfaab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7de6e38d2d29be9a5adffffff7f00000000428958b132e07900"], 0x10}}, 0x0) mq_open(&(0x7f0000000100)='md5sum]\'&system\x00', 0x800, 0x15, &(0x7f0000000180)={0x4, 0x7e3, 0x9, 0x100000000, 0x5, 0x100000000, 0x80, 0x100}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 15:04:22 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4#', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040)=0x7fff, 0x4) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) 15:04:22 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000100)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x1f}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x2, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58eb16f88b9663da5668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfaab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7de6e38d2d29be9a5adffffff7f00000000428958b132e07900"], 0x10}}, 0x0) 15:04:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x80000000, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000000280)={r7, 0x10000}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_XDP={0x0, 0x2b, [@IFLA_XDP_FLAGS]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0x8, r3, 0x0, 0x0, 0x1}}, 0x20) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000280)=0x1, 0x4) r7 = fcntl$dupfd(r0, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40000, 0x0) dup2(r9, r8) 15:04:23 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4,', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009140), 0x400000000000247, 0x0, 0x0) 15:04:23 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4-', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:23 executing program 0: syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x219) sched_setaffinity(0x0, 0xffad, &(0x7f0000000c40)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = dup(0xffffffffffffffff) r2 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r2, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) wait4(r3, 0x0, 0x40000000, 0x0) r4 = getpgid(r3) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r9 = fcntl$dupfd(r7, 0x0, r8) r10 = gettid() ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r10}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r12, 0x0, 0x0) r13 = getpgrp(0x0) waitid(0x0, r13, &(0x7f00000002c0), 0x8, 0x0) r14 = getpgid(r13) r15 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000000)=0x0) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz0\x00', 0x200002, 0x0) r18 = openat$cgroup_ro(r17, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r19 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r20 = inotify_init1(0x0) r21 = gettid() fcntl$setown(r20, 0x8, r21) r22 = getpid() r23 = socket(0xa, 0x3, 0x8) r24 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r23, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r24, &(0x7f0000000080)={0x0, 0xfffffffffffffe90, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r23, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r26 = gettid() waitid(0x2, r26, &(0x7f0000000040), 0x20000000, &(0x7f0000000480)) sendmsg$key(r23, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r25, @ANYRESDEC=r26]], 0xfffffffffffffe56}}, 0x20004850) r27 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r28 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r29 = dup2(r28, r27) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r29, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r29, 0xc08c5334, &(0x7f0000000200)) r30 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r30) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r30}, 0x0) kcmp(r30, r30, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r30, 0x0, 0x0) r31 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r30, r31, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r32}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r26, r29, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r32}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r32}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r32}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r22, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r32}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r32}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r21, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r32}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r19, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r32}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r18, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r32}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r16, r15, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r32}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r14, r12, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r32}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r32}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r11, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r32}, 0x30) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r33, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r6, r33, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r32}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r32}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r5, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)='*\x00\x00\x00/Ppp\x00', r32}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, r1, 0x0, 0x3, &(0x7f0000000100)=',)\x00', r32}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r32}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x0, 0x6, &(0x7f0000000140)='*proc\x00', r32}, 0x30) get_robust_list(r34, &(0x7f00000003c0)=&(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)}}, &(0x7f0000000400)=0x18) r35 = socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r36, 0x407, 0x0) write(r36, &(0x7f0000000340), 0x41395527) getpeername$netrom(r36, &(0x7f00000000c0)={{}, [@rose, @bcast, @netrom, @rose, @default, @remote, @rose, @bcast]}, &(0x7f0000000000)=0x48) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r37, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x0, r38}], {0x10, 0x6}}, 0x2c, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:04:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)) 15:04:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 15:04:23 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, 0x0}, 0x20) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xfe2d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0xa) fcntl$getownex(r1, 0x10, &(0x7f0000000240)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000400), 0x0) getpid() ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x40000000, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x85cc1539145b582f, &(0x7f0000000040)={0x1, 0x0, 0x1f}) fcntl$lock(r2, 0x7, &(0x7f0000000080)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup3(r3, r2, 0x0) 15:04:23 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4H', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:23 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000002400070500000000000000000000000043724a9a65d55f148bc3d016f313312d38ae7ce6f54b4721665b67cf6ab1dcdf6fe7a03b3178a4bf74a413848f6f184d26ab72a01037666a7aa6e972c5f70d25da", @ANYRES32=r4, @ANYBLOB="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"], 0x60}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 15:04:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="fffffffff8ff0180c200000086dd60b4090000303a00fe8003000000000000000000000000bbff0200000000000000000000000000018000907800090400600000000000000000000000000000000000000000000020fe80000000000000009751512e0000aa"], 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$netlink(r2, &(0x7f0000000200)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfd, 0x21800}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000400)={0x174, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x118, 0x30, [@generic="8387c29c14e2732d730aad42527dfd4c4a30992bb556e1c68ffb79664df73e6700ecd0bbabffef879561c975e6485d9f692d9dcce866f29298f120ec68b3669e4e638f1cc82d8ac82f5331903e7fe4117d18d8b24a6f76175ab7dd4b25f6e32fb8db26ab8d45bb96d0cc3be8e885029a48f6fbe6669f080823a07900535b8d6f6ae8887b860808a3647b31a72c6bb9a35bb0f8c874d2028018e5ffa50b34847925197b8144f6bf3e0a59290cab1a55", @typed={0x4, 0x35}, @generic="0b78be6fa400815627bfaf700ca2a6d9b0736714ba18e77efffe28aabdc13d684f181f82e548d31d21d7e89d81cd3c058f803ba15f2135e6f6d6bd8c7ece3f1e211e3330a6c10bdb511e7864b1c27ebe1f0344cb45584e6bbf03ade04d4cf6ddb8"]}, @typed={0x14, 0x84, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @typed={0x8, 0x3f, @u32=0xa7}, @typed={0x4, 0x20}, @generic="063f5056207918e792a81abed8cfe8c20b84b8c8e9a882130d4e0b5d728b986c058c15803833f77462030b95"]}, 0x174}, {&(0x7f0000000d40)={0x1b4, 0x3d, 0xc08, 0x70bd2c, 0x25dfdbfb, "", [@generic="946bf8e8065f446d9140b8e2adea", @generic="d228b38e0da5a10942941c8c13499528098e59826777321cf32a5b1b2da6ba59f78ef022c6ef33eb9cc3f5be703873362f9e0d19cbe02d1e0aed90a0a099aac88dddfa7d99d46b554bf0c35a064f02ca74bfb71e7b0c319f3e232f1a86ae5a353ffdf206703054c8f27513da766d305106965b10ba17d31e3991a2647d9b52a119dbc6ec99050000006dfd1c53ecac3925513006401346dd1a0d861360d626e04b000097b82f9f269e647d5d54e4fce09c6aa300"/195, @typed={0x58, 0x15, @binary="96d2fa3900beb9ab6d2ef9ab4c515abe0fec055ddc8ac613f3355c8b1405b2c7002a4de60f56b452f49fff64da9c4a84c4bf82d7d30679e63be432e7fbf864d40a9bdc4bfdfb2ded25d917355a6a678693600a"}, @nested={0x78, 0x31, [@typed={0x68, 0x60, @binary="298d5e85acc6b0c651843b50c1f894085978f2c021a3f4ef76f62ba4a38b8aee11c2bb36afdefa718f447e545e9ed4253e7cc779dcd7b161453985848489cf03b50572a319c3ae8c8205b11d4d906ed8b910f6cb555ed29dcb6238d11d7d819ed71d"}, @typed={0xc, 0x62, @u64=0xa9f2}]}]}, 0x1b4}, {&(0x7f0000000700)={0x348, 0x10, 0x100, 0x70bd26, 0x25dfdbfe, "", [@generic="f6829e723a3e9aa903f22873854f64bc2371ab675fa9c13592b5f4196c31657bb748801824b1021d3cce0b08a2a7cf1f625ef45f39f453ffbddee25d67066b050bc829c8bcfc6e36426b104d12e31a42c09508ba9ef6ef11ffdbf1e928dd0d884647b085ef832d1103a78c11a855d5cb29afca3f55c81aaaa19959344c47b6390bac", @typed={0x4, 0x62}, @nested={0x4, 0x4a}, @nested={0x20c, 0x33, [@generic="7ba028d083a71acbe298c25bd035b5be52aed1a6f7513725fd044986e4fa15f1a8e1897ab63ff3fcd64a413cfe0805699b6e69c800853bdf45078f1bd4ee7f688a019aaad80b107b081e3be9e2d4c1c54756beb5b06e38e84d2701444560af52b8d1e00955b889e5f7129c1952d2f9b02d452eb0d3520f104fca4ea7a235f146e20b712ba04f4a46a44cc81a920b4058eb6b3997d1777ebb6ce8f863d56e110e06f000b99f753b73701fca8a4a788ea1c13c03cc48", @generic, @generic="b0e076e1066dd2a60c191da14648ecaf3b0ff78ae65b976b48df79cded50be4cc9b500501bd794624bb0ae758372b2751b080814781822e8b2c5b8265ea73e312d6bda9097ca54a07976d34e6100c1075e736f4b2b0b7f221e53211a550a7d42c64df9a83b0eb76bf417a3b996cfbf39dc3bd8", @typed={0xe0, 0x70, @binary="677e0b0a11a8106a8ecb27f5e574d398064dfab74ce76ff607a57202d4cd7777557e54f222d4a861997e4bb829d6de3d39001f3649d72fc6592650053d796924249fc1dfe3a1060310585f9d9165d86a75f040fb6a3e8e98447dd741bb1efdc96e1a05844c1d2f643775e8bdcd41e7a6927bc72a2bb601ea6ca00e2a02e789f611921bf5272920db2ba82eaab864ec738a7fd9986a9c156fe497d1b3fb3d4811fa802aa6e961179af0f0067942c1f63d9e9036207cb62c7f711c5074419adc6cb770554b2b7c55a6eee5a4585df37011e42289edbe93392168"}]}, @generic="588c84b9cb4ccb0c3b74bf9a4ea520ec14060408cf0a454b53baff824b429e38a957347673527473275f2c5477e2cf3f12fc7249a38b2a0a6ae33d2d4e88a5f31a97b35e4716c5ef6dc78798c78a4d8dceb6663ad226b30ab175827a0791d082de27da28c31dfb3427f2b9b8411066440214c4ab6122a7c6487e106fcc11de9a7dd66c688549dfc064f43f28431d88e7bcc43d39b251efc7499474ee19e8e420a51b"]}, 0x348}, {&(0x7f0000000b00)={0x20c, 0x24, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x174, 0x5, [@generic="102c8d8c6afed5cc5131c2688535afa9eea073fe482f82a72d3910918ce8b2baa7f702e8e4ededb9587237aa10c8d973e3c2c5986af32c65df2e826919e8a07933f4da4356f2970b2ae22d1eeeda65c551d2840a96672b4e61cdfcf114bb1b09aa917c5b88eb3f8114063c9bf59eba3aa3760f65bba13537dda7c45bf3551b58bbbdbb86101b7946aa", @typed={0x4c, 0x70, @binary="c02cee6f1f348919aee71405fff60fb64aff16f90547be5cb0ee2c296c2cb96e59e99e3bf306c30e516f73b57f012ba7d4eb46ceb61f5cb5343b93b80644119bf2f60e6c64a1"}, @generic="58a2e90a0d254dacaae10844c79611791d1fc5d04348b6ac5880a7eb9d8ca39371a42b5b281e0a6ce5ec0571c5a23af869f82b3111d9882e3904c7197f35c61d553b6a679e2afe316c14cd473b937471a9cb3a12f80f0d0ec8e501a1e16274b44dfd629b5d0307099b4977ff35655631b273b41f802db80a31fc1be9a761afd0a263e109", @typed={0x14, 0x55, @ipv6=@remote}]}, @generic="c11ae7c7860541e670faaa95f8e90ecc1fc600fc244fdb56a0291f67b480d9d4240788c7c185da139450d806c06ee6e103b2466b7316454277300e58dde14d255b677a721d6ee29f77f9c84459bbcefa91b85476979cac873726e1e7205ac2afb78a7a6f6ef22f6cb2d11b43ed131b6e0db96b11f5861e6cfd9f3de77f36d1ad1bc0e53f35170765"]}, 0x20c}], 0x4, &(0x7f00000001c0), 0x0, 0x800}, 0x14000000) r3 = syz_open_procfs(r1, &(0x7f00000000c0)='fd/3\x00') ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @rand_addr=0x5}, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @multicast1}, 0x20, 0x0, 0x0, 0x0, 0xfe00, &(0x7f00000001c0)='irlan0\x00', 0x2, 0x8000, 0x1}) [ 752.275800] audit: type=1400 audit(1574348664.046:316): avc: denied { create } for pid=22832 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 752.313253] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 15:04:24 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xb) recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400}) [ 752.389856] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. 15:04:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @rand_addr="00007f2ed4c59d432c00"}, 0x1c) r2 = dup(r1) r3 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='selinux\x00', 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000300)={r3, 0x31, 0x63}, &(0x7f0000000340)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f00000003c0)="4f074e8f8632db406abf0f41ba7e61eab794ed8c84434c192299d7cd3334f5c383e19504275a0e8273dec8e112e5b9a969", &(0x7f0000000480)=""/99) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r4, 0x2007fff) r6 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r4, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) [ 752.450641] audit: type=1800 audit(1574348664.246:317): pid=22852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16553 res=0 15:04:24 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x20000}, 0x1c) 15:04:24 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4L', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x14}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x70) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x16184b4e18aa5ee6) write(r0, &(0x7f0000000140)="22000000e8037c4e47d7b1ccff652186979f580700f417e512b87cba48c1cb65d145", 0x22) 15:04:24 executing program 1: write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000180)=""/154, &(0x7f0000000240)=0x9a) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0), 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x3}) mlockall(0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000340)={0x3f, 0x9, 0xc, 0x7, 0x3, 0x81}) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x9) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 15:04:24 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4`', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 752.750785] selinux_nlmsg_perm: 6 callbacks suppressed [ 752.750803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pig=22884 comm=syz-executor.4 [ 752.775556] net_ratelimit: 19 callbacks suppressed [ 752.775565] protocol 88fb is buggy, dev hsr_slave_0 [ 752.785762] protocol 88fb is buggy, dev hsr_slave_1 15:04:24 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) ppoll(&(0x7f0000000100)=[{r0, 0xa767061958494ee6}, {r3, 0x80}, {r4, 0x21}], 0x3, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={0x6}, 0x8) r5 = socket$inet6(0xa, 0x801, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)="6cfdba28371b8b81425333afca5a74a025bf816d2378f6cb6ac4aac515468d03a69f6384eee8e6175539866a3dc5a5ac64fce726560edd2d0bcf0a18326d0c80ff1bc26723a5543e22fb713b6c6aa7eede6394ff160e1bf83dfa110f2b06b28e38f69a622f3c9ab6788775dc2db6b19e3d5987b6b988429f812cc0527eef8c6263b0161458", 0x85, r1}, 0x68) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000040)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1000", 0x60, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "a4d069633774a5a45d5891ae72ccb822"}, @exp_fastopen={0xfe, 0x9, 0xf989, "ce5c2e2a04"}, @generic={0x0, 0x12, "4bb45a090b242970ea52a72af517753a"}, @sack={0x5, 0x6, [0x0]}, @md5sig={0x13, 0x12, "434ebfb68faf3fc770f99822a748b41e"}]}}}}}}}}, 0x0) 15:04:24 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4h', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 752.960884] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:04:24 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4l', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x2, 0x43) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$inet6(r1, 0x0, &(0x7f0000000000), 0x1800) 15:04:25 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/204, 0xcc}, {&(0x7f00000001c0)=""/186, 0xba}, {&(0x7f0000000280)=""/55, 0x37}, {&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f00000003c0)=""/49, 0x31}, {&(0x7f0000000400)=""/221, 0xdd}], 0x6, &(0x7f0000000580)=""/199, 0xc7}, 0xffff8000}, {{&(0x7f0000000680)=@ll, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)=""/28, 0x1c}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4, 0x4}, {&(0x7f0000001780)=""/55, 0x37}, {&(0x7f00000017c0)=""/64, 0x40}, {&(0x7f0000001800)=""/164, 0xa4}, {&(0x7f00000018c0)=""/7, 0x7}, {&(0x7f0000001900)=""/209, 0xd1}], 0x8, &(0x7f0000001a80)=""/9, 0x9}, 0x8}], 0x2, 0x2, 0x0) r1 = open(&(0x7f0000001b40)='./file0\x00', 0x400400, 0x20) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000001b80)=0x80) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000001bc0)) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000001c00)={0x3, 0x2, {0x51, 0x4, 0x800, {0x0, 0x4}, {0x4, 0x9}, @rumble={0x0, 0xc1}}, {0x52, 0x4c, 0x3, {0x400, 0x7}, {0x9, 0x83}, @const={0x5, {0xa70, 0x9, 0x9, 0x2}}}}) r4 = request_key(&(0x7f0000001c80)='ceph\x00', &(0x7f0000001cc0)={'syz', 0x0}, &(0x7f0000001d00)='^posix_acl_accessbdev@\x00', 0xfffffffffffffffd) stat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, 0xee01, r5) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) lsetxattr$security_ima(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)='security.ima\x00', &(0x7f0000001e80)=@v1={0x2, "ae3caedf"}, 0x5, 0x2) ioctl$UI_DEV_DESTROY(r1, 0x5502) rt_sigreturn() r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/sequencer2\x00', 0x80100, 0x0) accept4$rose(r7, &(0x7f0000001f00)=@full={0xb, @dev, @bcast, 0x0, [@rose, @netrom, @bcast, @default]}, &(0x7f0000001f40)=0x40, 0x100000) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000001f80), &(0x7f0000001fc0)=0x8) r8 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002000)) ioctl$sock_ax25_SIOCDELRT(r8, 0x890c, &(0x7f0000002040)={@default, @bcast, 0x1, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r9 = getuid() ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f00000020c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r9}) r10 = syz_open_dev$cec(&(0x7f0000002100)='/dev/cec#\x00', 0x0, 0x2) setsockopt$bt_l2cap_L2CAP_CONNINFO(r10, 0x6, 0x2, &(0x7f0000002140)={0x0, 0x1, 0x17, 0xc8}, 0x6) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000002180)='/dev/audio\x00', 0x1b2a3a7d17dd988d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000002200)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) r13 = creat(&(0x7f0000002280)='./file1\x00', 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r11, &(0x7f00000022c0)={0x12, 0x10, 0xfa00, {&(0x7f00000021c0), r12, r13}}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000002300)={0x8, 0x566, 0x4, 0x5b, 0x2, 0x4}) [ 753.335278] protocol 88fb is buggy, dev hsr_slave_0 [ 753.340420] protocol 88fb is buggy, dev hsr_slave_1 15:04:25 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4t', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 753.486165] audit: type=1800 audit(1574348665.286:318): pid=22885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16551 res=0 [ 753.515250] protocol 88fb is buggy, dev hsr_slave_0 [ 753.520418] protocol 88fb is buggy, dev hsr_slave_1 15:04:25 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000080)='/dC#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x10, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000700000000000008000600000000000800030000000000"], 0x24}, 0x1, 0x6c}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) ioctl$TIOCPKT(r4, 0x80004506, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000240)) process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/21, 0xffffffffffffffd4}], 0x1, 0x0, 0xb545d2b8f48b4de7, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fsync(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgrou\x03\x00\x00\x00at\x00', 0x26e1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000540)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r8, 0x1}}, 0x18) 15:04:25 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000052c0)=ANY=[@ANYBLOB="7365737369566e3d30783f3030303030303030800000003030302c00"]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$isdn(r2, &(0x7f0000000180)={0x22, 0x82, 0x1f, 0x5}, 0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r3, &(0x7f0000000240)="5dc6bd97e08f0ba83e0bcf099573517a8db08ae6ce621bf9f196555cddba042ed3c219b9c6502d09b3dd419dafd24abdbebd37d7826122e661456b832a9429c0a202188a4bd0597b0343d0db8a2409d14d4570e938e9f81c7eecb3806a4cf790b239d13d36b81e03d2c69c7c47", 0x6d) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x3cc75a4d6710785b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffa91e, @mcast2, 0x20}, {0xa, 0x4e20, 0x3, @mcast1, 0x9}, r5}}, 0x48) 15:04:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x80, 0x0) fcntl$dupfd(r5, 0x605, r1) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000280)={0x4, 0x4, 0x0, [{0x9, 0x2, 0x9, 0x1f, 0x9, 0x3f, 0x88}, {0xdf, 0x4, 0xa1e, 0x81, 0x81, 0x9, 0x4}, {0x10001, 0x184, 0x1, 0x40, 0x1, 0x4, 0x81}, {0x100000001, 0x7, 0x0, 0x1c, 0xff, 0x5, 0x20}]}) r6 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYPTR, @ANYBLOB="30d0fd9df3067627c960ed125422a5f1272ff396dc64c1a36b01ef0e91", @ANYRESHEX=0x0, @ANYRESDEC=r7, @ANYRES16=r8, @ANYRES32]) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) syz_emit_ethernet(0x23f, &(0x7f0000000480)={@local, @empty, [], {@ipv6={0x86dd, {0x1, 0x6, "af0207", 0x209, 0x0, 0x3f, @dev={0xfe, 0x80, [], 0x25}, @ipv4={[], [], @empty}, {[@srh={0x3b, 0xe, 0x4, 0x7, 0x80, 0x40, 0x8, [@mcast2, @rand_addr="0b273dd3374677eea41d6ef76c48b0dc", @mcast2, @dev={0xfe, 0x80, [], 0x25}, @remote, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}]}], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, [{0x2bbeb94517dc27da, 0x7, "6c9b69ba2fb7a612665bee02024984f71d1f2374b524600fbe324d6bbb6952b61d882ff817b6505c739315ee4b6507b842d498e23857afb205"}, {0x4, 0x8, "b9e38a4765ef88dafcc73bc43e8272030ce63300dbac90116e23bafa2451b32fc7f03054d635b08527c51bf0bc8b9011717015d5967f190b1c6d6e78361a144b4fbccf"}, {0xa997fff4be15c17f, 0x11, "b8d058d27170e83c34d0c68c5d007a01d0c271e1341b1aa74a6e46068987dba02e452526a793ef7775cda5b8984b76039a0e3930f48beaf3f66155b07bd08ce8cdf01cf5a73c00557f5004ba14e3ea4a7ad8c7e815aa45a8bf6dbbd1a074a1c8b21884e820c58ec8cadc5db39605bd41362f234c42d2fb805f393c3e76196090b1707f12dbbd"}, {0x42842f4fa85306fe, 0x0, '!'}, {0x1, 0xb, "6ab0c7892c781873627b320b10fae3a460bd0d24a8170e151b940ea9ef3be297b7e15badbdc0a42f05636e5833a21509eccdee88d0562f6520a5d34fb1ca252af4c83e7b1caf7017de329a355a0e12afab51a713566338db4745fdb4"}]}}}}}}, &(0x7f0000000100)={0x0, 0x1, [0x718, 0x92d, 0xc63, 0x9a4]}) [ 753.575225] protocol 88fb is buggy, dev hsr_slave_0 [ 753.580489] protocol 88fb is buggy, dev hsr_slave_1 [ 753.627870] hfs: unable to parse mount options [ 753.655308] protocol 88fb is buggy, dev hsr_slave_0 15:04:25 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4z', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @rand_addr="00007f2ed4c59d432c00"}, 0x1c) r2 = dup(r1) r3 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='selinux\x00', 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000300)={r3, 0x31, 0x63}, &(0x7f0000000340)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f00000003c0)="4f074e8f8632db406abf0f41ba7e61eab794ed8c84434c192299d7cd3334f5c383e19504275a0e8273dec8e112e5b9a969", &(0x7f0000000480)=""/99) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r4, 0x2007fff) r6 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r4, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) 15:04:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x11) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) openat$cgroup_int(r1, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$ax25(r3, 0x0, &(0x7f0000000280), 0x80400) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x40000, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0xc) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) r5 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x0, 0x200) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xa34) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) r6 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x4, 0x10c01) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000240)=0xfffffffffffffe4f) 15:04:25 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\xe4', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 753.989715] audit: type=1800 audit(1574348665.786:319): pid=22964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16561 res=0 15:04:25 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='\x93rus\x90ed.o\'\x02rlaOorigi\x83\b\x00', 0x0, 0x0, 0x0) 15:04:26 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(0x0, 0x149142, 0x0) ftruncate(r2, 0x88001) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x30f}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(0x0, 0x0, 0x182) r5 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:04:26 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:26 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) 15:04:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = open$dir(0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x2) sendfile(0xffffffffffffffff, r1, 0x0, 0x7fffffa7) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 754.540571] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 754.573779] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 754.614248] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 754.664700] audit: type=1800 audit(1574348666.456:320): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16552 res=0 [ 754.688586] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 756.973277] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.980117] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.815236] net_ratelimit: 23 callbacks suppressed [ 757.815245] protocol 88fb is buggy, dev hsr_slave_0 [ 757.825617] protocol 88fb is buggy, dev hsr_slave_1 [ 758.455215] protocol 88fb is buggy, dev hsr_slave_0 [ 758.460364] protocol 88fb is buggy, dev hsr_slave_1 [ 759.015244] protocol 88fb is buggy, dev hsr_slave_0 [ 759.020527] protocol 88fb is buggy, dev hsr_slave_1 [ 759.575222] protocol 88fb is buggy, dev hsr_slave_0 [ 759.580355] protocol 88fb is buggy, dev hsr_slave_1 [ 759.735252] protocol 88fb is buggy, dev hsr_slave_0 [ 759.740397] protocol 88fb is buggy, dev hsr_slave_1 15:04:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) execveat(r2, &(0x7f0000000100)='./bus\x00', &(0x7f0000000300)=[&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', &(0x7f00000002c0)='vboxnet1cgroup$#{@\x00'], &(0x7f0000000480)=[&(0x7f0000000340)='**\x00', &(0x7f0000000380)='!abdev{}@&/wlan1[\x00', &(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', &(0x7f0000000400)='em0vboxnet1\xd9#\'\x00'], 0x400) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r4, 0x2007fff) r6 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r3, r4, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:33 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 15:04:33 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') shmget$private(0x0, 0x8000, 0x800, &(0x7f0000ff5000/0x8000)=nil) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) waitid$P_PIDFD(0x3, r2, &(0x7f00000004c0), 0x0, &(0x7f0000000540)) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="7261770000000000000000002ad36fac000000000200000000000000000000000000f0ff0300000000000000000000ea5550df861284c750ca5ae145cf57f19b2459f4942f29df0116d5297ce3ceb74c3279d27759a93ea7fd8a487ef80aa1cabba05895554f20a66fe103809891"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000cab000)=0xc) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x80000000) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e280000001100ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:04:33 executing program 1: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaae04, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0xfe72, 0x400}], 0x1, 0x0) 15:04:33 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x10', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x2, 0x297ef) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) openat$cgroup(r3, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280), 0x12) socketpair(0x10, 0x0, 0x1, &(0x7f0000000040)) [ 761.469903] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 761.489285] EXT4-fs (loop1): Unsupported encryption level 178 15:04:33 executing program 2: r0 = eventfd(0x6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000100)={0x0, r0}) 15:04:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000ac0)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0) [ 761.537562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 15:04:33 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\x01\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\xe4B\xcf\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef\xf2P\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f\xf4\x10\xdc\x89j\xbb\xb4\r\xe6\xb7\xad\xfai\xc7@\xd7%\x8dSQ\xc6\x9c\xf7|\a\xae\x8f\xd2\xa9/\xb7)u\x9f_ac\xdf is\xbb\x93\xdc\xcfs/\xd3\xbeN\x98%\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\xb4]X\xba(\xfa\xe4\xd6\x82b\xa4\xb8~\xb0\xd9\xaf\xf0[+\"b\x9e}\x93\xf1CZ\"W\x0eB\x9bOI\xc4}[\xcc\xbf\xa2\x0f\xa8\x0f\xec\xa3\x87( \x99\xb0?4\xb9wH\xcf\xe9\x18x\xb4\x96\xbbyG\x96P\x8e\n.\x12@\xb5\xce\xfa0\x15`\xf6n\xbd\x1b\xc4b\xa6%\x82\xd3~\x18Q\xee6\x1bH?h\x14F\xca\xeejX\xed\x9fi\xb5\xbc\xb8\xca\xa1\xb1Z\xc4\xf6U\xfd:\xa7m\xd4\xd8eFr0\xa9;s\x0f\xb1Pz\x81x\xa4\xbc\xb2\xf5e\xae\xac;7Y\xf2N\xcc\xb8\xdb\xe4\x89\x8c\v\x8d\x93y\xda\x8a\xedVv\xb2\x89\xe3\x84V)HP7\xfb\xa8\xb7&\x1b\xba\x8a\xe5F\x02\xc2\x0e\xde\xa1{\xff8B3\x1a\a\xf2\x04-\x18\xe8|@\x9e\xee\x1b\xa3b#l\xf8RO\xc2\x9c\x16\x81\xbf\x8d\xb7\"\xc0\xd7\x80\x84&\xe3\x92\t3\xd7\x85\xe1\a\xefM\xbb\xf0\xf8d6\xa4\x19\x00'/444, 0x2761, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000000c0)="04"}, 0x20) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020662a, 0x0) 15:04:33 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:04:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) [ 761.978764] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 762.031741] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 762.043370] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 762.069477] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) timerfd_create(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0xfffffffffffffd9c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:04:34 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="5424c8002ca158821dde108e4a2eb4f098788404c5638bd6a26daaf5c9058c51630b240fb901ae6850ba2738c0afb503f14d4021a35439b99373a0b982ed18e2380644812ea5fd72a37b0a09399a4941929f3c11e6d4d3a07225a7597d5d213fa3d4c870d9079c83a9cd6a8f84d606cb306a2f0d6674505319d0484b23e0ef06236dc1b125dd0b435a55dd6a1e4cdddfd6116ad41ad4f2a187", 0x99}, {&(0x7f0000000600)="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", 0x1000}], 0x2, &(0x7f0000000280)=[{0xe0, 0x10e, 0x8, "cd6fbc72262103a0491c9b38b9efbd5d5d9f29c2acb31360c29d351d5c31e9686372890b801bd5987abcfc265e6fbe118cf0ca890ec6160606633f8f49b1c4d3f044b34be771250d9825cb6bde6875807fc8e09c37f2ae1ef76a66a3a31a737afe362a28c79a493e46fa90e132df8e107a7c0a3564f7f09ba35caa506ccd6054d839ec317fea123118125ff194b7ad97ecf001e7da5759f19dc6e3998881e95baaa69e11b7ad5f723e7b3c8762c5b1dd6653bc6104bffcd51fefbf990334ca61ec5717fe2671a8c34bd148a62e8eaa60"}, {0xa0, 0x6, 0x1ff, "a68a79f89f5ae0e5a4bcebc63e2dbec0e4a8e3ea59d58bf5dee8626ec40d6b87708382faeca83c0402a8e4c148cfbbcb8eb53a70f683b38e51de08005e624c5f11dcb3488e4b108195f04fab62ed88c8b923cec449dc26f009a9fecbabdc08a5d2fd7fd4b98f1bd5dc869ea96471ef54a8ab539e844834d02961d78dc6e496ac8ee54f1b8dc2c82d14857c5825"}], 0x180}, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)='E', 0x1}], 0x1}, 0x40854) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 15:04:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 15:04:34 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:34 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) recvmsg$kcm(r0, &(0x7f00000006c0)={&(0x7f0000000280)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/43, 0x2b}, {&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000004c0)=""/166, 0xa6}], 0x7, &(0x7f0000000600)=""/140, 0x8c}, 0x10000) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r2, &(0x7f0000000000), 0x1c) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r4, 0x2007fff) r6 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r3, r4, 0x0, 0x8000fffffffe) r7 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000100)='o', 0x1, r7) keyctl$revoke(0x3, r7) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) geteuid() mount$9p_tcp(&(0x7f0000000040)='-27.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000200)={'trans=tcp,', {'port'}}) 15:04:34 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e21}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r0, r1, 0x0, 0x80000003) 15:04:34 executing program 0: r0 = gettid() mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000b82000)) mbind(&(0x7f0000289000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x2) [ 762.394602] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 762.426738] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:04:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x7ff, 0x80400001}, 0x14) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) writev(r1, &(0x7f00000003c0), 0x63) [ 762.495316] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 762.519981] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 762.520974] 9pnet: p9_fd_create_tcp (23113): problem connecting socket to -27.0.0.1 15:04:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000200)={'trans=t%p,', {'port', 0x3d, 0xa}}) 15:04:34 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='\x00z\xbd', 0x0, 0x0) 15:04:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800dd8d000000000000400002000000f3fffd030000000d0800050033072bb1afc66194e6b39b2c1126e061314ef5905546f5e8da16ec4538c93e75b84ad6cf3315703fb10c680213064651fe0f9c23af2fae28db6386032d301e595bbd6ae875d528f6c800000000000000", @ANYRES32], 0x24}}, 0x0) [ 762.639577] 9pnet: Could not find request transport: t%p [ 762.641050] 9pnet: p9_fd_create_tcp (23124): problem connecting socket to -27.0.0.1 [ 762.673264] 9pnet: Could not find request transport: t%p 15:04:34 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2}}}}, 0x0) 15:04:34 executing program 4: 15:04:34 executing program 2: [ 762.934173] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 762.983212] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 763.017394] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 763.037812] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 763.151969] device bridge_slave_1 left promiscuous mode [ 763.164947] bridge0: port 2(bridge_slave_1) entered disabled state 15:04:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000480)=ANY=[@ANYBLOB="40000000040000000000000019d593bcd07a56ff1d63a3d1b70cfe2775d00e919ca84bc118f8fdf073310086a52823dcd14614fd6c50f1bfdf3fffe9d7bafa9ac916e39986b8583781c13dbdb30235b31f68a7a3cb7eb3f607f34442c681cdeb2f55684a8d1f84e5dde94b97c8abf6b8adc510cf1cab78b5132899d7ba173e97319a7404"]) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x8, @win={{0x2, 0x1, 0x5, 0x9}, 0x3, 0x7fffffff, &(0x7f00000002c0)={{0x101, 0x80000001, 0x80000000}, &(0x7f0000000280)={{0x0, 0x40, 0x1, 0x7ff}, &(0x7f0000000100)={{0x9, 0xfaf, 0x25}}}}, 0x7176, &(0x7f0000000300)="947942636cc67263a764bb2c1b", 0x8}}) 15:04:35 executing program 4: 15:04:35 executing program 1: 15:04:35 executing program 2: 15:04:35 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 763.210822] device bridge_slave_0 left promiscuous mode [ 763.227991] bridge0: port 1(bridge_slave_0) entered disabled state 15:04:35 executing program 4: 15:04:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x2) sendfile(0xffffffffffffffff, r2, 0x0, 0x7fffffa7) r3 = open(0x0, 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffa7) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0xfd88, 0x800) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, &(0x7f0000000540)) io_submit(0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x11, 0x0, 0x0) 15:04:35 executing program 2: [ 763.441727] device hsr_slave_1 left promiscuous mode [ 763.522992] device hsr_slave_0 left promiscuous mode [ 763.568184] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 763.600468] team0 (unregistering): Port device team_slave_1 removed [ 763.612051] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 763.638468] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 763.678742] team0 (unregistering): Port device team_slave_0 removed [ 763.686069] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 763.723770] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 763.735421] net_ratelimit: 16 callbacks suppressed [ 763.735450] protocol 88fb is buggy, dev hsr_slave_0 [ 763.745618] protocol 88fb is buggy, dev hsr_slave_1 [ 763.800740] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 763.895277] protocol 88fb is buggy, dev hsr_slave_0 [ 763.900436] protocol 88fb is buggy, dev hsr_slave_1 [ 763.920699] bond0 (unregistering): Released all slaves [ 763.975258] protocol 88fb is buggy, dev hsr_slave_0 [ 763.980448] protocol 88fb is buggy, dev hsr_slave_1 [ 764.050591] audit: type=1800 audit(1574348675.846:321): pid=23175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16633 res=0 [ 764.072723] protocol 88fb is buggy, dev hsr_slave_0 [ 764.072778] protocol 88fb is buggy, dev hsr_slave_1 [ 764.695309] protocol 88fb is buggy, dev hsr_slave_0 [ 764.700486] protocol 88fb is buggy, dev hsr_slave_1 [ 765.327465] IPVS: ftp: loaded support on port[0] = 21 [ 765.391545] chnl_net:caif_netlink_parms(): no params data found [ 765.426124] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.432734] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.439929] device bridge_slave_0 entered promiscuous mode [ 765.447390] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.453798] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.461069] device bridge_slave_1 entered promiscuous mode [ 765.475903] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 765.484988] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 765.503118] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 765.510744] team0: Port device team_slave_0 added [ 765.517162] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 765.524424] team0: Port device team_slave_1 added [ 765.530119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 765.537711] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 765.588320] device hsr_slave_0 entered promiscuous mode [ 765.625556] device hsr_slave_1 entered promiscuous mode [ 765.665989] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 765.673336] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 765.690481] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.696917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.703514] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.709918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.744950] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 765.752490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.761582] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 765.771413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 765.778929] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.796188] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.803815] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 765.814493] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 765.821063] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.831301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 765.839040] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.845539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.857142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 765.864739] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.871226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.887660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 765.896132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 765.906653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 765.920301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 765.930408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 765.940951] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 765.947421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 765.962237] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 765.970320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 765.977596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 765.988686] 8021q: adding VLAN 0 to HW filter on device batadv0 15:04:37 executing program 0: 15:04:37 executing program 4: 15:04:37 executing program 2: 15:04:37 executing program 1: 15:04:37 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:37 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000001d80)="0ef94b7566e22857e96c5ab8fa5d9a6c2af0891fd8a152bbcdc899e2331aa405035db81d045042fdd9c29b92752a5b4056eedffa09f50c9e6a324355a2d6e7a99ced225f42c0a64d96b7721ab4117ae05276959eececb971c8daf63a1866ec93b4e1deb633fcc759a83b669b05da9594ad68f63ceecd88e2c287", 0x7a}, {&(0x7f0000000500)="74d82b15568d403512ef17abe31a43dba3bc673c193bf9d8f33cf78bc15e84d52f733d81394798cc983d52ff04ef09f9bfdeed44b9dc3e654a5a800bf71ed889424d47534da92e91b849dbaab07b0359ff98318443b3c07a1132417d274916b26bf819ad81a8027623f94f77d53cf0f8b2446514e82b3a724f942a465489ba9e4af1fd53f1bd3de3d912", 0x8a}, {&(0x7f0000001e00)="09f1bef274b845e58925a3441a18746fbb784c8c97f4678385b0f9ddfa94957f1015dae49c64e2a93a07828e7df62d5d8cad4cac5abf42cbbad2c02ed06a45a9dc259372689fe29017cd8feb14a4d7ecd103b3b210c7dfbfc41acd433a83041cd9c194ca4545873c247be79ea8b91e452771c2e1b4aad1183315e37ce122c13c0cb1309c85274fbe79e0caeabb4021f774a18a19243f432531be5a18308da94aa4bf944bcd991c44c28fea3ade25901cb2febd34b88db2b98805ed75770f5ac58c56a9c2633f1672396412e4eea4e4968051fc43684831e8cbc38168ffec904669", 0xe1}, {&(0x7f0000000640)="c9e8c679b32ee0d3e1140d0214ae5a0821d24f60d71b19a0545507398ba5d7c81dbc15a19cee4733f36b539ba3b4451c2cf4506781daef47fff2e098c6ed40868ef5b9cf7888fd22303fbbfa2937fc435fca2d17aedb1e578be72b3d319644a49682311a2c09341332b0e13057009097b9232954bbf9e16627b2efe61f8f8db14f3c853570b6f634b66548fdd246aaa8854ebb8007fb8384e357a0dd7cf15ec757ed2a", 0xa3}, {&(0x7f0000000700)="8e590291fa3b0d78c57c511886ef050103dcb2769d996af27c1b526db83b4393dc1a7b256a5b8ac444096702c7b317a271f97f4f83882ab3975b39a777fe024e8c84dc39c6093d2057547eff269f6e511c6fc1ac5b3c45a2ed71b6b0943bfe7a732dbfbbcf645fdeeb2b709281a9adced3e6d63ecd2a0764f158e1bf3d82a42dbdf088fef2f55bebe7976e6b52cd14b6a259add3bdca3041a032d69ebd2b5dbcf3553392a6c2777d203c4ee79df535138ed861c4ec23f1652649cc428db56e36659230b7fd82ca71cc5794ae2e153570e5d8cf9aedfa6b51d883d3b0aeeab340ce10d96534292db75b26eea23b8a257a", 0xf0}, {&(0x7f0000000400)}, {&(0x7f0000000800)="da", 0x1}, {&(0x7f0000000840)="030559b29ee085c5d12baaee86ab8317113298dbcb5f498df133163deecdf3d7ae9395ae381bb36fd5cb241e416c68a014a1e58e77348c8f5fe13a5286c537949e92481c3cd140bcea7ca275456797716e85cee007f40d7ef9947fac9263c49b6f9773965ae79ea907b513dfc1f59cca6c4b45144c135458ca239d789f67617aa967c0df355b1a8040968199e5da2520284b05e65ec9c02f5827e0830d287ad3ac12423e9f1869546975b37d8f4b0fe46d59a2da041f50bd9b781ae35be720ea241461512416e670ec6ec701d24b6e471c1ca265d087d6b9e838f08827a139e913aa4fca037da4d843223590afb16e057824182fc5", 0xf5}, {&(0x7f0000000940)="03bafdfa166d3dea1ca871b313239ce0f5ce9ed339d6550cc0311c088dbc3810adfd68db84cb501a99424dc5e400727b3ed3646e3e7e65acfad7e851a71a82db22c5b143adce1db8dc9ad755446e6842f5a7de0d99316ebce259125017bf5624138b591f66a42eef5e99d52bd0964d0f0ff3d08c2458df16b4f68679975ec35020a44e7dd23e11ee37248689a8292ed07e357f273de370c87c701ad881a7549acfc41eab4d7d355fc7a04a0835ea4e9c681e311ea4647df9d2d2b2b190bb872b01c5b1f8207cbdc5950295a15578", 0xce}], 0x9, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f0000001d40)={&(0x7f0000000b00), 0x80, &(0x7f0000000400)=[{&(0x7f0000000b80)=""/102, 0x66}, {&(0x7f0000000c00)=""/129, 0x81}, {&(0x7f0000000cc0)=""/82, 0x52}], 0x3, &(0x7f0000000d40)=""/4096, 0x1000}, 0x102) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r5, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}}, 0x30}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000003c0)) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa100c01}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r5, 0x99b1561325c66be0, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x96f, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}}, 0x6040010) r6 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r6, &(0x7f0000000000), 0x1c) r7 = dup(r6) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r9, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r8, 0x2007fff) r10 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r10, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r7, r8, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000e20100e7ffffffff1a0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:37 executing program 4: 15:04:37 executing program 2: 15:04:37 executing program 1: 15:04:38 executing program 0: 15:04:38 executing program 2: 15:04:38 executing program 0: [ 766.260245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 766.274726] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:04:38 executing program 1: 15:04:38 executing program 4: [ 766.334208] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:04:38 executing program 0: 15:04:38 executing program 1: [ 766.395667] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 766.433726] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:38 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 766.689844] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 766.699922] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 766.709176] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 766.730381] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:38 executing program 4: 15:04:38 executing program 2: 15:04:38 executing program 0: 15:04:38 executing program 1: 15:04:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000080)) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r6 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010000108305376a98ce5cc9b0d40fc11e5bb97a5167cebfa40c75f7e7cb1e23451a9461154", @ANYRES32=0x0, @ANYBLOB="000004000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:38 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x04', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:38 executing program 2: 15:04:38 executing program 4: 15:04:38 executing program 0: 15:04:38 executing program 1: [ 767.120904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 15:04:38 executing program 1: 15:04:39 executing program 4: 15:04:39 executing program 2: 15:04:39 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext47', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:39 executing program 0: 15:04:39 executing program 1: 15:04:39 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x6628, 0x0) 15:04:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200006) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000005, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_buf(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000002c0), 0x10) open(0x0, 0x0, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4000, 0x10, 0xffffffffffffffff, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x4}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000680)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x4000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00', 0x10}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x4000000) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x4e21, 0x0, @mcast1}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x0, 0x100000001, 0x0, 0x1]}, 0x5c) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000006c0)={0x3, 0x0, {0x0, 0x3f, 0x80000088a, {0x40, 0x7}, {0x0, 0x40000000080}, @const={0x7, {0x5, 0x9, 0x0, 0x8001}}}, {0x0, 0x8, 0x4, {0x10000, 0x4}, {0x7, 0xfffffffffffffffe}, @const={0x6728, {0x3, 0x7f92, 0x9, 0x677}}}}) 15:04:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4004ae99, &(0x7f0000000140)={{0x4}}) dup2(r3, r2) 15:04:39 executing program 1: clone(0x8000100000203, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000004c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200010a) close(r0) socket(0xa, 0x1, 0x0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x841, 0x0) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1/file0\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 15:04:39 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext48', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 767.866331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 767.880429] audit: type=1800 audit(1574348679.676:322): pid=23259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16520 res=0 15:04:39 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r2, &(0x7f0000000000), 0x1c) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r4, 0x2007fff) r6 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r3, r4, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r11, @ANYBLOB="00000000000000001840120008000100767469000c00020008000100a595512b7c6ff810c2c673caaf05a9253e08e2a164e32352f6b5f9586bbf0e7f54baa365500bcda2068cc6f7bc9725207a10944ca391434e5c59c2724c9c417ad7bf43783915b118fc5d306b6b98b05caa49fd65c368dbcb71172b8af648a97c3dd9cd88fbea3e49de7a57fbf952f25b8e1a8da1049b792daa35c7151b2fb17b9d8ea2b5b5d0bcc3ba38376c3ffd1448114fe73557d2147045e9ee2ae6b227c21a33deb14e65a0c662a6d894971ba4aca495bf9159e68f17e56bee3f6ba3d4d4251e", @ANYRES32=r11], 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000014000105000020000000000202000000", @ANYRESHEX=r0, @ANYBLOB="08000200e0000001"], 0x3}}, 0xcbdf17ee41c4c74c) socket$netlink(0x10, 0x3, 0x3) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @dev}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) r14 = openat$null(0xffffffffffffff9c, &(0x7f0000000780)='/dev/null\x00', 0x90a00, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@gettfilter={0x70, 0x2e, 0x598bfb58ae242a50, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xa}, {0xa, 0x7ff9}, {0xe}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}, {0x8}, {0x8}, {0x8, 0xb, 0xf3c}, {0x8, 0xb, 0x20}, {0x8, 0xb, 0x2}, {0x8}, {0x8, 0xb, 0x1f}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', r11}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@bridge_setlink={0xc4, 0x13, 0x480, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r15, 0x2208, 0x5ee6bcf07b8ca3a8}, [@IFLA_MTU={0x8, 0xe, 0xaf}, @IFLA_PORT_SELF={0x9c, 0x19, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8295bd1b6042e428607f6a24764e1c04"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "42be04ce072992371eaf48d0055881f1"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "782122189d7f73a16986f772fc375b24"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9b5119abe3d1eef0d8c332f3a1b88bd6"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ad6ab7118743a8a17b12c43aadfdb301"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8d0fa2bd6f19374446ad1421abcaaf9"}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x40}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:39 executing program 1: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self//exe\x00', 0x3, 0x0) r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200800) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/128, 0x80) 15:04:39 executing program 4: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) syz_open_procfs(0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000400)='./file0\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) keyctl$setperm(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x44000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff81, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 15:04:39 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, &(0x7f0000000000)=ANY=[@ANYBLOB="4fda466274a7d938c6888f79cd"]) 15:04:40 executing program 1: pipe(&(0x7f0000000200)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) r1 = syz_open_procfs(0x0, 0x0) write$P9_RUNLINKAT(r1, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140)) prctl$PR_GET_SECCOMP(0x15) close(r0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$dmmidi(0x0, 0x1f, 0x400200) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000480)={0x4, &(0x7f0000000340)=[{0x0, 0x0, 0x2d}, {0x1ff, 0x2, 0x0, 0xeb8}, {0x0, 0x80, 0x0, 0x2}, {0x0, 0xff, 0x80, 0x3a400}]}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x63713bbb0b02c4a0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00(\xb6u\x86S\xca\xe6\x12n\xa1\x80u\xba|\xb8\xeaI\xcd\x88,\xaa\tE\x10x\xfc\xf6\xbc\x93\x8a\x05\x00\x00\x00\x02rI\xe2\xd5\xc7\xdbl+\x8d\x9da\xd8\x87') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) dup3(r5, r4, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) r6 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x50009404, &(0x7f0000000100)) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000300)={0x0, @local}, &(0x7f0000000380)=0xc) sendmsg$can_raw(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x1d, r7}, 0x10, &(0x7f00000004c0)={&(0x7f0000000400)=@canfd={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "9c7428c11d4a6985768e2d160f82cd8e8ddf09cb9fb68d72445bf8d496e923f7c32980b8c8e27cac58c19732d1ba962f23103f83ca27be784bc5041a4447a15d"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40842) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) [ 768.281877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:04:40 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x100, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x8}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0xcc0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$LOOP_CLR_FD(r1, 0x4c01) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x800000007, 0x8001, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x3c) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x10000) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], 0x1}) syz_open_dev$vcsn(0x0, 0x5, 0x20080) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000280)={0x0, 0x70, 0x1, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3f}, 0x6102, 0x0, 0x1, 0x0, 0x0, 0x1}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES32]) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x140, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) fchown(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) [ 768.348186] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 768.398820] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 768.417438] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 768.432042] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 768.463592] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:40 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:40 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000027f00000410000002e1d7ca58c843c805efd70742d4056fc03d41ce93093", @ANYRES32=r1, @ANYRES64=r2], 0x1c}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r5, 0x0, 0x6, &(0x7f00000000c0)='wlan1\x00', 0xffffffffffffffff}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x0) [ 768.606104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 768.613107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 768.623970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 768.632472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 768.667920] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 768.678479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 768.714970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 15:04:40 executing program 2: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = semget$private(0x0, 0x1, 0x0) semop(r1, &(0x7f0000000100), 0x2d) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000000)=0x2000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) [ 768.773775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 15:04:40 executing program 4: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) syz_open_procfs(0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000400)='./file0\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) keyctl$setperm(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x44000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff81, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 768.855246] net_ratelimit: 27 callbacks suppressed [ 768.855254] protocol 88fb is buggy, dev hsr_slave_0 [ 768.865554] protocol 88fb is buggy, dev hsr_slave_1 [ 768.893806] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 768.942679] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 769.000174] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 769.031803] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 769.043808] netlink: 'syz-executor.4': attribute type 16 has an invalid length. 15:04:40 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 769.214386] audit: type=1800 audit(1574348681.006:323): pid=23328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16511 res=0 [ 769.266705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 769.274893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 769.289001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 769.523819] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 769.589256] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 769.643335] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 769.674577] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 769.680360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:04:41 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000016c0)={@dev={0xfe, 0x80, [], 0x2b}, 0x26, r1}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r3, &(0x7f0000000000), 0x1c) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r5, 0x2007fff) r7 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r7, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r4, r5, 0x0, 0x8000fffffffe) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:41 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xfffffffffffffffa) sendto$netrom(r0, &(0x7f0000000000)="c2da64c7a8f8abc0df2392e9d1e32af69d1ddd18becdfba122881911ee6bb0159e6cf16f5a0585816454752c2264a9e9ab133e6054189c5b4f806fb0e14e2214febeb8a9a62fedd5fef43acfdb1256155c99559a98", 0x55, 0x4, &(0x7f0000000080)={{0x3, @bcast, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000140)={0x25, "4bbe4d5645836e3908220f59ed7b8f33f416cf0627b0b422b7f2606f516ea5c28b97b40582905c4105ad361f7846207ae8358e3a49d05745fa8835735f79c13d0400a7fc55c7b14f18ec3704bf67c1989e9add65e84d149b6f39cdffcfb58ac6aa78e1dba44c66406f9288e4acd35fd679cd16fd617880cac41f62883f7c9dc3"}) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000200)={0x75}) setxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x1, @mcast1}}, 0x2c, 0x4, 0x6, 0x0, 0x44}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xae}}, 0x40, 0x2}, &(0x7f00000004c0)=0x90) syz_mount_image$vfat(&(0x7f0000000500)='vfat\x00', &(0x7f0000000540)='./file0/file0\x00', 0x1, 0x9, &(0x7f0000000bc0)=[{&(0x7f0000000580)="3d3808aea846d3e56141beb5487e2859db272ca06f45b6134b151fd992526dc826899697bfd84df98fd5d32cfea65a5dfefb2839da751b6ba78f7cc1b50ecd618cdc332f2a6ef58316d08894720e3899e5bf7e09f676168933e0c2a34b7a210e978ca82ae58286f88b2d54f3882287fa366b20b83778984d9d3666f9c588ea5967ae3f045bca8acaa182cda2b753e2f51292030ef3ab7140e6880c80377fef4720ef50d74d7adacf440407ed77c03c40f23d93da77779767b399edc8e323ef6ec2551ca327e9bd698fce57b80c03bd01f2a0a1d68100d8f20d4efba5e6", 0xdd, 0xfffffffffffffffb}, {&(0x7f0000000680)="c9cbe726eb0470a99bea9be378115ee33b95ba441d078db36fa946e88c97ac67a03e47ef85b49813c24019afb2733eb800f0ffe46c5d34512f2e9e13cf648e5b9964972fc513dd62896e525321bbf7a9754b9ef1296f", 0x56, 0x7}, {&(0x7f0000000700)="7e9673e3982ac4940b0cf5aa249d68b48ce752e16056f3673f2e56fda5ec9f684fda4bfb234ca9ac26e21d33afaf48e15dff6fdf0bbb6ceaa615308c222ff68b33d1084f", 0x44, 0x5}, {&(0x7f0000000780)="6322c8be4ffb539fcb0458ca7038586962ccc4d0b6df6a4e633df925935c6c57b04c06458167d1a111993d578481a4b1efcf1506210d1b4eb4dcdd0d16e5b8e91e5b2d7a8a3ff6de03b108e229d10cab92c0447602f55de1e3eb196a4726b0dd5a2de425161fa4db92f313b7a4f174a760690248682cae91844636fc4c2106eb38601a399517638cb8723fa3066f2f3b03", 0x91, 0x8000}, {&(0x7f0000000840)="397509ed1c517780988b8c7a1a1ae26a38fe431f2d584d8b97419c0638d4ba1339b7aadeea69e157e0e84a4f857f203abfecb1159939fd8861d67062352d25c7c298b11d88ad7f578114cb08be20010e6f62c885b9358bfcd539df781cd8bdd99a904017a5bc8bea212a1ec50e4724bb0c60cf1f53365fc5afa4f17f25c2954f1a295205aa66a1fcb2834fc0d5e064ec71dae736a7e678bfe392eeab4c53270a246aab7809c738ea058027da4494e6027a1374", 0xb3, 0x10000}, {&(0x7f0000000900)="9ac168ce528bb0cc89608e87d2d67a10e8085224d2a277c85e2fcda14dd376ed6c1eb5613818bf926935e4a15b3fdb42a32529ebfacfea150429daa7226f56383e4c4a21020dfabe7c32f904ba16ab461707fe2dc18770aed331e3caf26622edd1e4e6ca912302b4c8c843e96f1053fbea7369745857be38925a12273f6c80f7b626bd672a44a04a295c79173713", 0x8e, 0x6}, {&(0x7f00000009c0)="2ef5e56eb8db1d6a50785a635885983d3576a6e843a3de4ff7f4d62292245bcac3ff3b81ef21329e65a9b538f1df4f80a16bdc14fd5afd2d6331d8d10723eb428269815ca80c8e9c1ad32a0bd004b1951d01ca54db962708c4f0ee1b2c5ee3760f10c1a996e968e191b3f8e294f8b655d8b19ca20d649b3612d60d2e66c5c198c3c30836eb2c525889b5e45f4b454c4965fee41f0f7bd3e7ce3a478f7eb8f2b9bd9964435904faa77d4df791", 0xac, 0x7}, {&(0x7f0000000a80)="fe23840721adae4c1742fe52042cde076a0ef33d7bbd0c0827faf3179808ae218c2e5ec7ef0986c6c963d8f9823515775c29314631d83d028c6ebaa071a478c423caba2d61d584e4836f98fc0b31b4d0862c24ef21a8a851d455ea5799b51c1237e53874a9f6ca927546c2bd978154a3ff36cf3b1fecfd2caadca65d1274a1eaa46246011be9b52e35582c9e3b31b604151286bbd39ec56606f6cee583f39ff12edb00", 0xa3, 0x20}, {&(0x7f0000000b40)="145da3bbffdfd86b60e73d0cc7d805f873b626b67d34800b92ff57c23f064f051624f804d301d214402791fcd0c3b5dfebebc86d6fd7e8ded6a74a8bc5c438b727319ca6cb97ce5e66d57a879bb788dd5d6535a22b7c430a7acf57928b775b7d1a6e215fe4d29b47e2da3b490e7f1050ddb4f867", 0x74, 0x3}], 0x21000, &(0x7f0000000cc0)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@uni_xlate='uni_xlate=1'}, {@rodir='rodir'}, {@nonumtail='nnonumtail=1'}], [{@pcr={'pcr', 0x3d, 0x1}}, {@smackfsdef={'smackfsdef', 0x3d, 'trusted.overlay.opaque\x00'}}]}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000d40)="0a06ef30027f31de06cceebf59d283abde0a64f0431aaf2bdbcbe49c775b1153e199351d6c421f3e4b73e7e8a01451feb4d1ac3344b78a866e9ce06c55f2c057e3db7ce0608f29becf1d4de09c241b7a1479d80daa0af96bdd1ac286eacfa61ca98a038bfea3be276255bd5f9eeb33cfbc73f1a8a59f671e703bb58fb31e55cfa682000d022dff007771006303f3aff762546c25167b6684f9aad1", 0x9b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000001180)=[{{&(0x7f0000000e00)={0xa, 0x4e21, 0x7, @rand_addr="842eb056cb0bc36c486ed159b9e86aaf", 0x2}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000e40)="4bef4fc9d92c4156c7682bb8f4ef1bcc2db77bd5ae87719c727fceaaa60bd8b13a710bd204ab392abc54c624feb99f7204938a4b0425042e2095c7e80e5a3ff6bcad9c13d416ba4dea1cb48c2bf01ea1e19f356191ae004f559389f61191469d885016887574565bb4c2a32d96d0feffe4eb5cf28063dbeeefcc8897ac020d857e4b66776f2235877bb530318b0ff3e37fa262a8", 0x94}, {&(0x7f0000000f00)="ad8c3d9dfe2e02c1cddedd146081683c454846445d5d960aeca18307266aeae8e0bd90015d86161f88e9d29e3dd7065ad2d933ea01469b00160908ec1b3c1c633a3d8a2b79e3fbd059cd1fbd60638a6db8f20eb61324a414b9207724f3f00740778945d54ecfdec53f5daef9ebb5b82e64b32d94dd0e2c063b73229699559ef1790eee99c75fc087e92b948cf55c493ffa7acfe4044dd1881bbbb5416265902395a7d7c2e883e38c3abae76dc69512a5157ffd4abf507553d6bcd0a26909e491d913a42c84987b4aee4d7c06", 0xcc}, {&(0x7f0000001000)="2dc56066d55175bdd2102b0e5e31699c2ab110241e5da984cd70dc81a36ab5b1316c89fad278c8af813e6485175437c9f4b9325abf9422cf2aa20e5a6e47452493dd006dd7d31b9a45e10c2a50fb48227c8d43fd17f191a24d95730f1fe892bfdda937a16c7d3de7a54946b8f0ec1d742b754deeacc3", 0x76}, {&(0x7f0000001080)="f981e722afa226ec0956e7152e05e29e8e8130757bbf0275a187ae82a8bbca447bd890b2d983a426964630c7d65bd20cc440d420f94eb8abdd5c1581010225a86cc06ccc68efb0686647e31795b8e02146bf4eeb4f8b0f43daf9663d0ce386e66d3f58e4089c8c145145fda2ceabf02cfa0b13a0563045e6e6bd949e07eea30a9ec50b9a7c964a3a58413f5d2174b34878a5c851b4b4c5139f452e117b5d4e6f0d8236e163dd", 0xa6}], 0x4}}], 0x1, 0x4900) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000011c0)='./file0/file0\x00', &(0x7f0000001200)={0xf3, 0x0, "8540700b4244bcfff54573e8718a64e8656238cd3222b3c5709f7d3150e62aaec190a13281cf02a04c6dadcd75c03818804a6c2494ac30600e53fba72b7d1f38d302d3259ce390d0e66ed47947f4e54331c6af7d6c9590f6e3fb47bee7cc0cdf3fc6b7e5fee0b71cc46c85e327488d4dec7b5bf597de12f800a88a85104617c79c033bb274ad88088553eba6f1725dfa90893aef657daf4fdaf9c736e8b07a62b0f74006e4644cd50fdd039e961b4c72ac703089a904ff550e5eaa99145272ac34f5df7dc15ca5ef1a87c44847db07bce1fb9d730d31beadfef3bf8d6f2a325f4de5692bc3c39946f30138"}, &(0x7f0000001300), 0x400) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000001380), &(0x7f0000001400)=0x6e) splice(r1, &(0x7f0000001340)=0xfff, r5, &(0x7f0000001440)=0x2, 0xfffffffffffffffb, 0x4) r6 = creat(&(0x7f0000001480)='./file0/file0\x00', 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000014c0)="8f017db4243ab7517dda37c7473901c7", 0x10) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000002640)={0x1, 0x1, &(0x7f0000001500)=""/4096, &(0x7f0000002500)=""/30, &(0x7f0000002540)=""/222, 0xd000}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002680)='/dev/dsp\x00', 0x10000, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000026c0)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000002700)={0x4, 0x2, @start={0x6}}) write$binfmt_script(r7, &(0x7f0000002780)={'#! ', './file0', [{0x20, 'trusted'}, {0x20, '/nodevposix_acl_access]security#'}, {0x20, 'wlan0user-'}], 0xa, "5e70bf9d03415cc1f88149bd41cdb9f4ad3616e63452a983a8cc36d208527e6c60956abe2c9d8fc55ac75da8"}, 0x6b) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002800)='/dev/vcs\x00', 0xe67cb56d840c7082, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000002840)={0x0, 0x8, 0x10}, &(0x7f0000002880)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f00000028c0)={r9, @in={{0x2, 0x4e23, @remote}}}, 0x84) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002980)='net/ip6_tables_matches\x00') ioctl$TCSBRK(r10, 0x5409, 0xffffffffffff0000) socket$inet6_tcp(0xa, 0x1, 0x0) 15:04:41 executing program 4: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) syz_open_procfs(0x0, 0x0) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000400)='./file0\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) keyctl$setperm(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x44000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff81, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x10, 0x6}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 15:04:41 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 769.841762] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 769.879802] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 769.975230] protocol 88fb is buggy, dev hsr_slave_0 [ 769.980442] protocol 88fb is buggy, dev hsr_slave_1 [ 770.064328] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 770.072703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 770.108350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 770.109559] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 770.135233] protocol 88fb is buggy, dev hsr_slave_0 [ 770.140391] protocol 88fb is buggy, dev hsr_slave_1 15:04:42 executing program 2: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f00000003c0)=0x1, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='ramfs\x00\xa1B\x83\xde\x94\x8b0\xc6\x1e\x92r\xbbQ\xa1\xcd\x01^\x96Ut\xca\xab\xd2{)G\x9d<\xd6H\xba\x0e}d\x87\xcaU3\x06n\xc5\xb7\xffC\x92\xbb\x95T\x13m\x17\xb2`\xb4dL\rS\"^pK\xc9\xa0\x806v\xb5QZ0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000000c0)=0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x27, 0x90}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) 15:04:42 executing program 4: r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000100)='o', 0x1, r1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000340)={0x9, 0x0, [], {0x0, @bt={0x1, 0x7, 0x0, 0x1, 0x9, 0x0, 0x7, 0x6617, 0x3ff, 0x67b6, 0xfffffffc, 0x2, 0x4633d388, 0x3ff, 0x0, 0x48}}}) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000100)='o', 0x1, r2) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="5df9246fccd18f5bc852ccb8aa45e6e26fdb8334f28514fa5e312b434b77031e63d66411724d42c9f37823d3c849b67ad4a6bea06518c902af0fd66f5d1ba1ea2afa460100601cff9b327498ad856279aa6ede8a45d6ea474469b5d7dfb20701d56349dbe41e04cd5f0ccd157bb1850766de9bc5b85b7a46f8d9d3344e18178bb37e3f2372ccfe562ebfd52811b1ba5ca2f41759268d9fca385d5baf9b593b0a9b747db2b811efbd0bd25b9dacbf5472", 0xb0}, {&(0x7f0000000200)="2b76359c4a378373e76d94bf45f8ca2610dfef9b3659e2d528e6598f3bd6a2f0aee1b6e02b1a1a35c3479579b527f45012441908834779f1c7fc9569107bc9676601a311685f2117639fec5d8e49f54c801746c2bedcace4b7f5ebd278714761c6d9a5df5e243df1744235e5944b632c06906c1069f613efd45d29df62546c1156271c3a51b4159bbcdc838c71762a5ca73402d45942a022a45313d46fd588f294a83cc8ca07e81cf36158dd53056d4a14c07fb6cd0b4108fdaab3474c7eb8d9ff7894d96e1fdc26d661a867ba17cd0d593ffb", 0xd3}], 0x2, r2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!*[#\x00', r0) syz_mount_image$xfs(&(0x7f00000006c0)='xfs\x00', &(0x7f0000000700)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:04:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000040)={0xe, 0x8, 0x3f, 0x3, 0x11, "ad5a6a14cda9f8f3d38ee0f3f1794774dc"}, 0x1d) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = getpid() r5 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f0000000000)) r6 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x81, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r5, r0, 0x0, 0xb, &(0x7f0000000240)='/dev/adsp#\x00', 0xffffffffffffffff}, 0x30) capget(&(0x7f00000002c0)={0x19980330, r7}, &(0x7f0000000300)={0x7, 0x8001, 0x6, 0x0, 0x7ff, 0x5}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000140)={0x10000, 0x9, 0x2, 0x4, 0xffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000100)={0x2, 0x3, 0x81, 0x1ff, 0x8, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 15:04:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0x72}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x200401, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 770.839789] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 770.889664] XFS (loop4): Invalid superblock magic number [ 770.892555] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 770.917824] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 770.937615] audit: type=1800 audit(1574348682.736:324): pid=23444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16484 res=0 15:04:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 770.981034] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:42 executing program 4: r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000100)='o', 0x1, r1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000340)={0x9, 0x0, [], {0x0, @bt={0x1, 0x7, 0x0, 0x1, 0x9, 0x0, 0x7, 0x6617, 0x3ff, 0x67b6, 0xfffffffc, 0x2, 0x4633d388, 0x3ff, 0x0, 0x48}}}) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000100)='o', 0x1, r2) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="5df9246fccd18f5bc852ccb8aa45e6e26fdb8334f28514fa5e312b434b77031e63d66411724d42c9f37823d3c849b67ad4a6bea06518c902af0fd66f5d1ba1ea2afa460100601cff9b327498ad856279aa6ede8a45d6ea474469b5d7dfb20701d56349dbe41e04cd5f0ccd157bb1850766de9bc5b85b7a46f8d9d3344e18178bb37e3f2372ccfe562ebfd52811b1ba5ca2f41759268d9fca385d5baf9b593b0a9b747db2b811efbd0bd25b9dacbf5472", 0xb0}, {&(0x7f0000000200)="2b76359c4a378373e76d94bf45f8ca2610dfef9b3659e2d528e6598f3bd6a2f0aee1b6e02b1a1a35c3479579b527f45012441908834779f1c7fc9569107bc9676601a311685f2117639fec5d8e49f54c801746c2bedcace4b7f5ebd278714761c6d9a5df5e243df1744235e5944b632c06906c1069f613efd45d29df62546c1156271c3a51b4159bbcdc838c71762a5ca73402d45942a022a45313d46fd588f294a83cc8ca07e81cf36158dd53056d4a14c07fb6cd0b4108fdaab3474c7eb8d9ff7894d96e1fdc26d661a867ba17cd0d593ffb", 0xd3}], 0x2, r2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='!*[#\x00', r0) syz_mount_image$xfs(&(0x7f00000006c0)='xfs\x00', &(0x7f0000000700)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:04:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x3e, 0x0, 0x41be, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, @perf_bp={0x0}, 0x6c0e551b96492465, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r3 = socket$inet6(0xa, 0x40000000000001, 0x1) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r3, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x80, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 15:04:42 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x12', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 771.249505] audit: type=1800 audit(1574348683.046:325): pid=23459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16532 res=0 15:04:43 executing program 2: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x20890}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48850}, 0x0) [ 771.446078] XFS (loop4): Invalid superblock magic number 15:04:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000040)=@netrom) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @ipv4={[], [], @multicast1}, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 15:04:43 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x12', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:43 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x70, 0x40, 0xab, 0x0, 0x6, 0x0, 0x3, 0x66004, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x2}, 0x0, 0x199f, 0x62d, 0x7, 0x9, 0x9, 0x1000}, r1, 0x7, r2, 0xf) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000003355ba6c397e4d19f862d4c759dea7c007651227c8a1e205d6923b30b0dce69c8c18a723c0d16fb0eca717488b97c22f7bd1167e8f5d837ff7d714c24ec2f3e4547e9e0d3e4e8c873241633c030c3e2a4949cad3ee7b809c0428c7b95af5f386503a34f7f111a4f88772046c2a8b10d38ec322176d4b41c02e28496c48fe86868ccab255c78820d3186bf9c21cfe", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={r5, 0x2c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x21, @dev={0xfe, 0x80, [], 0xd}, 0x9}, @in={0x2, 0x4e24, @local}]}, &(0x7f00000002c0)=0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0xedc0) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r7, r8, 0x0, 0xedc0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') setuid(0x0) 15:04:43 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 772.286209] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 772.348669] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 772.360585] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 772.377349] audit: type=1800 audit(1574348684.166:326): pid=23505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16564 res=0 [ 772.415200] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:44 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setregid(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8800000) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100626f6e640000000014000200100008000900000088004e0100000000"], 0x44}}, 0x0) 15:04:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 772.717012] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:04:44 executing program 0: mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6460ac46fd65762b6e62c92921e8e2144de4f4ad320d05651f03b985e6592d4cfedcd086a45098835c8bab3e5d95d0f18b7c07ec096706d3f1a21d"], 0x0, &(0x7f00000001c0)='omfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x200000000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0xfffffffffffffff8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) close(r2) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x8, 0x2c2c02) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000380)={0x5, 0x80000001, 0xff14, 0x2, 0xd}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x105}, 0x14}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000001b40)=""/221, 0xdd}], 0x1, 0x6) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000280)={&(0x7f0000001a40)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="000025bd7000fcdbdf250e0000000800050007000000340003000800080000000000140002006e657464657673696d300000000000001400020067726574617030000000000000000000080004000800000008000400ff01000008000400020000000c00010008000800020000002800010008000100000000000c0007002a00000008000000080005000300000008000500000000004dafbb1eb79d8b406df9f62619993635c83ec287b2b0aa3aaca614f4347ad944a6c2d31c95843598a22399209098f07065b393b270b7d807ab4a1232f1d978ea8279ff01f8e4a019bbca7fd573962ef3"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_mount_image$msdos(0x0, &(0x7f0000000500)='./file0\x00', 0x8, 0x8, &(0x7f0000001900)=[{&(0x7f0000000540)="98263c23f39402b3851806a4d1b63789a92e62ae0e9ccd2431043b676ffb4e2019591003847b9527ffea2dee2736cecd1ce87199b3f79138f3cfe470512920d207fa80f4d92c", 0x46, 0x1}, {&(0x7f00000005c0)="90622ff76443edbe181fa92e04b4bb84dafc3a6c602190e390bc0af08982c021cb7ad93bdffcaebe3b962730340fa95bf3c010a573a9908837b9c4d682020006821f8be53c1702e0592f60c479742e016460624635fd44a853bbaf55802290102cd9c90f38c9f1f532c47acfdcc6f06813", 0x71, 0x4088}, {&(0x7f0000000900)="a9caac5d6e3a12b144d61bc668277cb80905f4a9c6c353d644b7a74692f186544f33104800b03f535767ff99476ebe8499634905c8e1d66aaeb773cdea373d09e5e475f87ac7d1aaf65db1ccba4b69d0d0e0bd8f0872367df9b83ed69a888e42f6c1a2b7d0f7c3ac3912d9b0ad39c2357eff46e7735c8c061bf7e9bf4646494dc9905799665d081dcf43644c92f158696a8445e7fa613ab1970b23d3c7a8fe07eda092bd4134db915002e08aefb818ca987872ace477b81d0dbb2f58e8cac564885bd80e2e2fcad2145cc31b920ff59f8c8b499d9ab99a79198dc4a169587cccad384e4f32b3638ed4ef659e028d5fb1718b37e88c3ccb0e0946025308ab33bdb287c7d84fe7d479b8df8bc2fafc8303e09e2c614b4ffe8dc063288dad0b1c761dd0012fbf5720e0e9fee41368253dbd99732cdccb8eb13d0a43e679694bcf0f8e0ce8d28cb0a5b6e78ba412f119546dca38c8338d9912fe884b7a3acc41286d15e38511eeeb0f7836dd4b61b74a5f55f6cbb482d218be8c0e706f8eec11ec23e5eba09ee9439d36a8728263899a8aa573ccba3de0ff844540c2d76600170a5e0e3c3b7c71a48f9c5fa6a7f1f7f8ad396f5d9be0dd5a8deb94d47e75b2eea245b8c0af4079005f29b7c1b3c191dc9aaad5d984f9e136294ac6ee89fc410792e47bc5fdd9ffcab0febd064bddc11287808169bd284b6c20c4b065d3f55a0d7de93331ad02626578ab0bb7043dea30dc68cd5be2bb99608d48234967c27cbfd20505e0a4ae80d7353ba4c24482bc0dd096eb4cd16590229e56de2ea738ce177abde02a8359b6949de906fb39183de31babd67f74fc5ba980a000ad0b386b47c6fd377795376d9f4b57d4a312e26249f93173098d4cd542c2542fde24de523d9faf890713b432126b15f30d0ab7fdab9586862ef0697fc0ad4cee1c406c9ac7a36f8ae8c53505b2aa7aa3f18e92b169e8da3fcbcb44eea72289549e7d4179863ba3fa12146bd7a107c7fe6d852baf75232045ffa8229d06077a21a081f907da2a643a2c72eb57ea53f88e2a3a1cee9a70fd68c0adf83a397b4709e1d91286bf1a75201327fe5c27fd70c690efc2ad72d71561a5de92791b8386673b10ed08b09464c3a66a11ea6332a2a5e664fad2725f5f914f7d3e671a514ec86963addb38da7ece399b0419f3b0724643cca9c52ec9eb481712109682a3a730084f42c371a1cd329e57c4e43022387f8c700634ee4aa69c63d8e1866c2c0bbbfd30c0ee7ec0170275394ca3f523ac5314f18c038ffb3822b6e4de43e34f7659d9877402ccbb24936e007d1a257695d7922e3285ef346ea8521b52cf18b032c61d2c5bd4dad6fdbec5ddba2ffe1f5866a0ff348bd9dc326faf94e684952e15386dfc713c9b98080be69d92653a3dafeda3030b94917f9d30f56a53eadb2f94ba65913a33f8f87f39a43d1f9ccad6dbeeb0d2d10a33f889d2bbf30559ea1392454406a2b050b890d611e65892d9443a471bfca1caa35a693d48a04b4713aef8902ee3a6016556db248f287d0818190f54134625bf62b85be78b61e77139b761d7193927b64217fc1df61a75760e2eae5f354639729fd96f291559f02471784582e74eedc607f45087401259b9bca7d1cdff7feccebe15ab63d3dbc96e424c01dbfa4dc0a47e4ddc63a60f9a73e1cd567192f1c4581e7891a3076a5c269ac57742e3ca9a7a4cec6be53e8989f21a6f85d6d9008ea5ce0c4a064b11b2fcf2524f378b7f52722b8866398263c6f9efab21234324f91cd1221e37fc4f1c5313872bcc2e109ed237010985f52a6f069456d28649f843a41cd3374a05e82bc7bf532b796bf24c5846d7f39be627cba660b112ffca6fb517d471fe8f7f33835e9a5466dbc914047cf4079496b033f7359b0b3c23cb4bd2407262bf9cd28763b7846022f02e25cde4d9d7d86e0e8abd0e6fa97ef1c7dbe7998e5879a2fb889390f99496ea6f224ee907039d169327445456131d2be7e1205f2566869f047f7a740a0a703a31ac5a25a93ce3e4fed8f4bc1fb49244a7a412ee6d6a96f476b6a61d1688fd5ec1d5b435f9ecab30facb4f8c48d34403b3e9ff89c5f289cfbe2010f51e262a830699ee0d65e50ebf3f98b4a71f9ea564281783e26d64aa1c1d61a7aa486605fbaab727c5d7f6b58d37796a41c9a85fbdfb61958d06a6aa5ca148fa87b7c61cefb3a5cc1d7b1991fc27bf182ae718bacb799f7e25347846a32fcdab61d576ea80fb3bac50b0dd7de42c1199be9b494209dfd4a996fb91378a01031ed26430c6a2b4057fca39f29c63d9f1242e8d5f4ed3c3003000dd63a9946213e3a72101eec2f7698b37521e2e8a88531b6cd534dcb1e710ecf1447140e5b6df6f57034fa44c0f8ee386b5018a15c88288928e1a5f8481566cbddd04246f45e5492d74808cab7ecf5b54056a878c0eec2cb44bc5e833a4fb47540f6915c08aebefc0058d552b52a0b0067e1579cae117d9cc9df0f42903f368ad221049e29a0807f6f32079a0b1e8bc022f4ac7512cb8d588779ed798ed6f0f463e6999bcf894a0040741eb428896dbe17a728be9e52a3a15f63c9df5ef414a9a29c520dd0edabb0a7c374f464bcb11a9ae9ab2c906f6c69b0df79a2da5f5587e73ce1479344964ad45c716701a7da6e19805172cb4700ab22837b6109af7a99b9e713ca14b05b8e382b8d8bac6105977d7d1fe8fbb2eba44593401b832ac815fa950adaebe0cb2b5c03c0fa5c6eb8ce1f8d808f019ae140a633f726f97e1cf56e9759d5d9c2c390cf2b00a8da94e3b4694b67333f903f4b8d7f37153866568e9ac7e0c8314a17d2649e1af5855f3e54f57ac7fa9e8ce4046d423b93c0d7300d56d04b57e495c8ce4d60d2a26d65e1811ea06f547ba8fc526ab85652144c4d7296cc53e3d07d3d5eb1175fd996da2a40932e99a94884721e8d74b449f2c881fa0d403414a09f61f593b21c0a38fde4fb08038846075c381dba9229b785eceae7f0d59b7d02baea00e0112f245e5ccbb3074285c4cf39e8b2e56a48511d2b00aad874361b874aef8c179452669b5671525b5306e6461632f9ffb3d84525a44358def1e742e5d67908fbb44b4fdf4defd313d2634d9bf58ca4dff0346ee7a6f828872306209f43780793a29e2277516ac084885d8764ec15ac76b4084ce8eda4f18a93d4ad647ddab16bac6b569bd129dbb07db0995d72f0e525a2692966942e529c19792368857254395786fc8caf0f9b5d6f81a7e00d1ee1afe3591ac7c421bf6160e763b2d03bc3aa73731e3f09f18dc93f4524d29348721b1f9a8a194b5f6b47247aa2480780826762d779640dc8f9eb64ecd2362e3c2bd49304ac397f88c71c0c91a1f697dba75fc22c24d611ad0decad4aae488003617add9abdfb4f413f99a0de554e094a3926f41e70da8ad92851f132c47e3afc4effd173b16ab00023fead50d7c3e1c6eabd64b83cf1e6cede428a1e77b2423029e87557159f24d5c700051a06823240510151574606c20501a8e895d177afeeaa9b0f1397d1f1fb24a798527237b06a4dc8044fb4adee75227e9a7cd06050121054abb7fe8153e72460bb589c7a289e5cf8f69cb5982f623dd01c988abe49d61888308e707a99947e22a7455b6aa3adde0cb09c33bfab888afac8a42703e22bc942d198bb7495989c55aa07867efa65bd1036051fe9579044d60f2f192f2c0bedc492f69850940b2fca26ccc177feec899ca74562121b0097678b611d4ae2fa465fb6244071138443da40912b2b75eec478daa72188159fe45e334a26d9c017d7adeb4e11395c74e6688615d353e0308ff10bdbacbf5fab082776f36833fc0f817ce72c3e19eccecfb3de0721229c43203b0799a5626ae7dd1985c9d9407ae525bb59a27461076cdd85ef042d1c672bf64efd75aefe43444677ae7e98887aaa6a0190496558f147541455ed52a6d9591dc49feb874c6136faf6c408f491f6cd7e4d2d55846c8057e960d64d37ce265169cb2662f5c1e55a28f6803eaa3770401492150d8521649d031ecf760894de938765ae38249cae61490a163364f97fdf9b5f796f7ba417aa2c6e5f2287ae917045454b9f7347603f689f4bceacde86e09c7cf5c20d2633ca72084eef13fd86b6a4b9d2c4534a72a14d731f6563ce63f809d41364c07cd780d708d8d5822e5a427f3a8554b21f0256605b55685c01900c0512f5b8152c3816c714c918e9f01f935f43a91c025fb6eaab6d0e7c4fa125fdcdfdd5c594f4b39a818de7db07e28aa40c19d9ca7cff4a2fbedec8a3825808a61bd7b2aee06efe6732e3c886428a5f6567deb9dd4b4c17df89de32cd9fa4e6f341832ba57abc1238370000ca9b26d247cecf94635c46619200d206a7c4d7bcd0fc78debe34e7bd0a01b14902765aa1ce1818d1c9ab63a6870bad9bafe668b6fee8331dacb98873c2c20452b2bd8d87ccd881fc3ef7ab06558a48f6e9d0c174ba0885c3cc1a1cebde521fd4a739407c64ed4d092981b8beceb54aac75f2f6195ff986529e48f8e30ef6f78a95d45e3411083fe9334e180d2c66e637e1f4ae3a480712311db5461a2210871816d04aee19a8ac5867ca203cdf7e5275d663ccfa55f31567e98d15d3fac4ebfe2997b59ffa769894f74dba9497e8b4c80eb4d7fa5251e767eaf3d974209844e49c07628898a727b36f5e3009f69eb9d730ca3e99e0d25efaf7e7280ad78357d553e02be8073e592cd117d5a3ff41ccc9ea1b060bf803286218c453b34f17efd623c43c03a31fe9ee8dbc783bf371b03fe19ae1051bdfb8623722acbafaab519afe56bfc1d4b3882ea4e92acf7ec9961d5744a45af609f5e7809b77f2ffc650963ea80722ee852ee8c98dff6704d4d24e7eeeb99090f7025a9e5ae645b1ed84c0a50ad199a0b5a7be872ae75a3c191d3aef8f442ddf70819f54e765b2398ab608bf80962e7f8d52b1b465158572c16c55c4f5673b8a869e7e659e0deaaed7cd4189d3fa839f1fd5d9cb23ffc7217dd45151f80bbd99ce99fd6564253b7ba0b18a4a3d0f1a799cd74c19f9f63fd48bedad40ad977e8dabacdfc89b8656d10b57c2c120d9d1f9347b6afd47ae12b63491d425051629a605141ec1c5db70257d3997d1cc95ba1811dce2ef081e73722dd083688bdce22f8ad288ceecaaef7ee74a46727bfa467cea9985bd733a7c44d8ee2f2a933db30367ef2da960fb52f67eda50b87e26fc29b59e6933c70d09f3d1cd085b1664e81f5753ed1db14b0978c61de4b4d98087a8b9c8dbf601f17d516f8934a70db1c081e3d344781faeba1c407bcff87d1700f6616cb0870ffdbb3c7281afe981055036f5411ecbc140f3d78296039f1571cc18d79fc7f01e4cdcaff97433348fed4a7d15626412b4170ece29087a25a02c2cb5c9a7cd4b7d71419251d8938ef86757219bcdf501601428406ba4048d8b9bb1173a0404a9f8c865c523813e368e1b3fc50e9c54e8132ba8d7a232cb7beaa500a04eaa0b5c7c6a6358da35484ca9c6e80c0f79b7d6c88c3f1bb7027c8acb046589473e31e70ef6a18e28be7b00b105db28cbe5817cd58e120f9cbe421f567b44f15c84b0458f04eaa4b348b46bce8a1f0f4227b73d877a5c21d3b7e0dc971a17f7f945e19995ed4e8b28f60f7fa5eeac57611bfffea2bcec18b2fa778b56cf86840a02882d92df2d73a25dc304a", 0xfc0, 0x100000000}, {&(0x7f0000000640)="faadc586a88242526e6d4744d725a1", 0xf, 0x3f}, {&(0x7f0000000680)="86992b7d3773d92650b023111ba4f9ae86788e7ea5d26bbf394b387983edf3a3c0f7f71b7d6040a648f755bb43084d35b93b1dcf860caf964531a22399211362706dd7d55c7bce5fb7fabea82ff0f9426e2d91af844569170d3473", 0x5b, 0x674f}, {&(0x7f0000000700), 0x0, 0x2}, {&(0x7f0000000780)="230dc2506bf4c0afc7a0267106cb9794992da8214ce44856c25d56f787b69fc5b86e0e6d973391ef1c4f6e2250ac919d2ee6337abe928f5c5ac4e0306412b98e1b2a95", 0x43, 0xb9f3}, {&(0x7f0000000840), 0x0, 0x1}], 0xb0400, &(0x7f00000019c0)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f747317451eaa732c73686f77657865632c66756e633d4649524d574152455f434845434b2c00604c3cfe6895ceccdfc46106ff410b7c2a08448049d16a96c97f97491ba940bcf4b8b16a38c7ef1db712f028"]) prctl$PR_GET_FP_MODE(0x2e) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) r7 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x49, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) [ 772.793968] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 772.867513] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 772.928248] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 772.991486] audit: type=1800 audit(1574348684.786:327): pid=23527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16547 res=0 15:04:44 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:44 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000002c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000400)='trusted.overlay.nlink\x00', &(0x7f0000000440)={'L-', 0x592250ff}, 0x28, 0x0) write(r0, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000240)="5ee7ca943a51235ced", 0x9}], 0xc0, 0x0) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000180)={0x9, "0e13b3111b4de022df450065c6be4c4c09914e7711d7ce429f636ed5b26b5c0c", 0x0, 0x1}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000000)="d51855e57d9b93af9bb8161402ceccbbc8b6a5c89015f0ca5ce5399d2063d0cafd5c42e0d977bb3457aebedbf88670ef0c47f9df1b678a6c1ec5c42e787baca64691a03a86e91fd7"}, 0x20) r4 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000340)={0x5, [0x9, 0x7f, 0x8, 0x0, 0xfff]}, &(0x7f0000000380)=0xe) io_setup(0xd, &(0x7f00000001c0)=0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) open(&(0x7f0000000300)='./file0\x00', 0x2000, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_G_FBUF(r7, 0x8030560a, &(0x7f0000000580)={0x1, 0xc, &(0x7f00000004c0)="c44e7809f0091f35e0755a34e0d9936695cfe19857a6ec1ebfc77fcd7c709c49f4ed3ce62475592e0850f2ad5f235c80d136b046866ee470299cdfac8b896445af4c5f9c171a1db77bd7c1ea5c9d35af23250b9484da34e3629f86c39770fd512d3fdeb8ca88f0e032919ad3d47b5e985dfa75788b364ae172e8d2cc8ab56c90c520acd9e04c97ec7c2315a6a58a0e88a882de5ddc2744df80", {0x4, 0xff, 0x62070a06, 0x13, 0x9a4, 0x4, 0x8, 0x7c6}}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000480)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000003c0)={0x5, 'syzkaller0\x00', 0x1}, 0x18) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) [ 773.258677] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 773.268494] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 773.279072] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 773.302712] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 774.135235] net_ratelimit: 16 callbacks suppressed [ 774.135244] protocol 88fb is buggy, dev hsr_slave_0 [ 774.145478] protocol 88fb is buggy, dev hsr_slave_1 [ 774.295258] protocol 88fb is buggy, dev hsr_slave_0 [ 774.300458] protocol 88fb is buggy, dev hsr_slave_1 [ 774.375228] protocol 88fb is buggy, dev hsr_slave_0 [ 774.380450] protocol 88fb is buggy, dev hsr_slave_1 [ 774.455222] protocol 88fb is buggy, dev hsr_slave_0 [ 774.460444] protocol 88fb is buggy, dev hsr_slave_1 [ 774.695256] protocol 88fb is buggy, dev hsr_slave_0 [ 774.700624] protocol 88fb is buggy, dev hsr_slave_1 [ 774.759780] bridge0: port 3(gretap0) entered disabled state [ 774.771846] device gretap0 left promiscuous mode [ 774.778278] bridge0: port 3(gretap0) entered disabled state [ 775.510667] device bridge_slave_1 left promiscuous mode [ 775.518207] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.576162] device bridge_slave_0 left promiscuous mode [ 775.583212] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.265222] net_ratelimit: 20 callbacks suppressed [ 779.265231] protocol 88fb is buggy, dev hsr_slave_0 [ 779.275362] protocol 88fb is buggy, dev hsr_slave_1 [ 780.375248] protocol 88fb is buggy, dev hsr_slave_0 [ 780.380437] protocol 88fb is buggy, dev hsr_slave_1 [ 780.535243] protocol 88fb is buggy, dev hsr_slave_0 [ 780.540368] protocol 88fb is buggy, dev hsr_slave_1 [ 780.615275] protocol 88fb is buggy, dev hsr_slave_0 [ 780.620436] protocol 88fb is buggy, dev hsr_slave_1 [ 780.935827] protocol 88fb is buggy, dev hsr_slave_0 [ 780.940927] protocol 88fb is buggy, dev hsr_slave_1 [ 781.268300] bond1 (unregistering): Released all slaves [ 781.338808] device hsr_slave_1 left promiscuous mode [ 781.379017] device hsr_slave_0 left promiscuous mode [ 781.418846] team0 (unregistering): Port device team_slave_1 removed [ 781.431294] team0 (unregistering): Port device team_slave_0 removed [ 781.441856] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 781.470150] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 781.557752] bond0 (unregistering): Released all slaves [ 782.849829] IPVS: ftp: loaded support on port[0] = 21 [ 782.911637] chnl_net:caif_netlink_parms(): no params data found [ 782.943103] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.949648] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.957078] device bridge_slave_0 entered promiscuous mode [ 782.964087] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.970624] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.978179] device bridge_slave_1 entered promiscuous mode [ 783.019726] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 783.029511] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 783.046466] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 783.053797] team0: Port device team_slave_0 added [ 783.059859] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 783.067198] team0: Port device team_slave_1 added [ 783.072716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 783.081182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 783.147324] device hsr_slave_0 entered promiscuous mode [ 783.185611] device hsr_slave_1 entered promiscuous mode [ 783.225983] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 783.233171] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 783.249471] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.255888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.262474] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.268896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.302925] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 783.310134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.320392] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 783.329803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 783.337843] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.344700] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.351915] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 783.362318] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 783.368640] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.377967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 783.386530] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.394371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.406287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 783.414104] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.421194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.439407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 783.447866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 783.462574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 783.471953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 783.488505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 783.499692] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 783.506608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 783.513919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 783.527873] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 783.535820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 783.542578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 783.554455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.613346] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 783.627865] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 783.639320] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:04:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000022002908000000000000000004000000f4bca5f4479eeb6a2d8d89e8e4dbef07f3d6d36669969c67bc44327dc88a65933aecac02fba5b1a7a8b7c81e9ade23f1da8c75306be3c737fa5aedc1c24d9b0e9b0ada68779aa1db2b0870b14a456893bbe3b5b6b6e1400822c9ef85db6acf163b45ce055b00"/139], 0x14}, 0x1, 0xfdffffff00000000}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c006f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040000000000fda51b172bf87647b1d54624b0311c3d0f88f23b00"/80], 0x58}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) sched_getaffinity(r1, 0x8, &(0x7f00000000c0)) socket(0x9, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) process_vm_writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f00000004c0)=""/111, 0x6f}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x8, &(0x7f0000001780)=[{&(0x7f0000001740)=""/37, 0x25}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 15:04:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="510000000400008000000000"]) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 783.659880] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 15:04:55 executing program 4: r0 = socket$packet(0x11, 0x2000100000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0xb1, 0x0, 0x0, 0x400}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) 15:04:55 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000000, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0xff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r4}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={r3, r5, 0x2}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x7f6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00000000c0)=0x6, 0x40c) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x12001, 0x0) fdatasync(r1) 15:04:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000004c0)=@req={0x7fff, 0xfcd, 0x6, 0x1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000380)={0x3, 0x0, 0x1, 0x0, 0x0, [], [], [], 0x8, 0xfffffff7}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = accept4$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x800) fchdir(r6) r7 = accept$netrom(r4, &(0x7f0000000040)={{0x3, @default}, [@rose, @rose, @default, @null, @netrom, @rose, @null]}, &(0x7f00000000c0)=0x48) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000100)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="380100001000130700000000fbdbdf25e0000002000000000000000000000000000000000000000000000000000000000000000000e8ffffff00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000ac141400000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f5a034a0dd8171300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004003a0000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) [ 783.872491] audit: type=1800 audit(1574348695.666:328): pid=23579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16529 res=0 [ 783.912058] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:04:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x83500200}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=@newchain={0x1464, 0x64, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x3}, {0xd, 0xc}, {0xfff2, 0x3}}, [@filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x1d0, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @remote}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0xc1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x2}}, @TCA_RSVP_ACT={0x194, 0x6, @m_simple={0x190, 0x1c, {{0xc, 0x1, 'simple\x00'}, {0x90, 0x2, [@TCA_DEF_PARMS={0x18, 0x2, {0x21b1, 0x2, 0x0, 0x10000, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x5, 0x0, 0x3, 0x10000}}, @TCA_DEF_DATA={0x18, 0x3, '/dev/snd/pcmC#D#c\x00'}, @TCA_DEF_DATA={0x1c, 0x3, '/proc/capi/capi20ncci\x00'}, @TCA_DEF_DATA={0x20, 0x3, '!vboxnet0vboxnet1&ppp0bdevs\x00'}, @TCA_DEF_DATA={0x8, 0x3, '\x00'}]}, {0xec, 0x6, "41f34aad1fb42e2dde728c3aea5fc3ad59e3d58c83dce5b95b0242cd52b29e1920e3a5504a723277ef0ccba3220cd967cf1539634d193d3e477fa79470f8d31e6bea2052e6eb256bcc9e1e8984a5f475cdd5849295e09b7fd026d6881b9ce1a437a3ffb41a998de08f78a258bc1e304d27c4231064a342b4ef51612f145383ca6c37728060d78855f0ed745fd7b7509dfab865ed5aaf386b54b80a4e0d5d5929b948293acf60ee0d8b195a925a50cc10477cbddf2f7a65589c35d299ec90ad379113687ad3d6757ae1ac399d1805ca44c0cc1eb31678af2fc158f7a6b3158e94f3415b4fdc3181"}}}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x745, 0x3}, {0x9, 0x7, 0x2}, 0x33, 0x40, 0x80}}]}}, @TCA_RATE={0x8, 0x5, {0x3f, 0x1f}}, @filter_kind_options=@f_route={{0xc, 0x1, 'route\x00'}, {0x106c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xea}, @TCA_ROUTE4_TO={0x8, 0x2, 0x32}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1f}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8d}, @TCA_ROUTE4_POLICE={0xc, 0x5, @TCA_POLICE_AVRATE={0x8, 0x4, 0x48b}}, @TCA_ROUTE4_ACT={0x103c, 0x6, @m_csum={0x1038, 0x16, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x8001, 0x1, 0x6f, 0x806c}, 0x3}}}, {0x1004, 0x6, "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"}}}}]}}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x1d4, 0x2, [@TCA_FLOW_EMATCHES={0x7c, 0xb, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_NBYTE={0x20, 0x2, {0x3, 0x2, 0x8, 0x0, {0x5, 0x9, 0x1, "d23df2b82ff683d094"}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff8}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_IPSET={0x14, 0x6, {0x2, 0x8, 0x800, 0x0, {0x0, 0xff, 0xff}}}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_NBYTE={0x20, 0x0, {0x3f, 0x2, 0x42a, 0x0, {0x3f, 0x9, 0x2, "d6af3d7b63c0728d92"}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3000}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x8}, @TCA_FLOW_EMATCHES={0x11c, 0xb, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x84, 0x2, @TCF_EM_META={0x80, 0x92d7, {0x8001, 0x4, 0x5, 0x0, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="2995652609", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="8d9f7b5e2ac87e3db53b", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x40, 0x3, [@TCF_META_TYPE_VAR="e81c27", @TCF_META_TYPE_VAR="095bde24c036e18439", @TCF_META_TYPE_VAR="2973f35676", @TCF_META_TYPE_VAR="b8cb7a44cdac", @TCF_META_TYPE_VAR="0e432faff4e4c223da", @TCF_META_TYPE_VAR="34f4ff6eb12361ecd640", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="f412", @TCF_META_TYPE_VAR="ecebc3cce9ad02", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8]}]}}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, @TCF_EM_CANID={0x18, 0x1ff, {0x5, 0x7, 0x76, 0x0, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, @TCF_EM_META={0x4c, 0x5, {0x7, 0x4, 0x1000, 0x0, [@TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="dc71e4", @TCF_META_TYPE_VAR="4c7dceeef0890d3b", @TCF_META_TYPE_VAR="77b9d4552dc3c4c1"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="c824", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="cbda91d8b2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xd3, 0x6fed91176a50af07}, {0x5, 0x4, 0x1}}}]}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_IPSET={0x14, 0xf91, {0x3, 0x8, 0xb5d, 0x0, {0x400, 0x0, 0x1f}}}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d37}, @TCA_FLOW_XOR={0x8, 0x7, 0x80000001}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5b1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x10001}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x3}]}}]}, 0x1464}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="400000000400000000000004"]) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 783.926458] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 783.949671] audit: type=1400 audit(1574348695.736:329): avc: denied { ioctl } for pid=23575 comm="syz-executor.2" path="socket:[88466]" dev="sockfs" ino=88466 ioctlcmd=0x8903 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 784.033010] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 784.137589] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:56 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000022002908000000000000000004000000f4bca5f4479eeb6a2d8d89e8e4dbef07f3d6d36669969c67bc44327dc88a65933aecac02fba5b1a7a8b7c81e9ade23f1da8c75306be3c737fa5aedc1c24d9b0e9b0ada68779aa1db2b0870b14a456893bbe3b5b6b6e1400822c9ef85db6acf163b45ce055b00"/139], 0x14}, 0x1, 0xfdffffff00000000}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c006f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040000000000fda51b172bf87647b1d54624b0311c3d0f88f23b00"/80], 0x58}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) sched_getaffinity(r1, 0x8, &(0x7f00000000c0)) socket(0x9, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) process_vm_writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f00000004c0)=""/111, 0x6f}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x8, &(0x7f0000001780)=[{&(0x7f0000001740)=""/37, 0x25}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 15:04:56 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f0000000340)={@ipv4={[], [], @local}, 0x40000}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@remote, @empty, @loopback, 0x0, 0x8}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r4, 0x162}, {r5, 0x85}], 0x2, &(0x7f00000002c0)={r7, r8+30000000}, &(0x7f0000000300)={0x45}, 0x8) r9 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r9, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 784.258304] audit: type=1800 audit(1574348696.056:330): pid=23592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16538 res=0 [ 784.473098] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 784.510416] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 784.529615] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 784.538930] net_ratelimit: 20 callbacks suppressed [ 784.538939] protocol 88fb is buggy, dev hsr_slave_0 [ 784.539004] protocol 88fb is buggy, dev hsr_slave_1 15:04:56 executing program 4: r0 = socket$packet(0x11, 0x2000100000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0xb1, 0x0, 0x0, 0x400}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x30005, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) 15:04:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net//yz0\xfe', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x4, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78ac17b9efb7b7b8, @perf_config_ext, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000480)) socket$kcm(0x2, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0x24004400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0x24004400) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x5411, 0x70f000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000002c0)={r5, 0x7f, 0x200, 0x9, 0x401, 0x7d3}, &(0x7f00000004c0)=0x14) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r6 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r7, &(0x7f0000000080), 0xffffff43) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x3f, 0x6, 0xe6, 0x0, 0x7f, 0x9, 0x0, 0x4}}) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup\x00#\x7f\x80P=r\xc4\x17I~\x85\xadq\x06\x00\x00\x00\xd5\x9f2R\xa3Z\xd3\x9b\xbd\xa1\xa3/\xc0\x91J\x01!8#\x04\x0f\xc3\xb7\x95\xaa\x91\xfb\xa1]Pj\x8e\xaa\x19\x04\x80\x94\'\xc7\fL\xac\xcf:\x92N\x94\xde\x87\xc4\x9b\x87\xd2\xcc{X\xedVr\xecP\xf9&^I\x9f}3U?\x1a\r\x9d\xebB\xf1\xda\xb9E1\xe2\x17\xa3\a7\xaft\xe3\x1e\xebMO\xf13nc\xa2\xaf1\x9aC\xce \x9d\xf7\x13\xddJB\xb0\xd5\x87\x9b\xa9f\xcf\xae\xf6\x86\x1c', 0x200002, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x9) openat$cgroup_ro(r8, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) [ 784.581347] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:56 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) [ 784.695270] protocol 88fb is buggy, dev hsr_slave_0 [ 784.700591] protocol 88fb is buggy, dev hsr_slave_1 15:04:56 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 784.760571] audit: type=1800 audit(1574348696.556:331): pid=23611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16540 res=0 [ 784.783393] protocol 88fb is buggy, dev hsr_slave_0 [ 784.783449] protocol 88fb is buggy, dev hsr_slave_1 15:04:56 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close(r0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x1a, 0x20, 0x1, 0x1b, 0x6, 0x4, 0x6, 0x126, 0x1}}) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x800000000016, &(0x7f0000000000)) ptrace(0x10, r2) ptrace$cont(0x11, r2, 0x0, 0x4001) io_setup(0x6, &(0x7f0000000040)) io_setup(0x7, &(0x7f0000000400)=0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) io_submit(r3, 0xa9, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 15:04:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$netrom(r4, &(0x7f0000000040)={{0x3, @netrom}, [@null, @remote, @rose, @default, @default, @netrom, @bcast, @null]}, &(0x7f0000000180)=0x48, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0775db7b0000b07401e3bcd5e383e5b3b60d000054dbb729f7fadf8217ad620051270000000000", 0x20) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000240)={0x4e, "f743116028163b4aedc30fa534e64964f4f995e2ed6819a2568bdcd6632920d15671a09e69a6a3b6f0168958ec025b4f2de640c6554b634effda415efa66f665f8627cc868620b075e728bbe7298fd62b10f297d225c976906f3008c1a4f71852148f56aa28dbdb6a6b8db42c0771adeef4aae7160bfc09f91fc157bdd191087"}) 15:04:56 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000100)='o', 0x1, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r0, 0xc1, 0xb2}, &(0x7f0000000280)={'enc=', 'oaep', ' hash=', {'rmd320\x00'}}, &(0x7f0000000300)="8094dc617e382a098405fbd972d5e6b7db0412184015e7e7a088ed6601176bd881e98b82c9a0bde9a929db02a0268ac8cc62255c4d997b7a219e05fb27f6aa8df0ebf99503014f4506ce40f0d175231977f31dbf3c006e6e8afe46931e36c7da55b26b8031858ecf7e0b2376225d254f28e025313a5227d4d93501cf9e66881df821730e1985eaf1deeae8c6bb538a7ae82be264d0554bef6e963efd621d8b8190c6fa1ca8c038ae86f0132e92fc8b89a7d7fbfa0078918de2e522332f83d0c7fa", &(0x7f0000000480)=""/178) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) memfd_create(&(0x7f00000009c0)=')posix_acl_access\x00', 0xff073ca96286ceb) keyctl$setperm(0x5, 0x0, 0x2000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000000c0)=0x9, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000540)='./bus\x00', 0x5, 0x4, &(0x7f0000000840)=[{&(0x7f0000000580)="b48373af71fff64fc683572d783348b0c61b15c4cb678ae418cd6ae29afbc976fdfb9781fb9ad06023d7e6d4f99dfa300bbffdbfa520340484535f4a4d208b0dbfe154b1c99b3377b8d9df00054b53a41bd5e78e2e94e5935b2707c22410cb878c2d1a0ff334f409dc34440f877fa89ae798e9108c6d5dd55b67b13684420a46df83b1892a4434b9e27de3ace09ce9501435243acb2b", 0x96, 0x2}, {&(0x7f0000000640)="9d8f0f561178bd583d391a39977ebb311c8df6a21415a93645cb7a89a94da93ea8dc41234b26b6279f9248012cd3357daa87bfe1f1f2616576ecc735cca29987116db45062e24873803d6c4eabb1acde491e3e06e8e0efeed6b9c82697e8bd1466e0b8580f846dc49961900541b63c567b1434c0095fbf49e1ada9c8e549972fd7bae948d3c32d4040b0c2cb9164da7439e8aaf2103ea8a8ee315b", 0x9b, 0x40}, {&(0x7f0000000700)="82891f2e98c57fafe9c1cf626bf88196493813a19b7eb4bc116dd9e31262352b9905c7a6671c198bb22c85ed37ccda8dcba3c575839c0df9b01120c38adeb03772e8edd20c013a37d99fdb400948061f51599741054946d22393cb948125d7b6164d90124c14942c7c2cedd145c76a11f7370385249f5f778631f93552ba93f1ca0abf3627", 0x85, 0x1f}, {&(0x7f00000007c0)="1c32f5c049cf9e92b0083d2d42a308a9ce52ff28ba3bba29574766513068051d902b73bf07989c61639d88fdd980b77e200ea54f690de7f82dd73f1cd2aef251c87e14630ee7adc444f4d596012cc51252312326eb41d9a8a7c570a68145b5c8ce17dacf4fb7e717acbccb09f567561e0bde22930e6f", 0x76, 0xfffffffffffff001}], 0x280444, &(0x7f0000000940)={[{@dots='dots'}, {@fat=@flush='flush'}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@fat=@nocase='nocase'}], [{@euid_eq={'euid', 0x3d, r2}}, {@euid_eq={'euid', 0x3d, r4}}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r6, &(0x7f0000000000), 0x1c) r7 = dup(r6) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r9, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r8, 0x2007fff) r10 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) r11 = accept$packet(r10, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) sendto(r11, &(0x7f0000000bc0)="bbb7e50981b9c2", 0x7, 0x4000088, &(0x7f0000000c00)=@l2={0x1f, 0x6, {0x4, 0x7, 0x7, 0xf4, 0x8, 0x9}, 0x9, 0x80}, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r10, 0xc008551a, &(0x7f0000000a40)=ANY=[@ANYBLOB="4000000004000000000000002d587b68ba87739084d84e4c3a81c67977111dca91ccacff4b22e07b38138dadae738ab819075f39087f02eaeeee746b61c6e8e31160bef85b5bc3c2e1af859f21e285db793f832b267825885e024eb7944be75c024fe0b3b7d2e890aeb50b11d9bc827b5981eb0fba33e6c04cf1c7f03ce252d3f0f0d9d91fd136c67bd307bc1e501cf02062656b5eb2d4a30ff32652503e4952babef63b39bbdac4b8cd854a36150a8a35ea13a81cb58cfb193525a84af0b39e9bbbf5763f6556c04b543ad205ce24bfdf36c4eda0c807251e3b36a0a0119a"]) sendfile(r7, r8, 0x0, 0x8000fffffffe) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="00080000cf70c98c1be5ae170000000013000000000000000000d7fd30d9e122579de189", @ANYRES32=0x0, @ANYBLOB="000004000000000048001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 785.095240] protocol 88fb is buggy, dev hsr_slave_0 [ 785.100576] protocol 88fb is buggy, dev hsr_slave_1 [ 785.109320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28879 sclass=netlink_route_socket pig=23637 comm=syz-executor.5 [ 785.194302] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 15:04:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000001b00)={&(0x7f0000000280)={0xa, 0x4e21, 0x4, @loopback, 0x5}, 0x1c, &(0x7f0000001940)=[{&(0x7f00000002c0)="e54703ab46967f94db462297cad72fb7adc2b8aa983f8d951c77b6b0bc6d72a63cd78cba5468fa8877d10fc8808a134d828c997b3622e3bc6607a6223487a28e26edc4e46b07666a0d2d089bb88fbef75f9c9c16d758bc902b592b4e4eb3ccc86df82514e842950fb7150a01ca8120ca9200f435602ea521c789b8cd5be1b545bb79ab1b53b5b54f674380701aa1190392dce4", 0x93}, {&(0x7f0000000480)="3600929d94c45a5ca2efa75e17c73c2fe645eefa137a2d33d12afa48f9489fd2e1bff28264a72d0d8239285a60ffd9d41ce57d20584638d865b10d4c86ef727cb8b382f69ce2e889f83d1c9fbefd6317619ab2944edf51fb6d5e8d7729a9a712102005279a1958b22d183abda9bf69301253edbe2972fb6a662c8c40a2c66d28460534fc29a8734316b3e2d43ade33f641dc4cb1c39d0cbfbd5359f4aa754b031e069a508e9243d90bfe5d3dbf803b8213abada2eaf9f524787b6845befbabe7db6e262c7d248cd9f12363be4f70b9e74be3e37c9874a10972c304a6b3ffd8a1101b5aee2a", 0xe5}, {&(0x7f0000000580)="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", 0xff}, {&(0x7f0000000380)="9b91610868d22988ed69b6aba09f4deec00c2aeda31437cad27033aef30e85c39880df490a4309171d2a08ca34edf0387b8d497c4562864cc7cc81fde20d14a066032b3008cbd977a6bb65abb27ff1bcabe0c4a0154aa1b376b3ebf71ff790c86b6c159841165e663f6ea9f2df6abe2404c374f8622448987f0169e78b830bbf717af60f443c1519b1de997a87e6b5452755efddec49cf5934604b217451c6b7b9088b9bea55039c2b5f167d1ee8f6", 0xaf}, {&(0x7f0000000680)="5eec9870715c05e67e6683117aebd1568d4f2e1fa2e2f167ee8929ad1dda6184cbc89582fe60bec84348dae516147ed2d92533b56cf12f38a9b6ad668f449f65315e2cd830b0b3def0378b126f747320fa9bdef123c91a1e373913a06708a34506ad0b86d9c4d87bfbfa85ab9eaa2c808c656fb7bfe56dbd6a28d36c8aed09567c8a31e5b12f449b4e94a4", 0x8b}, {&(0x7f0000000740)="f6cafd036391466ac85f41230654d119471a0304d119e73465d1d1f1ab1eb3646b6162f51b79156bc5f01f57eebca24cc24a6ef1374b0680d35113d8ebb749ae58a9b01aee8391e9cb2e31aa33bdf1e9d6b940", 0x53}, {&(0x7f00000007c0)="cec67d920f", 0x5}, {&(0x7f0000000800)="91a2d3673c945ed936ca76d19e8d6c814386b0fe94ecaae951f0d5039e6738b010d456a2094c349f52de0192145e829a24de1aa46ce41f5ad66d013dba0414748c79809f9f32d8fc33fa04b22f13d56943bd9f40e8124352c173c1747e2bfb029c93b41982e91c05e7794c31d709745a4407055e37b8a20e4e3cd7524b76f86089c22bc4c8788b661d06eec8a3b3f85f6cc7c4e782307f7428ce1c2800698b8bcb4d58fa5a0eb6ac9c657808e24a5135c4", 0xb1}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="f4f2cae96220fff582b734f4882c12d0be6c6045b9a54b941f8de9eb60c4a115b55cdcfb31eb5d8fc4f7c35fd63dfe48d177c8a2b7b70bc944c6bdebdba3a8a78a99fb03448e3339f7bdc120745fd95dbd1cf0fe24961d093d67e966677e72a4704c1da0a2eaffab1d279ee72e7053", 0x6f}], 0xa, &(0x7f0000001a00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x32, 0x3, [], [@ra={0x5, 0x2, 0x7694}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x7f}]}}}, @tclass={{0x14, 0x29, 0x43, 0x400}}, @hoplimit={{0x14, 0x29, 0x34, 0x81}}, @rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x8cd6934f57278f6, 0x6, 0x0, [@mcast1, @mcast2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0xd0}, 0x100) [ 785.284214] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 785.364144] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 785.424896] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 785.457845] audit: type=1800 audit(1574348697.256:332): pid=23667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16547 res=0 15:04:57 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 785.495502] protocol 88fb is buggy, dev hsr_slave_0 [ 785.500956] protocol 88fb is buggy, dev hsr_slave_1 15:04:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[0x1, 0x97, 0x0, 0x93d8, 0x1]}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004000200000008001b00000000b7"], 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf52\x14M\x16q\xa6\xcd\xf5\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19M\x90\'\xd8>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ysT<`\xd85&\xe5\xc2g\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xddfQ\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xe1\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdf$\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000380)=0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d623455e1ffb5ea3544438cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x420c0, 0x0) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB='0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) connect$can_bcm(r2, &(0x7f0000000080), 0x10) unshare(0x40000000) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') ioctl$TCSBRKP(r3, 0x5425, 0x0) [ 785.816252] 9pnet: Insufficient options for proto=fd 15:04:57 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x1000, 0x69, 0x11, 0x1a001000000}, [@ldst={0x5, 0x5, 0x5, 0x0, 0xf001}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f00000002c0)=""/204, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffdfe}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_delroute={0x5c, 0x19, 0x200, 0x70bd2a, 0x25dfdbfd, {0xa, 0x14, 0x20, 0x2, 0xfe, 0x2, 0xd82d27a15b75e647, 0x8, 0x100}, [@RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_EXPIRES={0x8, 0x17, 0xfffffff9}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x38b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x3a9b6ec6d4053a1b}, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockname$netrom(r3, &(0x7f0000000240)={{}, [@netrom, @null, @netrom, @bcast, @bcast, @default, @netrom, @bcast]}, &(0x7f00000004c0)=0x48) [ 785.897130] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 785.921768] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 785.947541] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 785.963929] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 786.040166] IPVS: ftp: loaded support on port[0] = 21 15:04:57 executing program 1: socket$inet(0x10, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@remote, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') syz_open_procfs(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000500)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000008000000", @ANYRES32=r9, @ANYBLOB="eeffff03000001000000214146120281ffff"], 0x20}}, 0x0) 15:04:57 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c6c6ff98409ca69723d2e3a66696c6530"]) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x1, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 15:04:57 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 786.134073] overlayfs: unrecognized mount option "loù„ Êir=.:file0" or missing value [ 786.165912] audit: type=1804 audit(1574348697.956:333): pid=23708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir515050617/syzkaller.AR5C0R/70/bus" dev="sda1" ino=16542 res=1 [ 786.212574] overlayfs: unrecognized mount option "loù„ Êir=.:file0" or missing value 15:04:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000240)={0x2, 0xff}, 0x2) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = request_key(&(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000640)='\x00', 0xffffffffffffffff) keyctl$describe(0x6, r2, &(0x7f0000000680)=""/42, 0x2a) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000380)=0x8477) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x1da9, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{0x9, 0x3f, 0x1, 0x401}, {0x1, 0x7, 0xff, 0x80000000}, {0x9, 0x40, 0x2, 0x4}, {0x3, 0x80, 0x5, 0xfffffc00}, {0x4, 0xf9, 0x6, 0x3}, {0x34, 0xff, 0x40, 0xfffffffe}, {0x5, 0x1, 0xbf, 0x401}]}, 0x10) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xffffffffffff8001, 0x14043) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f00000004c0)={{0x9, 0x2, 0x9, 0x6, 'syz0\x00', 0xe3f}, 0x6, 0xcdf297f1bbe9dca6, 0x80, r5, 0x8, 0x8, 'syz0\x00', &(0x7f00000002c0)=['/dev/swradio#\x00', '/dev/swradio#\x00', '/dev/swradio#\x00', '/dev/swradio#\x00', '/dev/swradio#\x00', 'selfvboxnet1nodevem1eth1\x92^-\x00', '-+cgroupselinuxvboxnet0wlan0\x00', '+eth0\xe9trusted+posix_acl_accessnodev$systemposix_acl_accessproc\x00'], 0xbe, [], [0x9, 0x3ff, 0x0, 0x100]}) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 786.268082] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 786.290110] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 786.315380] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 786.367871] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:58 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000be9aba0700"/20, @ANYRES32=0x0, @ANYBLOB="000004000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) [ 786.623800] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 786.650445] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 786.674254] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 786.703340] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x492, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="02", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r0, r1}, &(0x7f0000000240)=""/112, 0x208, &(0x7f0000000580)={&(0x7f0000000500)={'crc32\x00\x03\x00'}}) [ 786.734047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39614 sclass=netlink_route_socket pig=23735 comm=syz-executor.5 15:04:58 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x02', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @dev={0xac, 0x14, 0x14, 0x19}}}, @in={0x2, 0x4, @remote}], 0x2c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0x331) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00fbe500083aa03812553b095ee46be72a00000000a49573c4e0d3f9b67fdb943e3f2a92cd3bc808d9c775eb9009451d3f71551908000000462a56654f6e46d1bcc9c5239a29c8cb290715e6de280aa71cb18ed05506ed3a1d85b661ee55483ecd38f19e873ddfe8fff7b0de1dbc4845e552f9809d97b1e38b2bb959bf36c01ef0c76234762f33d4e834cbb6bad8910ecfe75c5bfb1d861dd2fb3d47aace519cac350803d247db3a2ccf4eb2cbbdded260a74b243328a00ff1c9fac65492654e3dd00a024d5c4c744c85f08b3d8cabf5d1a8845e774f"], 0xe5, 0x1) [ 786.870243] audit: type=1800 audit(1574348698.666:334): pid=23742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16543 res=0 15:04:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) recvfrom$llc(r1, &(0x7f0000000b80)=""/4096, 0x1000, 0x120, &(0x7f0000000200)={0x1a, 0x311, 0x2, 0x1, 0x3f, 0xfe, @dev={[], 0x1e}}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x9, 0x80}, {0x8001}]}, 0x14, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000780)={"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"}) creat(&(0x7f0000000180)='./file1\x00', 0x20) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:04:58 executing program 0: ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'batadv0\x00', 0x1000}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r3, 0x32, 0x0, 0x84003ff) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid_for_children\x00') ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000580)=0x44) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0\x00') semget(0x0, 0x3, 0x102) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x240080, 0x0) creat(&(0x7f0000000680)='./file0\x00', 0x0) r6 = socket(0x10, 0x2, 0x0) sendto(r6, &(0x7f0000000900)="120000001200e7ef077b1a3fcd00000200", 0x11, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)="8acdbc51fd55b4630373a7040000006ed76b010000800000000096e8d56bb00400000010a50609bb756634299c3b") ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f0000000380)) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:04:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000540)={0x0, 0x70, 0x7f, 0x5, 0x9, 0x1f, 0x0, 0x3ff, 0x80, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe099, 0x51b41858f69efc25, @perf_bp={&(0x7f0000000500), 0xe}, 0x2000, 0x1, 0x1, 0x6, 0x7, 0x9, 0x3f}) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r1, &(0x7f0000000480)=@pptp, &(0x7f0000000400)=0x80) r2 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @empty}, 0x2) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r4, 0x2007fff) r6 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) r7 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x6, 0x2000) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="0e6654da7a96bcaeed9dc97b9c23a7dd"}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbd3d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="4000af32ad1cda24b03d5b2e"]) sendfile(r3, r4, 0x0, 0x8000fffffffe) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) socket$inet6(0xa, 0x1, 0x56) 15:04:58 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6242, 0x0) clone(0x8000000101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='f2fs\x00c\x9b\xec\xe8Dv\xff\xd2\xd6\xc9LR\x12Df6\x1dA\xbc@\x1c\xf7\r\xfb4\xe2\n\x91\x91\xeb\x8d]\xbcy\xf7\xe0o\x1a%\x9e\xd6%\xdf\x85\x11-$\x8c9\x84\x0f\xe45=\x85\xa1\xa3\xa5\x87\xfa\xb5\xa5\x18\xda\xe0\xc53\xb1\\^\x12.\x03\x1a\xef\x00\x8f\x8d\xa8,\xe8\xc6\x8a\xdd\xee\x05#\x1d\rI^,\xe6\x80\x8aY\xa0\x8cB\x1d\xfa\xe3*\nWk\xcd\xd5y\xb4u\x7f\xc4\x8eP\x1dT\xbf\n\x1b\xe1\x01\xaa\xf3\xebu\xb8\xa8(\xb6\xf2\x1a\x86\x17\n\x8d\x82\x1a{q\xb1X&\xae\xf6\x15M\xff\x86&\xd2n~\xdd\xcft{xD.L1\x8c\xf19E\xdf\xe5\x80\xbb)\xfd)l\xb6\xfa\x1eP\x90:\xe4\xb3-B\xe4,\xed}\x10\x1b\xb7^\xcc\xeb\x91\xd4\x05B6\xcaC\xad!\x9aG\x8b\x04Z\x1es\xa1\x85\x0e\xed\xc3\x99', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x2, 0x800, 0x1f) r1 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x3ff}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x3d42886ec2065df3, 0x800, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @rand_addr="c8673f27467eddc774c1c3bfdf38acdd"}, @IFA_FLAGS={0x8, 0x8, 0x384}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000680)={'ip_vti0\x00', {0x2, 0x4e20, @multicast1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'netdevsim0\x00', r5}) syz_open_pts(0xffffffffffffffff, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x392, 0x5, &(0x7f00000005c0)=[{0xfffffffffffffffe, 0x0, 0x7}, {&(0x7f0000000300)="f26031aa0637bb7b0a13047131683c5a3ee41a456dab4137c0e0909ae20b8aa6f60df92106782b76f90d43348b8d1f2192b20b4c89fd5395b2363bf94000c1ec1322631225d3de165b95e1c9be36b39496b3d687ef4642bbe9979922c6ce8f0bf086dd6434d7cfa15a51551bfd6fa90acf8d56c5260cf63ef5e8a3848c4cba826fbaf160630c0f64fc36e40c116c4454d5c6ce83a93541984e89dd", 0x9b, 0x3f}, {&(0x7f00000003c0)="77df870db9715ca6285c6fdb5daca47598ec5fbcdbe9717156eb4237d6933ce60dcf4b0a504d2a134c282c875915ff635ca55dc1b0359c63fbf595bd9c6fba97f0077e631e810860a85b066502fde01a456595d46c0feb6f84eff44d817523a33011f63220778328aac7c414a2979d0ba2c76d397df9c50e238fced390a09b5114d15dd347e945a4", 0x88, 0xa6}, {&(0x7f0000000480)="b1e086bcf8316b1a95287881913ed67ac620d151e3c91fbd815a7c35f3ad958afb5d313c868011f28e5a1f481c600409e3ac3c06759543db9c34aab7c4eaeacb475a029602a4b19c997a5df6dd0f65f9386111712a862e48c4197328758f9b6d23a568c4927f822b897503118e01ff1555d479755c2192ff4f5667ea3d0bd985b0dee00eb7a8e02ff62f1be696100feedb7a", 0x92, 0x8}, {&(0x7f0000000540)="ed18efcd9470a752deca36cfaeb156dec373e586070fba3b7e3ecfe195c9380ff02d410249ce4273e5e34d6d689168e18316964110602a5b7425cbe00edcb5a49a9501bdc7007743e01e6500cd22a447c90304c3d6d2dbfea685dfa178aaf46458a4241d72d048886e65197b8a03b05249a24934224c52d8e6a78a1c81f652", 0x7f, 0x9dfc}], 0x208000, &(0x7f0000000900)=ANY=[@ANYBLOB="7573726a2c6578706f73655f70726976726f6f742c00f7b1792fe899046262cdb04a1a6c1c9710774f66432ab8c3e6de62f6bd530fd9372f3fbbba0c0f012998624dce1447ad23c62f09f02c968b88b46e4b3900fda55bf8dbb7a2566e7ef68b9ab03ed6df1d0bb6e816f0455810be110e7ee7618e5a47eec8a13fb15551383164d2a550d801fea83c5c361ce5197029a9fa2e2ad2627c9a1a2278d24aa61f7b6c809d0749273ab31f0519754929e94095b22fde81a5152b11718baa8f"]) lsetxattr$trusted_overlay_upper(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='trusted.overlay.upper\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="00fb6b047f4d316c8f70739487cf22180427337739ba7c04739f8a21f513deb562d8c6eb8d004f77e721dc325eb7b84ca0294e68b2e7ad52b7768b05e54601000000000000000af023cf61ad791074bfe57a73407a3a7ff5620a4f1b41480279399fb4769f0d1d6255623b"], 0x6b, 0x3) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x4, 0x44010, r6, 0xffffc000) socket$unix(0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) 15:04:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x4000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000300)=0x1, 0x675) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r1, r2, 0x0, 0x80000003) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000058020000580200000000000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000fdffffffffffffff0001000000000000000000dfffffffff06ffff000000000000000000000000000000000000000000000000000000000000000000c584"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000000000006ac1414bb0400000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000180c200000f0000000000000000000000000000000000000000000000000000ac1414bb00004f9008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d0) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff02, 0x420ffe0, 0x0, 0xfffffffffffffd37) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) chown(0x0, 0x0, 0x0) getpgrp(0x0) socket$vsock_stream(0x28, 0x1, 0x0) getresgid(0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000240)={0x0, {0x8, 0x8}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x4}, &(0x7f0000000100)=0xffa1) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r6, 0x3ff}, &(0x7f0000000180)=0x8) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) [ 787.152946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 15:04:59 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\xc0', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 787.245093] print_req_error: I/O error, dev loop2, sector 0 [ 787.252571] F2FS-fs (loop2): Unable to read 1th superblock [ 787.270025] print_req_error: I/O error, dev loop2, sector 8 [ 787.276969] F2FS-fs (loop2): Unable to read 2th superblock [ 787.285665] print_req_error: I/O error, dev loop2, sector 0 15:04:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001900)={0x0, 0x0}, &(0x7f00000018c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="7489616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=r3, @ANYBLOB=',\x00']) gettid() setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) [ 787.292214] F2FS-fs (loop2): Unable to read 1th superblock [ 787.315094] print_req_error: I/O error, dev loop2, sector 8 [ 787.321739] F2FS-fs (loop2): Unable to read 2th superblock 15:04:59 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x11, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x5f5e0ff}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x49c, &(0x7f0000002880)=""/251}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 787.356639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 15:04:59 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x0f', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:04:59 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 15:04:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="25bca274769e620aa734fa0095e0610687463915e38802a9d8aea872943afd874e2f98b479a7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)={[{@init_itable='init_itable'}]}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1ff, 0x10480) connect$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0x9, 0x1, 0x20, 0x1, 0x0, 0x3f}, 0x4e}, 0xa) 15:04:59 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 787.913450] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 787.967283] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 787.990798] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:04:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000280)=0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 15:04:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185500, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x194, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) [ 788.071128] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:04:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffec5, 0x0, 0x0, 0xffffffbc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000280)="c744240060000000c744240200000000c7442406000000000f011c24450f22016566420f38805efbc48309699df3000000a5c4c1fc50fb66baf80cb86757f986ef66bafc0cb000eec4a17e1134be48b812000000000000000f23d80f21f835800000200f23f8660ffa3ab9980a0000b800000000652e2e470fc7ad12b0fae90f30", 0x81}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000340)={{0x80, 0x3f}, 'port0\x00', 0x82, 0x1, 0x56b07a0c, 0x3, 0xcb, 0x2, 0xaa3, 0x0, 0x2, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 788.174486] vhci_hcd: default hub control req: 0200 v0000 i0000 l0 15:05:00 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:05:00 executing program 1: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0) wait4(r7, 0x0, 0x40000000, 0x0) r8 = getpgid(r7) r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x80000000000000, 0x0, 0x4}, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r11 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r12 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r13 = fcntl$dupfd(r11, 0x0, r12) r14 = gettid() ioctl$BLKTRACESETUP(r13, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x81, 0x1, r14}) r15 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r16 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r16, 0x0, 0x0) r17 = getpgrp(0x0) waitid(0x0, r17, &(0x7f00000002c0), 0x8, 0x0) r18 = getpgid(r17) r19 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r19, 0x8904, &(0x7f0000000000)=0x0) r21 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz0\x00', 0x200002, 0x0) r22 = openat$cgroup_ro(r21, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r23 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r24 = inotify_init1(0x0) r25 = gettid() fcntl$setown(r24, 0x8, r25) r26 = getpid() r27 = socket(0xa, 0x3, 0x8) r28 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r27, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r28, &(0x7f0000000080)={0x0, 0xfffffffffffffe90, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r27, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r30 = gettid() waitid(0x2, r30, &(0x7f0000000040), 0x20000000, &(0x7f0000000480)) sendmsg$key(r27, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r29, @ANYRESDEC=r30]], 0xfffffffffffffe56}}, 0x20004850) r31 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r32 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r33 = dup2(r32, r31) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r33, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r33, 0xc08c5334, &(0x7f0000000200)) r34 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r34) timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, @tid=r34}, 0x0) kcmp(r34, r34, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r34, 0x0, 0x0) r35 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r34, r35, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r36}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r30, r33, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r36}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r36}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r36}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r26, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r36}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r36}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r25, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00', r36}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r23, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r36}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r22, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r36}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r20, r19, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r36}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r18, r16, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', r36}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r36}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r14, r15, 0x0, 0xd, &(0x7f0000000040)='eth0.trusted\x00', r36}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000040)='GPLvmnet0\\]GPL&systemeth1\x00', r36}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', r36}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r9, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)='*\x00\x00\x00/Ppp\x00', r36}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r8, r5, 0x0, 0x3, &(0x7f0000000100)=',)\x00', r36}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r36}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0xffffffffffffffff, r2, 0x0, 0xc, &(0x7f0000000300)='selinux-em0\x00', r36}, 0x30) rt_tgsigqueueinfo(0x0, r37, 0x32, &(0x7f0000000500)={0x0, 0x1, 0x2}) [ 788.533735] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 788.580369] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 788.637101] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 788.683571] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 788.756270] IPVS: ftp: loaded support on port[0] = 21 15:05:00 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:05:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000180)={0x20, 0x3, 0x8, 0x100000001}) ftruncate(r3, 0x2007fff) r5 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x96440) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000240)={0x40, 0x4, [0x0]}) sendfile(r2, r3, 0x0, 0x8000fffffffe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48811}, 0x0) epoll_create(0x8) 15:05:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00'/14) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'bond_slave_1\x00', 0x7}) fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x1) getdents64(r3, &(0x7f0000000100)=""/4102, 0x1006) getdents64(r3, 0x0, 0x0) [ 789.237407] IPVS: ftp: loaded support on port[0] = 21 15:05:01 executing program 2: mkdir(&(0x7f0000000240)='./bus\x00', 0x28) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 789.285635] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 789.331651] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 789.342253] audit: type=1800 audit(1574348701.136:335): pid=23851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16535 res=0 [ 789.394484] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 789.419420] overlayfs: failed to resolve './file1': -2 [ 789.515562] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 789.655272] net_ratelimit: 22 callbacks suppressed [ 789.655279] protocol 88fb is buggy, dev hsr_slave_0 [ 789.665466] protocol 88fb is buggy, dev hsr_slave_1 [ 790.135262] protocol 88fb is buggy, dev hsr_slave_0 [ 790.140644] protocol 88fb is buggy, dev hsr_slave_1 [ 790.775247] protocol 88fb is buggy, dev hsr_slave_0 [ 790.780537] protocol 88fb is buggy, dev hsr_slave_1 [ 790.935246] protocol 88fb is buggy, dev hsr_slave_0 [ 790.940379] protocol 88fb is buggy, dev hsr_slave_1 [ 791.015264] protocol 88fb is buggy, dev hsr_slave_0 [ 791.020416] protocol 88fb is buggy, dev hsr_slave_1 [ 791.287025] device bridge_slave_1 left promiscuous mode [ 791.298906] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.346166] device bridge_slave_0 left promiscuous mode [ 791.359160] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.548318] device hsr_slave_1 left promiscuous mode [ 791.609816] device hsr_slave_0 left promiscuous mode [ 791.669228] team0 (unregistering): Port device team_slave_1 removed [ 791.689977] team0 (unregistering): Port device team_slave_0 removed [ 791.720522] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 791.780214] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 791.954511] bond0 (unregistering): Released all slaves [ 792.050203] IPVS: ftp: loaded support on port[0] = 21 [ 792.316893] chnl_net:caif_netlink_parms(): no params data found [ 792.411412] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.422558] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.430892] device bridge_slave_0 entered promiscuous mode [ 792.443026] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.458932] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.486244] device bridge_slave_1 entered promiscuous mode [ 792.516279] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 792.547890] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 792.589730] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 792.610402] team0: Port device team_slave_0 added [ 792.629137] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 792.650019] team0: Port device team_slave_1 added [ 792.659311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 792.686189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 792.748121] device hsr_slave_0 entered promiscuous mode [ 792.785556] device hsr_slave_1 entered promiscuous mode [ 792.836123] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 792.843727] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 792.890081] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.896535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.903215] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.909714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.009534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.029082] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 793.050032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 793.058203] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.076014] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.110363] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 793.125246] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.158840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 793.185383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 793.193459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 793.215879] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.222373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.238207] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 793.255916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 793.263963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 793.275696] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.282195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.328207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 793.345659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 793.358076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 793.365043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 793.398769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 793.415443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 793.423525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 793.448795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 793.456227] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 793.463967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 793.489870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 793.511829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 793.519814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 793.531448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 793.551730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 793.568624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 793.577022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 793.599265] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 793.615388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 793.643000] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 793.667440] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 793.673830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 793.681696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 793.710429] 8021q: adding VLAN 0 to HW filter on device batadv0 15:05:05 executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x103000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x905a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 15:05:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) clone(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@remote, @empty, @loopback, 0x0, 0x8}) r3 = fcntl$dupfd(r1, 0xa0f, r2) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000000)={0x14e00000, 0x7, "b6f075e23b73273fa3b8ea261e1d70adca7341be209a00dfc4cbd2ef939b8bf0", 0x0, 0x4, 0xfffffffe, 0x0, 0x1a0}) 15:05:05 executing program 0: r0 = semget$private(0x0, 0x1, 0x200) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000002c0)=""/176) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000014000105000020000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200e0000001"], 0x20}}, 0x0) bind$packet(r1, &(0x7f0000000140)={0x11, 0x10, r5, 0x1, 0x7, 0x6, @remote}, 0x14) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) link(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000200)='./bus/file1\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) utimensat(0xffffffffffffff9c, &(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0) unlink(&(0x7f00000001c0)='./bus/file0\x00') 15:05:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000240)={0x18, 0x0, 0x2, {0x8001}}, 0x18) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6609) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000002c0)=0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x7, 0x7, 0x2, 0x5, 0x0, 0xffffffff80000001, 0x8000, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x0, 0x401}, 0x21061, 0x1, 0x55c, 0x7, 0x8000, 0x7, 0xfffe}, r3, 0x10, r4, 0x8) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x8001, 0x3, 0x0, 0x0, 0x3, 0x7, 0x20, 0x8, 0x0, 0x80, 0xafce, 0xffffffff, 0x0, 0x3, 0x1, 0x9, 0x0, 0x3, 0x0, 0x0, 0x401, 0x9, 0x9, 0xff, 0x3f, 0xffffffff, 0x2, 0x9, 0x4]}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x54000, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000140)) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x54000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x54000, 0x0) r7 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x6da3, 0x400080) ioctl$SIOCRSSL2CALL(r7, 0x89e2, &(0x7f0000000200)=@null) ioctl$VIDIOC_G_JPEGCOMP(r5, 0x808c563d, &(0x7f00000004c0)) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x0) write$P9_RWALK(r8, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r9 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x4, 0xfffffff6, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r8, r9) 15:05:05 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 793.881556] audit: type=1400 audit(1574348705.676:336): avc: denied { map } for pid=23881 comm="syz-executor.4" path="/dev/binder4" dev="devtmpfs" ino=1437 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 794.001098] overlayfs: unrecognized mount option "upperdar=./file0¸·E‹)þWÆTØhÉÔðÙgYNáž¿v[L<8@eÉmr9yОWtÿH¸W;•c¢©E³¥a+Å´[ç·“ˆìWBF0BÒM{ÔÔrù採€ødg÷ã-Åï·§¡~" or missing value [ 794.123952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23891 comm=syz-executor.0 [ 794.149532] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 794.160658] overlayfs: unrecognized mount option "upperdar=./file0¸·E‹)þWÆTØhÉÔðÙgYNáž¿v[L<8@eÉmr9yОWtÿH¸W;•c¢©E³¥a+Å´[ç·“ˆìWBF0BÒM{ÔÔrù採€ødg÷ã-Åï·§¡~" or missing value [ 794.205371] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 794.220864] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:05:06 executing program 0: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0xfffffddb, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x6, 0x1, @tid=r0}, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f00000002c0)={0x8, "d358e9dcb8d3c7d866125c96fe917c882b97cf0848c2a584a2b1892407d052b5", 0x3, 0x0, 0x5, 0x80008, 0x5000022, 0x2}) timer_gettime(r1, &(0x7f0000000280)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010202000270f7f8", 0x16}], 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000340)=0x380, 0x4) r5 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SIOCAX25GETINFO(r5, 0x89ed, &(0x7f00000001c0)) umount2(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff9}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) [ 794.256609] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:05:06 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:05:06 executing program 1: fchdir(0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'\ayz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\f\x00\x00\xfe\xff\xff\xff\x05\xff\xff\xff\x92\xc0\x00\x00\x05\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cc9]}, 0x45c) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000080)=""/57) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x70d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000d0400"/20, @ANYRES32=r3, @ANYBLOB="9316ecb2cf80b99f21be96babbd8ca303ac48cbe3bc46688b54805bbd1a4497bc47875a2ca4ca2a97b3824946223fb8e893c93f72669e4b1dcaad9bb933bf28d5b5b40ba2570fd75ee77d388e13dc7a3b38d0155daf1f748b41d3f2a41a3d883f3406878c2d36219b4ed82bb6ce2788ebd7d2b54a451c0f60edfee"], 0x20}}, 0x0) [ 794.619870] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 794.677930] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 794.714751] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 15:05:06 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) getsockname$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x4, 0x7ff, [{0x4, 0x0, 0x6}, {0x0, 0x0, 0xca9}, {0x5, 0x0, 0x8}, {0x4, 0x0, 0x2baf}]}) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) 15:05:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="ebf1649d4b2f5c1292b95310b596a7c88ef3f8aae39c46b83c3c7c0a0d5ad1cad96a2180e4796054a69d04002ce2e974f3953da73b12fe0e3039c58f6d52a34ca2733f69bae5f47de7e0a1c6e760000400000000000011654205cd0000"], 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="a43f97f95e587f921e41635f68e47c7a10bc918dba707335df9c4fe2e3dd545ee4935fc838fdcc46a7540a012dcf04a12f99172a6f3583cd5498000448f3ae533c2832496e9b0a050d5e4e05f5f8188edecc091727ed7a25a91998bf61aeec90e8718f9aa9fd5da3aa3181c0080975dee42b7d8686ca8f92f314380c2a02a90e6efeb213cd260c116f495d9569a33c798d369967f6690fd59a8b3bd789702d552fe262fe738e874609724467e7d1be8518f803b96022e1f0f1de7d3720bec96ede00"/206], 0x10098) sendto$inet6(r1, &(0x7f0000000100)='3', 0x1, 0x0, 0x0, 0x0) write(r1, &(0x7f00000001c0)='s', 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendto$netrom(r3, &(0x7f0000000240)="6a43a381c01d02dabf08c7ae7a880110c0619efd937c77f172cbf5481723731d3616d0be6c8c3b347b08545a970cb8c37552d4fd28de9b768755e1d39c6a7c32f4e566", 0x43, 0x10, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000140)={[{0xbd1, 0x1, 0xfe, 0x40, 0x42, 0x40, 0x1, 0x81, 0x3, 0x8, 0x4, 0x7, 0x1}, {0x6, 0x1000, 0x0, 0x4b, 0x1, 0x0, 0xa2, 0xe5, 0x2, 0x4d, 0x3, 0x4}, {0x5, 0x8, 0xff, 0x81, 0x9, 0x20, 0x0, 0x9b, 0x1, 0x4, 0x8, 0x7, 0x7}], 0x1}) [ 794.750625] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:05:06 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 794.813598] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 794.935277] net_ratelimit: 24 callbacks suppressed [ 794.935285] protocol 88fb is buggy, dev hsr_slave_0 [ 794.945450] protocol 88fb is buggy, dev hsr_slave_1 [ 794.948557] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 794.993725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 795.077958] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 795.095218] protocol 88fb is buggy, dev hsr_slave_0 [ 795.100373] protocol 88fb is buggy, dev hsr_slave_1 [ 795.127670] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 795.150226] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock 15:05:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000007c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\xd7\x8f\x1f\x81\xdc\x1b\x7f\x8f{\xdd\xcc\x8bRA\xda\x89k\xcbO/\xfa\r\xec\xbe\xfa\xcbP\xd8Efn\x00s\xc2Z\f\xcc\x11#\xcd\xfb\x94\xd6>\xb9\xd2\a\xf2tb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x99\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe3X\xc8\x82\xf0j\xd25\xe8$\xdc\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01b3\xd8\xb4CE7s\xe4\xa0u(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00'/302, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xff) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10}, 0x18) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xff, 0x80) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c6530200ac94555a7638343ec847f99594ef8e2ae744648565ab26beb1f37864185f4d37a08741a6bc17d9c5400000000000000000000000000004b7b61be30a122e31c4dd28cf049d88d811c959bba3e8411b03163571da0942406c807b20bc8bce35cc22d21e267b047b349b889a59a"], 0x78) close(r4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x8b28a333b123f86a}, 0x10) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fchdir(r6) write$binfmt_script(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x8b) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000240)={r4, r5}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @local}, 0x10) lsetxattr$security_evm(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000400)=@sha1={0x1, "f66dafab00f9d070f2fddb72124ea4444aa1028c"}, 0x15, 0x0) sendfile(r0, r0, 0x0, 0x40fdf) [ 795.175548] protocol 88fb is buggy, dev hsr_slave_0 [ 795.180740] protocol 88fb is buggy, dev hsr_slave_1 [ 795.188297] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 15:05:07 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\xfc', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:05:07 executing program 0: socket(0x1, 0x1, 0x0) pipe(&(0x7f0000000140)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f0000000040)=""/10, 0xa) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 795.420301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:05:07 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:05:07 executing program 2: syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x8ce2c89f98fdd8b6) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) 15:05:07 executing program 4: ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x19, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{0x8, 0x0, r0}, {}], {0x10, 0x5}}, 0x44, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000080)=0x6, 0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) [ 795.732074] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 795.755355] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 795.775433] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 795.836419] overlayfs: conflicting lowerdir path [ 795.846279] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 795.851206] overlayfs: workdir and upperdir must reside under the same mount [ 795.875210] [ 795.876893] ====================================================== [ 795.883306] WARNING: possible circular locking dependency detected [ 795.889640] 4.19.84 #0 Not tainted [ 795.893193] ------------------------------------------------------ [ 795.899522] syz-executor.2/23972 is trying to acquire lock: [ 795.905438] 000000004c002253 (&mm->mmap_sem){++++}, at: __might_fault+0xfb/0x1e0 [ 795.913359] [ 795.913359] but task is already holding lock: [ 795.919346] 000000004f7d20b0 (&rp->fetch_lock){+.+.}, at: mon_bin_read+0x60/0x640 [ 795.927070] [ 795.927070] which lock already depends on the new lock. [ 795.927070] [ 795.935418] 15:05:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000080)={0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}]}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f00000001c0)) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b64690ed22e2f66696c65312c6c6f776572ae9a723d2e2f66696c65305c00"]) removexattr(&(0x7f0000000c00)='./bus/file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') [ 795.935418] the existing dependency chain (in reverse order) is: [ 795.943048] [ 795.943048] -> #1 (&rp->fetch_lock){+.+.}: [ 795.948822] __mutex_lock+0xf7/0x1300 [ 795.953403] mutex_lock_nested+0x16/0x20 [ 795.958032] mon_bin_vma_fault+0x73/0x2d0 [ 795.962724] __do_fault+0x111/0x480 [ 795.966885] __handle_mm_fault+0xf6d/0x3f80 [ 795.972109] handle_mm_fault+0x1b5/0x690 [ 795.976731] __get_user_pages+0x609/0x17a0 [ 795.981521] populate_vma_page_range+0x20d/0x2a0 [ 795.986824] __mm_populate+0x204/0x380 [ 795.991251] vm_mmap_pgoff+0x213/0x230 [ 795.995727] ksys_mmap_pgoff+0x4aa/0x630 [ 796.000411] __x64_sys_mmap+0xe9/0x1b0 [ 796.004844] do_syscall_64+0xfd/0x620 [ 796.009194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.014910] [ 796.014910] -> #0 (&mm->mmap_sem){++++}: [ 796.020486] lock_acquire+0x16f/0x3f0 [ 796.024831] __might_fault+0x15e/0x1e0 [ 796.029332] _copy_to_user+0x30/0x120 [ 796.033672] mon_bin_read+0x329/0x640 [ 796.038012] do_iter_read+0x490/0x640 [ 796.042351] vfs_readv+0xf0/0x160 [ 796.046343] do_preadv+0x1c4/0x280 [ 796.050431] __x64_sys_preadv+0x9a/0xf0 [ 796.054944] do_syscall_64+0xfd/0x620 [ 796.059287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.065022] [ 796.065022] other info that might help us debug this: [ 796.065022] [ 796.073182] Possible unsafe locking scenario: [ 796.073182] [ 796.079241] CPU0 CPU1 15:05:07 executing program 1: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/236, 0x0, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000003c0)=0x4) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r5, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r4, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 796.083909] ---- ---- [ 796.088579] lock(&rp->fetch_lock); [ 796.092318] lock(&mm->mmap_sem); [ 796.098388] lock(&rp->fetch_lock); [ 796.104638] lock(&mm->mmap_sem); [ 796.108201] [ 796.108201] *** DEADLOCK *** [ 796.108201] [ 796.114277] 1 lock held by syz-executor.2/23972: [ 796.119031] #0: 000000004f7d20b0 (&rp->fetch_lock){+.+.}, at: mon_bin_read+0x60/0x640 [ 796.127113] [ 796.127113] stack backtrace: [ 796.131636] CPU: 1 PID: 23972 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 796.138570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.147933] Call Trace: [ 796.150576] dump_stack+0x197/0x210 [ 796.154345] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 796.159742] __lock_acquire+0x2e19/0x49c0 [ 796.163918] ? mark_held_locks+0xb1/0x100 [ 796.168091] ? mark_held_locks+0x100/0x100 [ 796.172346] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 796.177473] ? __lock_is_held+0xb6/0x140 [ 796.181557] lock_acquire+0x16f/0x3f0 [ 796.185381] ? __might_fault+0xfb/0x1e0 [ 796.189379] __might_fault+0x15e/0x1e0 [ 796.193285] ? __might_fault+0xfb/0x1e0 [ 796.197270] _copy_to_user+0x30/0x120 [ 796.201106] mon_bin_read+0x329/0x640 [ 796.204933] do_iter_read+0x490/0x640 [ 796.208752] ? dup_iter+0x270/0x270 [ 796.212415] vfs_readv+0xf0/0x160 [ 796.215888] ? compat_rw_copy_check_uvector+0x400/0x400 [ 796.217832] syz-executor.1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 796.221269] ? kasan_check_read+0x11/0x20 [ 796.221287] ? __fget+0x367/0x540 [ 796.240162] ? iterate_fd+0x360/0x360 [ 796.243953] ? kasan_check_read+0x11/0x20 [ 796.248349] ? _copy_to_user+0xc9/0x120 [ 796.252322] ? __fget_light+0x1a9/0x230 [ 796.256285] do_preadv+0x1c4/0x280 [ 796.259813] ? do_readv+0x370/0x370 [ 796.263430] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 796.268178] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 796.272925] ? do_syscall_64+0x26/0x620 [ 796.276902] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.282264] ? do_syscall_64+0x26/0x620 [ 796.286233] __x64_sys_preadv+0x9a/0xf0 [ 796.290198] do_syscall_64+0xfd/0x620 [ 796.294004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.299182] RIP: 0033:0x45a639 [ 796.303321] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 796.323529] RSP: 002b:00007f8bd9466c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 796.332015] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045a639 [ 796.339275] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003 [ 796.346539] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 796.353798] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8bd94676d4 [ 796.361057] R13: 00000000004c7eb1 R14: 00000000004dddd0 R15: 00000000ffffffff [ 796.368940] protocol 88fb is buggy, dev hsr_slave_0 [ 796.374044] protocol 88fb is buggy, dev hsr_slave_1 [ 796.375227] protocol 88fb is buggy, dev hsr_slave_0 [ 796.384215] protocol 88fb is buggy, dev hsr_slave_1 [ 796.390682] kobject: 'loop1' (00000000f4125086): kobject_uevent_env [ 796.408878] kobject: 'loop1' (00000000f4125086): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 796.422255] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 796.425951] kobject: 'loop0' (0000000000a34441): kobject_uevent_env [ 796.447961] CPU: 0 PID: 23987 Comm: syz-executor.1 Not tainted 4.19.84 #0 [ 796.452026] kobject: 'loop0' (0000000000a34441): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 796.454949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.473831] Call Trace: [ 796.476442] dump_stack+0x197/0x210 [ 796.480094] dump_header+0x15e/0xa55 [ 796.483831] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 796.489226] ? ___ratelimit+0x60/0x595 [ 796.493117] ? do_raw_spin_unlock+0x178/0x270 [ 796.497607] oom_kill_process.cold+0x10/0x6ef [ 796.502115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 796.507680] ? task_will_free_mem+0x139/0x6e0 [ 796.512183] out_of_memory+0x362/0x1330 [ 796.516163] ? do_raw_spin_unlock+0x178/0x270 [ 796.520745] ? oom_killer_disable+0x280/0x280 [ 796.525253] mem_cgroup_out_of_memory+0x1d2/0x240 [ 796.530107] ? memcg_event_wake+0x230/0x230 [ 796.534445] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 796.539699] ? cgroup_file_notify+0x140/0x1b0 [ 796.544224] memory_max_write+0x169/0x300 [ 796.548421] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 796.553978] ? mem_cgroup_write+0x360/0x360 [ 796.558317] ? lock_acquire+0x16f/0x3f0 [ 796.562372] ? kernfs_fop_write+0x227/0x480 [ 796.566756] cgroup_file_write+0x241/0x790 [ 796.570993] ? mem_cgroup_write+0x360/0x360 [ 796.575340] ? kill_css+0x380/0x380 [ 796.578967] ? __might_fault+0x1a3/0x1e0 [ 796.583030] ? kill_css+0x380/0x380 [ 796.586663] kernfs_fop_write+0x2b8/0x480 [ 796.590804] __vfs_write+0x114/0x810 [ 796.594506] ? kernfs_fop_open+0xd80/0xd80 [ 796.598743] ? kernel_read+0x120/0x120 [ 796.602642] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 796.608191] ? __inode_security_revalidate+0xda/0x120 [ 796.613438] ? lock_acquire+0x16f/0x3f0 [ 796.617414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 796.623048] ? check_preemption_disabled+0x48/0x290 [ 796.628164] ? rcu_sync_lockdep_assert+0xd/0xb0 [ 796.632854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 796.638402] ? __sb_start_write+0x1a9/0x360 [ 796.642719] vfs_write+0x20c/0x560 [ 796.646253] ksys_write+0x14f/0x2d0 [ 796.649869] ? __ia32_sys_read+0xb0/0xb0 [ 796.653928] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 796.659295] __x64_sys_write+0x73/0xb0 [ 796.663188] do_syscall_64+0xfd/0x620 [ 796.666995] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.672179] RIP: 0033:0x45a639 [ 796.675373] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 796.694281] RSP: 002b:00007f32711bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 796.701986] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 796.709255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 796.716535] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 796.723812] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32711bc6d4 [ 796.731069] R13: 00000000004caf76 R14: 00000000004e3440 R15: 00000000ffffffff 15:05:08 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x4}, 0x4) write(r0, &(0x7f0000000340), 0x41395527) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000100)=0x5) syz_mount_image$xfs(&(0x7f0000000240)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000080)=ANY=[@ANYBLOB="72746465763d2e2f66696c653028009c850635ad410b9c6009c7a5f2726504dd13d55a96d9673065dbe656e867ae3c6abc2fb2a5d50aa0e7a4acefc7df9f9889d7680603dd6b3ddb98b53c9435cf4a6ee1"]) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0x6, 0x4) [ 796.744046] kobject: 'loop4' (000000004643c0f2): kobject_uevent_env [ 796.765831] kobject: 'loop4' (000000004643c0f2): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 796.776532] kobject: 'loop3' (00000000a5db3557): kobject_cleanup, parent (null) 15:05:08 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:05:08 executing program 2: syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x8ce2c89f98fdd8b6) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) [ 796.795265] kobject: 'loop3' (00000000a5db3557): calling ktype release [ 796.799505] kobject: 'loop2' (000000005dad9ea9): kobject_uevent_env [ 796.808679] kobject: 'loop3': free name [ 796.817949] overlayfs: unrecognized mount option "workdiÒ./file1" or missing value [ 796.826513] Task in /syz1 killed as a result of limit of /syz1 [ 796.833798] memory: usage 17004kB, limit 0kB, failcnt 0 [ 796.842583] kobject: 'loop2' (000000005dad9ea9): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 796.859391] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 796.865273] kobject: 'loop3' (000000002d802301): kobject_uevent_env [ 796.875608] kobject: 'loop3' (000000002d802301): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 796.878453] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 796.914813] kobject: 'loop0' (0000000000a34441): kobject_uevent_env [ 796.924687] kobject: 'loop0' (0000000000a34441): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 796.942434] Memory cgroup stats for /syz1: cache:60KB rss:10928KB rss_huge:10240KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:10952KB inactive_file:4KB active_file:8KB unevictable:0KB 15:05:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x760025) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x7ba99ea286be877d}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x7f, @local}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000000180)}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000640)="c2efd2507b62a223b33947403f066c3883a89ee60ac5ba811f05b1417da1834cbbc12eccc23574c80b7cb9546c93d8972746be5773afae5b43c1452067f4dd2be141687d80bd2803ec40ffe475fd130d833de17b2b37fbace3b2f97a1df8c580d2defee2efbf2e6f7e145384ca82b2717f20c0765b02bb5f65497709c8c7453c7fe92ebc03cccb8b0c70d372cbb177a2c207aeb3f6b769d8a90097a252fd59f418594d8a65dd55c6e7303a1f5282be5db760098c080dfea7ddf8573b338cc90818b2eb91a4748119ee51b97b74c986b549052b693ece69f6661825d6d49eb93b64f9c1d7bee9b1ca49c2e05e29f7e72c499784f039f36a2918c01541ab9fc479f0c8c3584b59d622b128a7daf29d3d8dbe8f1fc26f86ed88da6d2f4c26ba8b1597fbfcdee356c93bd93830b9e61faed952dc8a5b6929bc3e96116e7a3fd9ac6b5d15b69e7521c4ea560e40056daf2c569c17b0e8ae73b43e56e58017ffa0ed2a21e727fd1bbdea6d1bd9bf0bd14a76d6a9b0c2573385ede40d4c7e2fe2a7f0d066b93c23105d5702a3b6b41237586ed04ea0ac603db6a6f780f74ff6936de813ab3b1c0e7b5170f3bc0cf9dbe495936f6c2c5a9c600fa07d0f22d33d675e43f160530a2bd7287eebf032a17c71f1060e1e68ba71cd1298c8475d87e9fd67bc2c04feaf0d963d8a43b36909701fab7a45d10e37412ec81e315190ad1abbe892f43f5ce7fd4bf6bc087c7d69ebe7e781062bf41282a6c763252721b089b215095332415e7f834e938e5ba7234f93fa4f057f2f32ef6b9345c655d86185592c51bcf830956a7e2be598c50f80ee46f65c9d33d0ca999579f77a67058cbb586fccee466e682b4b509767789e26c01d6bd970d2bfcd31c2d63e0a73cc1b3cac55973197d77d858da84df961c7a0eac3bb3f18172411afd3beb89bc4e9d71b0715835011b71e2d1e65ba933880dcc4f4a77a6c508db6474676fd54a6b68716d4aa16664e6b0f4a5b8e7e1f9263a69dc019cfc31120ca662e9388e434683b6a44b72e86f84d25be3d999ea5381ad0539a74097f34b3b2a5c5001633444b0c5c6e78a0929f1f999d1e838f06618bb0ff9c7a45495548e8f00a499e9a00d4b89c78b0ef99b81685b6f628e15177e19c245238cb53595eaa9d4eec45f9a7807ef7ee4c36b4ff4006f1d91c5e8f8936368b7d40599b547d20ce5ee954fe58db502b8e0a704c66f62915f26c9ba8a30fe07f5995fd8a7e6531d8b238d971d4a7ea4c7aa980706bce9eb0888c121842a385015c5b2ee90e2233e7af4ae6e40acf41e0c470269c2ecec386d097a80faa04ee44cb336c2068c19fcca0d2a41178b897dc65e2d19c53778ad20431e3192d65c158614b80bf1711c342cf48728b6b10938845b1ea357d4d44dac485962b9be97a73c2b3877c26a4ad6275e4901f9d871164c08387b5ba50c22df736f4d2403e26f0f102e80dbffabbf9acbe019f2835c9175ee06ba59c6074bf1989358ecca2512a8d7fbf0d02738853c88ff028affeca9a8b0f65cf51086c41dbd830f863b1f19da3689208c2378134b9f84eaf203650f2730f3498f73b7a6cc51bf1d17bc1c637130f109b407879cfdd5591c2ca5398929563e930cbdce5b52646c73519f7f77e47caae009f9ebe0944cd5268f0a428df2ead172619a38db21295e2acf38abd87d6210d5a6df86759ffc712101536c046b49722b28fd0edeb1d383a1caf9e78b5473e52a45c21a94da8433b57e648a26dadf87d1797959650eb1d41d3520cfb564484c9015a8efd17997c215a15720582884604993344d1ccc82f77c89f794c060c3bf0d842709808a3f58a9a88c755fa9a08683678ce4417872add9402cfd289302da47dc667c6a252a16d69f7080c96e2bc05b75b2731c5ec673428438051650e948e998303ad3142f10b74436f0d5f1643fa32285cd49fb849feb03bd035ed6cb8588ae1e02b85b663b5f2a5345d3fe802a9c9b2c52e70f8bea708a36777ebca60b6428e767a33a16c406eb597efe5cb7d7eae40a68f9726a35ddb9e272fa61f88496ba33a72eb9b67933b8744b64c91476d7451960e59c59a70b51ff5b61adcb122a018c1a89f23f7aa0ec499ebf35fc8afbe73fad231d9ba5b7efa6c4afec8dce28b3aca7c469bd1014ca294ecc0c76b20f8cf1e14cdaf428ccb5e03b6d0b5f4676c5bd311729f6d40f0813755b1e8ddd8434fcc429d3a870eb8004a20b6461ac780473b10145ff9b649a49558183a1b6321cb0a418b28e8cd0852727bcf496a382c5c098aa6a97d86d1b054e412e9954a48ea4531a56736c44cb36a60ff61fe51b92de355805ebae827e504e794ced75ef5eb55a0450febf28194f75eebbfa710ab3d3a19f7ffe8e757076e0102fb3030084afab8550cd265a31fa635934e5d8641e5c1db498f75537d11ef19a2b5532141a71ea737068c380ffc4e7cc95ba2e2aeecca66ebaf565d3b08b8874b7dc6e1ee7dfd76cfe6ea2cc306bb1732bd0ec94f5d310416ff2c234c22234b79ace002fc2fc77c8edb7e7df5d7601cc3e1d4c58df036771395c152a1021f4a6a67d7a7f63d48be2faad98aef8ff9ed9df03a823464f91aeae075def500a2b8ceafc3325e15de8cfc31a1cd0955a0ec9c9c041cbeafc822db084943e27b58f404164e036c712dd552d52146264bfc5af04ed96d8cb9824ed49af2d14d130865fa07ca35c98871fadcab3c4eeaf6b88d18c27254245cb2f8f2e67d55e989a18d40a7c45e6bd36e00055e33112ad759d30f9789c9b40cf82cfa461847a9132d064cd74990ae9db96193928d258e4d47dd855b0dde0221d3a45e9bbb7fde435a8e64cc046b95741b3a5ea9575f00a27fa352ac33087064f731183b2659e15bf6a1e2b03cbc09f6ecc92bb95c07c17351c96a01f54ca636a1b318f66fb905398eacad0a4f481624fe903cae06767297b839271c8977bfb7e5e8e12655e84e897aec4c669ff9f62f372af3a53cf4d9614ba081aa914e6c29922528cd33ee709d4161b308bcfcecdcc395d11d9414a2e63128aaf97dbb5e3f82a074bf1611c75ea1ae42ce261dbd59fb20885ca9aad19834beab14ce4b7d0599855ad66286f3804fd0c8332593202f9e3d20dbb386a85c0570d7aae0f0ba745d15aa82e505c17ebb6bbca5e1d2b3f93d9d93300b64fa13732c684a2803bd92f33ac04d7ab50b9235dbac5db902c958c118b34a8d3d13d5a2464d0bddb0a8d08d12394691ae666fa3829e82dd3b536a1d4c3eeaa1ca7888918aef40367ea1cbd13658a00cda19b18cf47fbe2236f4c5ded9b9a52e7eb653b5580850edfd35e18be940920b417f2a1e04b6edfe77f5bd2db5cecc5218ef0aa1acaa5b2fef5627334d2a1fc88816fcacc54d61ad8d7d34a62000a64b29c5d1b9054288cd4aed2353d72b93703616c1309c8f81a074f8a7fdb14b4e4905a0c04c3f9e7d515a82b773e600fd3a9eab7350026e6e472d615b9295b7fca46bdb936cec6ccd50e442e85179456a1f96010050098725ae4c61e84aafebcbc90c51bed9acba96136e8b364712388501597803786d333380f28b2f8cd0e6fd9c65acc4204d9d1fb2de5f7b50b4ff309f77c7b562e2ed116a498317d093716d58bb86bf42b31a284c91474b96179356324adda58fdd6238d1e51b5b2d65c8e6c69b27618f124f8c9c2558c7693c7575240dc211e119240dbc8271501bea9397f10ce3ffce71b0eaf56edcecee45f0f5253474e5ab845ce61739e543f05f0786278afc67c616c643ae53c41fe7be1770605062537e670f91d0e46febb48f86310ae2cdcffb57b819f95f2bdd90dfd8a036988f1aad99a63e77478ab9e2678b3df21300f614d1acffbcb357f381ba63eaea14091df41ff429c93dc0067e2397d97fc17c3229fa0204e00d8be488bf6f01dc906bf36c1c7be0b3d1c78756cf6ee22fd3f1acc22482027ffdf724b4e7a748838fe5fb94e981c3b2d20dfdb87190b2b648d3cc25398dce0225bde02d7a165773193a422bff58fcfb008a85e92a489ebb2c5e51d2f7288a3b8f770f95edb2439bd22d5d3c3b6f098f667d19e01d8602b338e264572e2502bd6552ff6255312446587b87816df48d2649d8f9382c3092c09ebc06709ac59364b804b67a49001460413c895b45d5e979a218a2f9a06345ef17a418ab86b8fc8f06c5fbd5f4229272890decd3b145b691ee1c59925fab2ab925a230c757f4d62ecd6ebd060c8754c60810acbb6133598d3ae8fd148161af13b0e5c32237a7c174b66014dea9b607109583acceb97ca378d8b48996d30db9067c51b7320b99cc3b35883b6d57cda881db4641af3092ca30e05989b96be34bb35e2252e701b6d2a7f5ba5f77fedbaf49b84824d6ad5f3b1a640d08901845df63c4d813eee5956c6a8737d29722b04af7332fd7bf052ba87cc6be04df7bea4fa947964eaada5a21e7eee2cdcddf4e267a7aed444645408f4b407c2392d4c289dfcc18be3a9c96401f6e946f11cc8362dc9d444be3d2d396798013311b432fc7af88a2cb9babd2710ed26a82df6e168752b1288532d093747f0156e0e5688c149e5688dc5e839c3b256ddb0b9f8354d15e2d0b4db5233e0b0f13115f1d0e92aedfc270d7c382a4e2ad515acfbc2bf2c1ff7604632b32c978a6e4a214a464dbc1eadd657e0487d27602a4b644686e7343529697ff50d94a1013c5ee6aa2f994bfbc81d15a135b2f4f7e87d3da431c56ce60bd7c1771dc2b7f0f68fc39820ed75a71c5ea721fd8b13f48a64896c700192270ceb745306ac5483d320e8ea20504df1de9e0f1fb4208aaa674ea73ec86c36ede8e422b372c9d0df3f5ec9b3f5e92056e4d47137ed41342b50921aa9da82b35a31a0e43bd93989241a9f37e99596a3e8f3aee16430b5d0e26f08fa91fce86cb99dde5df070bb462d88beb4aa06671c9c0351580b357d250dad200b936168dd26d1add0a4a5211c284fe671438d01614701b337be87ab7a2c414ca8ba81d22f3f01b4ccc1d986b1e84c6f453701f71e1d9a38eb0eae32e587e6bdf7709c7f64e4bf8c93830493e64641ffe49a314992c68f4c65e5645af78de8283f576294d5ac8cc2d8dbc47b5bc8a6685e85ca5cc6a7e45809e4f199ea0366f7ddae33915e7f0f471b92b9c7c2a18fd2fdf69d4ba209fc186ea50c936017dc56d7ce570ad85bb642a8f218e0c388a00fda4dfcfd277cc01e12a2cedfe4503ae5463991a0ddbbdb7721dc0dd102ea7c211b2c2e3888ffa7b2efd2852ff0319787c8aa049a36271bf11ae1c6eb4dad5e4f56f240a1d2f12302b90b9622c9c51ba59b92aee8deb43ad7a5cc6f3e71e9157f5938df89f6d9f85d918a7e0933031196d79e0bb32f2b2b467174dbb113022d846e6ced8e4d27c92e7e777ef0a7af0ee48d4c286a7c4930129c1807d58ae5ad54bc5df95db95a4d4d527bccc8463d23f2a9dcdf8e6f85a74427b829450bf8befe2a00409d82d1d38a4f10f6129620ee43541134f66cbe182a9acd018914484d884223ebefa00c555727641fd127ecfcf42974edd170cb636c0d7c39ada4ac66c300f757a306a078cbf3deb51de8ac05edb41c1359d323548195206586d0dae00e7d77171757ea0a72992f6721d59d4f058d8b3dc05f85db2c05e67ee9b3c3528061f90a529c14b52b10df024185b4ebf57e1f5e878fcbe555b63bc577020923d5599", 0xfc1}, {&(0x7f0000001640)}, {&(0x7f0000001680)="897b7fad280338a6618431406f6f329490ff7110af644f8de9350c46f88f8ea3c07f61769ecd18e6ace70a80017d95171c7313b9cc4a62a638c3d4f837351a7b85a00e68f0454637e78da01b78b5e7686ca4f8a37d2cdbca11875966721261552e729c355603cfc2ad6dfca5bae39c11289eef1902a2a4ec8f3e2be42576e2d29bfc5da35b4c6437b1c76045fd9f808851bb9d73cee7a0eeb42498b0b3aca880d64108dd5f3866c377c44829beb5acf1e9ab438c4d57af385176ae", 0xbb}, {&(0x7f0000001780)="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", 0xeec}], 0x7, 0x0, 0x0, 0x4040004}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7377616c6c6f632c0092ddee87e76f6ea917597752081e7e7167cf80563f86f6231a5ac5c65f01a247e6178965137f133a675be48dc83d1ff8c26dd8fce49677df1edb71292b7422ea8ba2cc2ff01f0b8ae6b6b9f604e57a85a85e78533ffd4c048158192a08a4a20d550621c82d9d6687c9ce05f1c0ea6d1992c5ed70df1eae143bfbcb7ec04c47377970366f8030f2f61553f83f171a2bef161463e91ca091b3726ff50d11562d7d1029dde45951"]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x6000, 0x0) [ 796.994442] kobject: 'loop2' (000000005dad9ea9): kobject_uevent_env [ 797.016319] Memory cgroup out of memory: Kill process 23777 (syz-executor.1) score 9536000 or sacrifice child [ 797.016633] kobject: 'loop2' (000000005dad9ea9): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 797.032858] Killed process 23777 (syz-executor.1) total-vm:72720kB, anon-rss:2208kB, file-rss:35804kB, shmem-rss:0kB [ 797.049686] kobject: 'loop2' (000000005dad9ea9): kobject_uevent_env [ 797.056448] kobject: 'loop2' (000000005dad9ea9): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 797.075649] kobject: 'loop3' (000000002d802301): kobject_uevent_env [ 797.080759] syz-executor.1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 797.087750] kobject: 'loop3' (000000002d802301): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 797.110691] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 797.121283] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 797.139365] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 797.149731] CPU: 0 PID: 23984 Comm: syz-executor.1 Not tainted 4.19.84 #0 [ 797.156697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.165244] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 797.166251] Call Trace: [ 797.166274] dump_stack+0x197/0x210 [ 797.166296] dump_header+0x15e/0xa55 [ 797.185157] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 797.190288] ? ___ratelimit+0x60/0x595 [ 797.194197] ? do_raw_spin_unlock+0x178/0x270 [ 797.198719] oom_kill_process.cold+0x10/0x6ef [ 797.203238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 797.208793] ? task_will_free_mem+0x139/0x6e0 [ 797.213313] out_of_memory+0x362/0x1330 [ 797.217315] ? css_next_child+0xf5/0x2c0 [ 797.221401] ? oom_killer_disable+0x280/0x280 [ 797.225923] mem_cgroup_out_of_memory+0x1d2/0x240 [ 797.230801] ? memcg_event_wake+0x230/0x230 [ 797.235127] ? do_raw_spin_unlock+0x178/0x270 [ 797.239616] ? _raw_spin_unlock+0x2d/0x50 [ 797.243763] try_charge+0xec5/0x1490 [ 797.247466] ? lock_downgrade+0x880/0x880 [ 797.251602] ? get_mctgt_type+0x8f0/0x8f0 [ 797.255758] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 797.260592] ? percpu_ref_tryget_live+0x111/0x290 [ 797.265436] ? get_mem_cgroup_from_mm+0x16/0x320 [ 797.270194] ? get_mem_cgroup_from_mm+0x156/0x320 [ 797.275030] mem_cgroup_try_charge+0x259/0x6b0 [ 797.279604] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 797.284536] __handle_mm_fault+0x1e50/0x3f80 [ 797.288950] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 797.293788] ? count_memcg_event_mm+0x2b1/0x4d0 [ 797.298447] handle_mm_fault+0x1b5/0x690 [ 797.302675] __do_page_fault+0x62a/0xe90 [ 797.306741] ? vmalloc_fault+0x740/0x740 [ 797.310794] ? trace_hardirqs_off_caller+0x65/0x220 [ 797.315797] ? trace_hardirqs_on_caller+0x6a/0x220 [ 797.320802] ? page_fault+0x8/0x30 [ 797.324333] do_page_fault+0x71/0x57d [ 797.328124] ? page_fault+0x8/0x30 [ 797.331656] page_fault+0x1e/0x30 [ 797.335125] RIP: 0033:0x411e2f [ 797.338320] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 797.357328] RSP: 002b:00007ffc80710980 EFLAGS: 00010206 [ 797.362681] RAX: 00007f327117b000 RBX: 0000000000020000 RCX: 000000000045a68a [ 797.370105] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 797.377366] RBP: 00007ffc80710a60 R08: ffffffffffffffff R09: 0000000000000000 [ 797.384627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc80710b50 [ 797.391908] R13: 00007f327119b700 R14: 0000000000000002 R15: 000000000075c07c [ 797.423497] kobject: 'loop3' (00000000118eb424): kobject_add_internal: parent: 'ext4', set: '' [ 797.437976] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 797.456958] kobject: 'loop3' (000000002d802301): kobject_uevent_env [ 797.463779] XFS (loop2): Invalid superblock magic number 15:05:09 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 797.477484] kobject: 'loop3' (000000002d802301): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 797.525304] Task in /syz1 killed as a result of limit of /syz1 [ 797.532655] memory: usage 14588kB, limit 0kB, failcnt 8 [ 797.538530] kobject: 'loop2' (000000005dad9ea9): kobject_uevent_env [ 797.546942] kobject: 'loop2' (000000005dad9ea9): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 797.557796] kobject: 'loop3' (00000000118eb424): kobject_cleanup, parent (null) [ 797.559183] overlayfs: unrecognized mount option "workdiÒ./file1" or missing value 15:05:09 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 797.575618] kobject: 'loop3' (00000000118eb424): calling ktype release [ 797.582318] kobject: 'loop3': free name [ 797.587767] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 797.607560] kobject: 'loop2' (000000005dad9ea9): kobject_uevent_env [ 797.614048] kobject: 'loop2' (000000005dad9ea9): fill_kobj_path: path = '/devices/virtual/block/loop2' 15:05:09 executing program 0: r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0)=0x80000001, 0x4) getpid() syz_emit_ethernet(0x8a, &(0x7f0000000780)={@random="31dd9638e37f", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "1400", 0x54, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x300000000000000]}, @local, {[@dstopts={0x0, 0x0, [], [@ra]}], @gre={{0x0, 0x501, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x69495582dfac160e, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4020811) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x890b, &(0x7f0000000000)) write(r2, &(0x7f0000002540), 0x0) [ 797.647921] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 797.665332] kobject: 'loop3' (000000002d802301): kobject_uevent_env [ 797.672631] kobject: 'loop3' (000000002d802301): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 797.690299] kobject: 'loop4' (000000004643c0f2): kobject_uevent_env 15:05:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x760025) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x7ba99ea286be877d}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x7f, @local}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000000180)}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000640)="c2efd2507b62a223b33947403f066c3883a89ee60ac5ba811f05b1417da1834cbbc12eccc23574c80b7cb9546c93d8972746be5773afae5b43c1452067f4dd2be141687d80bd2803ec40ffe475fd130d833de17b2b37fbace3b2f97a1df8c580d2defee2efbf2e6f7e145384ca82b2717f20c0765b02bb5f65497709c8c7453c7fe92ebc03cccb8b0c70d372cbb177a2c207aeb3f6b769d8a90097a252fd59f418594d8a65dd55c6e7303a1f5282be5db760098c080dfea7ddf8573b338cc90818b2eb91a4748119ee51b97b74c986b549052b693ece69f6661825d6d49eb93b64f9c1d7bee9b1ca49c2e05e29f7e72c499784f039f36a2918c01541ab9fc479f0c8c3584b59d622b128a7daf29d3d8dbe8f1fc26f86ed88da6d2f4c26ba8b1597fbfcdee356c93bd93830b9e61faed952dc8a5b6929bc3e96116e7a3fd9ac6b5d15b69e7521c4ea560e40056daf2c569c17b0e8ae73b43e56e58017ffa0ed2a21e727fd1bbdea6d1bd9bf0bd14a76d6a9b0c2573385ede40d4c7e2fe2a7f0d066b93c23105d5702a3b6b41237586ed04ea0ac603db6a6f780f74ff6936de813ab3b1c0e7b5170f3bc0cf9dbe495936f6c2c5a9c600fa07d0f22d33d675e43f160530a2bd7287eebf032a17c71f1060e1e68ba71cd1298c8475d87e9fd67bc2c04feaf0d963d8a43b36909701fab7a45d10e37412ec81e315190ad1abbe892f43f5ce7fd4bf6bc087c7d69ebe7e781062bf41282a6c763252721b089b215095332415e7f834e938e5ba7234f93fa4f057f2f32ef6b9345c655d86185592c51bcf830956a7e2be598c50f80ee46f65c9d33d0ca999579f77a67058cbb586fccee466e682b4b509767789e26c01d6bd970d2bfcd31c2d63e0a73cc1b3cac55973197d77d858da84df961c7a0eac3bb3f18172411afd3beb89bc4e9d71b0715835011b71e2d1e65ba933880dcc4f4a77a6c508db6474676fd54a6b68716d4aa16664e6b0f4a5b8e7e1f9263a69dc019cfc31120ca662e9388e434683b6a44b72e86f84d25be3d999ea5381ad0539a74097f34b3b2a5c5001633444b0c5c6e78a0929f1f999d1e838f06618bb0ff9c7a45495548e8f00a499e9a00d4b89c78b0ef99b81685b6f628e15177e19c245238cb53595eaa9d4eec45f9a7807ef7ee4c36b4ff4006f1d91c5e8f8936368b7d40599b547d20ce5ee954fe58db502b8e0a704c66f62915f26c9ba8a30fe07f5995fd8a7e6531d8b238d971d4a7ea4c7aa980706bce9eb0888c121842a385015c5b2ee90e2233e7af4ae6e40acf41e0c470269c2ecec386d097a80faa04ee44cb336c2068c19fcca0d2a41178b897dc65e2d19c53778ad20431e3192d65c158614b80bf1711c342cf48728b6b10938845b1ea357d4d44dac485962b9be97a73c2b3877c26a4ad6275e4901f9d871164c08387b5ba50c22df736f4d2403e26f0f102e80dbffabbf9acbe019f2835c9175ee06ba59c6074bf1989358ecca2512a8d7fbf0d02738853c88ff028affeca9a8b0f65cf51086c41dbd830f863b1f19da3689208c2378134b9f84eaf203650f2730f3498f73b7a6cc51bf1d17bc1c637130f109b407879cfdd5591c2ca5398929563e930cbdce5b52646c73519f7f77e47caae009f9ebe0944cd5268f0a428df2ead172619a38db21295e2acf38abd87d6210d5a6df86759ffc712101536c046b49722b28fd0edeb1d383a1caf9e78b5473e52a45c21a94da8433b57e648a26dadf87d1797959650eb1d41d3520cfb564484c9015a8efd17997c215a15720582884604993344d1ccc82f77c89f794c060c3bf0d842709808a3f58a9a88c755fa9a08683678ce4417872add9402cfd289302da47dc667c6a252a16d69f7080c96e2bc05b75b2731c5ec673428438051650e948e998303ad3142f10b74436f0d5f1643fa32285cd49fb849feb03bd035ed6cb8588ae1e02b85b663b5f2a5345d3fe802a9c9b2c52e70f8bea708a36777ebca60b6428e767a33a16c406eb597efe5cb7d7eae40a68f9726a35ddb9e272fa61f88496ba33a72eb9b67933b8744b64c91476d7451960e59c59a70b51ff5b61adcb122a018c1a89f23f7aa0ec499ebf35fc8afbe73fad231d9ba5b7efa6c4afec8dce28b3aca7c469bd1014ca294ecc0c76b20f8cf1e14cdaf428ccb5e03b6d0b5f4676c5bd311729f6d40f0813755b1e8ddd8434fcc429d3a870eb8004a20b6461ac780473b10145ff9b649a49558183a1b6321cb0a418b28e8cd0852727bcf496a382c5c098aa6a97d86d1b054e412e9954a48ea4531a56736c44cb36a60ff61fe51b92de355805ebae827e504e794ced75ef5eb55a0450febf28194f75eebbfa710ab3d3a19f7ffe8e757076e0102fb3030084afab8550cd265a31fa635934e5d8641e5c1db498f75537d11ef19a2b5532141a71ea737068c380ffc4e7cc95ba2e2aeecca66ebaf565d3b08b8874b7dc6e1ee7dfd76cfe6ea2cc306bb1732bd0ec94f5d310416ff2c234c22234b79ace002fc2fc77c8edb7e7df5d7601cc3e1d4c58df036771395c152a1021f4a6a67d7a7f63d48be2faad98aef8ff9ed9df03a823464f91aeae075def500a2b8ceafc3325e15de8cfc31a1cd0955a0ec9c9c041cbeafc822db084943e27b58f404164e036c712dd552d52146264bfc5af04ed96d8cb9824ed49af2d14d130865fa07ca35c98871fadcab3c4eeaf6b88d18c27254245cb2f8f2e67d55e989a18d40a7c45e6bd36e00055e33112ad759d30f9789c9b40cf82cfa461847a9132d064cd74990ae9db96193928d258e4d47dd855b0dde0221d3a45e9bbb7fde435a8e64cc046b95741b3a5ea9575f00a27fa352ac33087064f731183b2659e15bf6a1e2b03cbc09f6ecc92bb95c07c17351c96a01f54ca636a1b318f66fb905398eacad0a4f481624fe903cae06767297b839271c8977bfb7e5e8e12655e84e897aec4c669ff9f62f372af3a53cf4d9614ba081aa914e6c29922528cd33ee709d4161b308bcfcecdcc395d11d9414a2e63128aaf97dbb5e3f82a074bf1611c75ea1ae42ce261dbd59fb20885ca9aad19834beab14ce4b7d0599855ad66286f3804fd0c8332593202f9e3d20dbb386a85c0570d7aae0f0ba745d15aa82e505c17ebb6bbca5e1d2b3f93d9d93300b64fa13732c684a2803bd92f33ac04d7ab50b9235dbac5db902c958c118b34a8d3d13d5a2464d0bddb0a8d08d12394691ae666fa3829e82dd3b536a1d4c3eeaa1ca7888918aef40367ea1cbd13658a00cda19b18cf47fbe2236f4c5ded9b9a52e7eb653b5580850edfd35e18be940920b417f2a1e04b6edfe77f5bd2db5cecc5218ef0aa1acaa5b2fef5627334d2a1fc88816fcacc54d61ad8d7d34a62000a64b29c5d1b9054288cd4aed2353d72b93703616c1309c8f81a074f8a7fdb14b4e4905a0c04c3f9e7d515a82b773e600fd3a9eab7350026e6e472d615b9295b7fca46bdb936cec6ccd50e442e85179456a1f96010050098725ae4c61e84aafebcbc90c51bed9acba96136e8b364712388501597803786d333380f28b2f8cd0e6fd9c65acc4204d9d1fb2de5f7b50b4ff309f77c7b562e2ed116a498317d093716d58bb86bf42b31a284c91474b96179356324adda58fdd6238d1e51b5b2d65c8e6c69b27618f124f8c9c2558c7693c7575240dc211e119240dbc8271501bea9397f10ce3ffce71b0eaf56edcecee45f0f5253474e5ab845ce61739e543f05f0786278afc67c616c643ae53c41fe7be1770605062537e670f91d0e46febb48f86310ae2cdcffb57b819f95f2bdd90dfd8a036988f1aad99a63e77478ab9e2678b3df21300f614d1acffbcb357f381ba63eaea14091df41ff429c93dc0067e2397d97fc17c3229fa0204e00d8be488bf6f01dc906bf36c1c7be0b3d1c78756cf6ee22fd3f1acc22482027ffdf724b4e7a748838fe5fb94e981c3b2d20dfdb87190b2b648d3cc25398dce0225bde02d7a165773193a422bff58fcfb008a85e92a489ebb2c5e51d2f7288a3b8f770f95edb2439bd22d5d3c3b6f098f667d19e01d8602b338e264572e2502bd6552ff6255312446587b87816df48d2649d8f9382c3092c09ebc06709ac59364b804b67a49001460413c895b45d5e979a218a2f9a06345ef17a418ab86b8fc8f06c5fbd5f4229272890decd3b145b691ee1c59925fab2ab925a230c757f4d62ecd6ebd060c8754c60810acbb6133598d3ae8fd148161af13b0e5c32237a7c174b66014dea9b607109583acceb97ca378d8b48996d30db9067c51b7320b99cc3b35883b6d57cda881db4641af3092ca30e05989b96be34bb35e2252e701b6d2a7f5ba5f77fedbaf49b84824d6ad5f3b1a640d08901845df63c4d813eee5956c6a8737d29722b04af7332fd7bf052ba87cc6be04df7bea4fa947964eaada5a21e7eee2cdcddf4e267a7aed444645408f4b407c2392d4c289dfcc18be3a9c96401f6e946f11cc8362dc9d444be3d2d396798013311b432fc7af88a2cb9babd2710ed26a82df6e168752b1288532d093747f0156e0e5688c149e5688dc5e839c3b256ddb0b9f8354d15e2d0b4db5233e0b0f13115f1d0e92aedfc270d7c382a4e2ad515acfbc2bf2c1ff7604632b32c978a6e4a214a464dbc1eadd657e0487d27602a4b644686e7343529697ff50d94a1013c5ee6aa2f994bfbc81d15a135b2f4f7e87d3da431c56ce60bd7c1771dc2b7f0f68fc39820ed75a71c5ea721fd8b13f48a64896c700192270ceb745306ac5483d320e8ea20504df1de9e0f1fb4208aaa674ea73ec86c36ede8e422b372c9d0df3f5ec9b3f5e92056e4d47137ed41342b50921aa9da82b35a31a0e43bd93989241a9f37e99596a3e8f3aee16430b5d0e26f08fa91fce86cb99dde5df070bb462d88beb4aa06671c9c0351580b357d250dad200b936168dd26d1add0a4a5211c284fe671438d01614701b337be87ab7a2c414ca8ba81d22f3f01b4ccc1d986b1e84c6f453701f71e1d9a38eb0eae32e587e6bdf7709c7f64e4bf8c93830493e64641ffe49a314992c68f4c65e5645af78de8283f576294d5ac8cc2d8dbc47b5bc8a6685e85ca5cc6a7e45809e4f199ea0366f7ddae33915e7f0f471b92b9c7c2a18fd2fdf69d4ba209fc186ea50c936017dc56d7ce570ad85bb642a8f218e0c388a00fda4dfcfd277cc01e12a2cedfe4503ae5463991a0ddbbdb7721dc0dd102ea7c211b2c2e3888ffa7b2efd2852ff0319787c8aa049a36271bf11ae1c6eb4dad5e4f56f240a1d2f12302b90b9622c9c51ba59b92aee8deb43ad7a5cc6f3e71e9157f5938df89f6d9f85d918a7e0933031196d79e0bb32f2b2b467174dbb113022d846e6ced8e4d27c92e7e777ef0a7af0ee48d4c286a7c4930129c1807d58ae5ad54bc5df95db95a4d4d527bccc8463d23f2a9dcdf8e6f85a74427b829450bf8befe2a00409d82d1d38a4f10f6129620ee43541134f66cbe182a9acd018914484d884223ebefa00c555727641fd127ecfcf42974edd170cb636c0d7c39ada4ac66c300f757a306a078cbf3deb51de8ac05edb41c1359d323548195206586d0dae00e7d77171757ea0a72992f6721d59d4f058d8b3dc05f85db2c05e67ee9b3c3528061f90a529c14b52b10df024185b4ebf57e1f5e878fcbe555b63bc577020923d5599", 0xfc1}, {&(0x7f0000001640)}, {&(0x7f0000001680)="897b7fad280338a6618431406f6f329490ff7110af644f8de9350c46f88f8ea3c07f61769ecd18e6ace70a80017d95171c7313b9cc4a62a638c3d4f837351a7b85a00e68f0454637e78da01b78b5e7686ca4f8a37d2cdbca11875966721261552e729c355603cfc2ad6dfca5bae39c11289eef1902a2a4ec8f3e2be42576e2d29bfc5da35b4c6437b1c76045fd9f808851bb9d73cee7a0eeb42498b0b3aca880d64108dd5f3866c377c44829beb5acf1e9ab438c4d57af385176ae", 0xbb}, {&(0x7f0000001780)="1c1721a670d385b6aedbf22c511fc9a39d5f9564d7c81f9315730548d00071608976ee1c7a7bda08ce899a86ff0dfec022cfb2341ea0d6c00b7ba63de6076a5aed1a3d4963a3f8795b30517cb194f5709c71d7fa2c0848c4429930b312e8aecce6fb292f22c5cab01acdb74a7045e333b6c96ae6de92e065f443f917ac6d329ea9aeea66af11f0f131db2629dcae031c4d268659874d59819e2262b881fee87d7b024e1a890c881ebce589a25240f16c04989b1da0c47ab3db7aba60ac03e8b68532b21a66bfa83271e4b4cd2479871d01368e256d4efa958e16f286e0bec94c74b6be126029a33858dd3e9ff3f39adccdb811199f7dbda6db7f1414df84e779b553763fdd7b38f9bd324c400c3232d35e74f8178fe8cf430b093eae83c1405be0f2f9ac20cac4591ed56c3622079c99138a0a2bd6a9be61b6962046c672e2d8e5b9d7857f18620361d626c9e8b03f8c0c6f81f29e0721a8dace1f44a90376fb4cd65a122e7c70426dc4764906e01b2f27757d059c8b0e7a33f8ed3118ff4e456d0a2cd8caece9f4f3e46ef051e38207f52439a98dacd9395b369cb0a55c5b2c2085cce7deb88ec9f1d0b6f2b7f30f98e2cb8f374f965280ad4a884922b4b78f391d7e4705aa457b317092d7d4bfbcb400e8d9ebdd3bb8df688b60396e33e27862476e75b30d6a724b757f5f2bd96147784f81cf9ab98f164bb9326c119029f1df9d7abe879c22778978903cb2cf9eea1b5a3f057d09605d709f05e73c69d58e20c3abaadff02dcde38b918f6a21350f4281e1add1b97b7805c75642772ae5fbd17a4e81f01ed37c1763870af109ff2f2f94f229fc2d83e342b1bd40a06d4f5ba42d16f1c523bdcf83ccfa716373a6145be23a32db4d0f85b5720d47497841a4a51691f8807693dc04cd7eec3f16c07015203e4a78a0acf46f992155f7bc3d7022326e9d4c8525356aacb34d449bccf89ef77ff9f0277cd0622283c8da65bff5930bfab2fd19476c4e6595f88e06e86e58a4045ddae50f39bf2a883e44075e6563eb4e89fcce2de9ba8eb53ce771502f9ee9a1f5c30c8f0894ad2d005d1456dd49c6690bdc22d74cfbd45c85ad02fc2e8a7abb1b83024ffdf244d93d3f9b85231cce74a6c5253cd242246d2a61c486d7c4aee918f9d985bbe4d612724e336da9c5019441d675f1d355436649361206b3b3e393edfeadc4affb2b77678fd982b483a5d3d0a5342741168ef1c972d341aecf9d44a5da9567c9d9c27b7d32a4ce8707548f5bfc9fa72e5b21a82f4ee611542fb04168a23fd84a732413455f22efa52aeda6be63daa30dca96630a0636494ae0a3250ca46e2d000389f05c51bb9618cff80aad756069e994d86c8aa9f695e66a1011973d0b947a653b97adf8dd4b5679847cce49c3da031d2e1ad922c70e54899d94db35d607881f573f5b98439e70b56bd07fad51d580d94ba0e5f46cac38a8d8feb8a12ea38596841d7f3a6492364c09c2c0c5c87d806e841cadfdfb50860cf5b952e17d04a45ea25edc5d443ce91f32249c26634bd13163353e4baf7ae5f947d12ffa668b3d8d88b077d96003e6502ea11b8a21254e278c682a362dc39e0fc3ab50d9059297e11b762e33486161727a47239508624b546b51e59f67b31109e80160147817acf5b164205933e2e3ce7d32328675bbefadfa2f054e5e521e391d16a2ebe7bee6bf88d604775691ed77f694ea30623db1cdfdfa54cff8cff2fb092ae5fb85e61e5ba11fb503ea9b3bfdfc08920ed0e89847e428d6c3b94e6077b7cff56ef6b74a9d3f8412965f383086f73be1615b0b7234d2a484f6653c3c673465c1a7292138a35c137b4bb3613f44a38bfcd2e89af2ea2b7dac8523d3ebda50669ca6d5023dabf6c360b45b61b3715a7eb5200e66be3313de454ead74dbd2c028e7a8b56ce07f5f649252a18dc3ac6252ad51d2b28711ea0e5e7ad68e8d610b4a241dd91f179301caa7c5bc51e06c8469707515d8d4bc4f45d7f2b92025105b9240fd1bc4462167dda0190c1179139d2ad8d6064c6df05bfb9b3260e696c6626b31e04b24b71b2462beded113d5c40cedbbd71229d474b05249d7b904618abc9c6f80982b1773487b2df89e7fd6468a652784a2b4414004d16e9c143fcaeb3f64aad1e61b5bbd5b2988f9b35e794e1d7633d0120482e000498a49dfa918d3ab04e04f8f5c0ffc252ff63f8c7e0b3571e2da221013b6100fe7bd71e09acb50553ac8076662ff2e81d9768ad07a4c6f571eb06080d8206bc6d0e528c2afeb510636b48b28968615726f7789ec1d2946a340d5387e36452b1f4458fffeda359cab1bf3dcf558490c2f6948c30d0cda9623cc0fed9b5a8d9bafaec7a315425dd525d74aee7aba36761a2ba21c2ea33f5834f7b8a449edf5aa57a5284f94f20ac0e5cc253f6144d9f6a1d3d4fb354737c5687ef552059a4c44834e99eba1702398705cc6c169aa0af0eadf8591391a76dbd2e03277e3e48082c52e1a95abb088bf48eb7aa09c4faaf2a5242ba17ef80d481d71ea208dd6c856ec6078e74bd2979664c0611a8ff8c30bb604c1e0dbcd210e689635428d40290df679ffee0f7f79156056dd60082f6e5830c5eaa70c1b98c759e84899f0fea9e357589d2fd831f1043f4d8da618ca765fefd8664460f336e38ce79810979acb59baf765dcc528845eab64e7ff5ab6d9a23f9a900c603e1fd927a7eddc76e742758adcee6c96f8e62afdc072e5efd806845f10632205c8b4b754dbf7595438ed4a5560794f90097500801ba06e10296c550eeaf7cadc589e6d13931ef8f1e956c404ff4eab8ac3a8420f8d9bcf711c2d4d0e2b13553c82dda702e0d2dc993d665a35c2d13fb15f2ad16e12de4e3b2a06e760654727a625c426ea20c181ec0a3f06ee41568c8814bf70b44e51364444f2ecb8aa3e49fa2096a48320977443636d745e00db7ae53c58deabd716ce6ea4b4728824729e6de6c6037a88db80144a7073299e61ffe6d607d72c03b92fb44bbc050cdf51508d517f0f7a731d9faa9aaa76a87a2246ee79c6e1e86c37276ca796f089b136f25ad15ef6408687f81210c7e889fc0c70a72c8e7413f0af543e7616c44e0066bfe6e2673e49ad20f2be0f43cc55443825d2f01abbee096720efdb4e60b9cce9656cb950184156541ea456558c9967e9f6a512f44a88076f13503bf5852d4dc25bb7645acc0e1e7a3729ffb8ddfbd5cf29989957027e4dce4c96d0b48185d8df00e2f1b75fc927b6273b31d45d8c89b5db19b1e5a9f20f5f22c5c600e0d9c23c8cd3bfd927eea9a157d09089753b5196e0ba1eb907014ae1011f4e545853e49115945c182abfdd4efab2ee2779a0a3b91e4ff6a60eeef52878cfbe3d1597553fe0f7f41f2449172446057ca1a86585c69d2225e7e4cfdb8dad986ea6617a695afd1310882e781dafc46895b48d6a889f4671d3e6be4d1ee78f278168f7ae74a4188c3ff4e75c5c899f53e8596d1dec303ff0d8e6a78bd65438bd346e33a5bc89991808d3a6a38619febaba3509571ea9af8ef117fc7d2955afd57df9952729734935c4eb1cf176e3e5fb93b07f621cb958539e8f578c81046a0f308317ed5ef8d4f14d51acde76a62385841a09e1fe286f0a58f1387a6995c751a886e34784549233b81ff93d1108510b1b8a05df286dc7507b02e8b48a791273fedd97a14fa7d36297c6bce8d3277b3f86a8891b25234374bf2d863c9d2b8a24b8d588dfe7cb6043131c902faf7614820ec52b56eee1c8f5b764d3739a4d698bf7695a53a4cec1beb9ca6b046750d11105e2046256e43f396bee33068fec1d691c073db1dc270d2d37d66146289efbda97f5929510738aef931620eb168b3eeb0fed664c6f3cbe9170e7601aa976ffd368aa17adc7027712dfeabb13daad86a551abbebb8e100380ece75883042168bf9c668392339a1a75c339ff0ca1ca225b1158ff80c9dba03abbdcd905ad73c27953fcd85b2684cac50c083fb5459695ffd4e4d3d6cb6494295b70338ecf883a1da734204b307af9a42802a800ac24588d01a1b853a283252caa4711072fc1a3112bdbd96d7078406cba9a4509b71fbd4bf3072e62fa2606352b1ef7aef3c467bbf916621194c3e41229bd0fa08fd23bdb83ef9eee937bb487cede537d14f21ef9146da5abe98589df77c0cbb5e6696f1f655d36e8f36b799b5196ad1055899e0c9096a8e06bfb7603d345c5566ea06eba17ad8ce7d5f06b7f0eb85f37105d90bb8cb753eb120c5fe47954b73ca8560e6d7aca258108c416889a0e62d9c29f161b5ade15475ad482d766ab35766a9448ea289315f7364c265a6aab965b96401e0ab57e75ebb008cc78216368af5ae631f6e886a294e4bf9dd398b2abc6cf44515034de3bf27f7af3864158ee5ce47e5db8163c5c4abf7ab0bd9044f31ee39220eb3d8003d40dfad6c3bb02d4920c99d0d39543c83865456a8dbe6778bcafdba44165fde92d8a6a305e2664996044ba150f42dc5de66526f79c3122fa20a8e1dd566589cfc75c5bcb2f8ab793def627651cd7ac0ff452bce820a533a99fdc62a8f5c8ef795b0c37e038c9d8d24a3cdfad57e1187590accc3f8920637574cc83237d8042037bc89de522e4e22bfa8479e88824e60bf8bad3ca18aee4581f8c7967144f7e2c7c6548fe8276cd14f1c5e00833239790f26e6801b9adc8f15d15666ee0dfbb28256bc03bba708a97ace6d42b2df81ccbe5286e993c60827e122659ba99a0003469975cd17dbd54c6867455eaa3fcf299c90383fbe06e9adbf27e4d3ef91e99ce8fe4d9f073f78f5194e906ee32443d00cdb0ad3592a094088106ce1324d06e9feebd300a7696fe1dbd5244da782539d4b5911f938ccf5af269e87ed8bc4462288e615fcb1f9fda22a645006edff71edc714a818776779bbfc39f993891f7b1197f6c9329a3baeb3c60be9aad9bfdf6517382126c0b57c187c60fa39ba76d442a0a5490df684730030446085ea66c1e3197f67d25b401375f40eca273fdf6ca92f47d43b342d97a9a3f88fc99cd72866720e8dee4501824de6a7b64ec99c9cc78fceee56bd5ff721e60fe8321868d6ca3fe16d6404a72d0c1a7097790b8e54b08ddf18752129017be266834c63463c6823c2eaee46c8b202e89258a714481113af39e855a628ba3114586c638678c339105dc0b345a1f8debe7d50710a3b1b928b1d67c2557f50844626837c4fcaa720283ae5b03a32942c4ec02a4950f56612b533085a5d5e4bdb6d7e84537eff9a0ace708111d5c6493f8063865ecac5ffbf3e96c214443794b2ecb5d706dced4c0ea7fc5d720e70a32a7ec3b63dc1399e623dbddb370936ff121cc8024b2de84cb2b90314b2d118a4150ace5245fc42f3ce68df2c1", 0xeec}], 0x7, 0x0, 0x0, 0x4040004}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7377616c6c6f632c0092ddee87e76f6ea917597752081e7e7167cf80563f86f6231a5ac5c65f01a247e6178965137f133a675be48dc83d1ff8c26dd8fce49677df1edb71292b7422ea8ba2cc2ff01f0b8ae6b6b9f604e57a85a85e78533ffd4c048158192a08a4a20d550621c82d9d6687c9ce05f1c0ea6d1992c5ed70df1eae143bfbcb7ec04c47377970366f8030f2f61553f83f171a2bef161463e91ca091b3726ff50d11562d7d1029dde45951"]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x6000, 0x0) [ 797.707805] kobject: 'loop4' (000000004643c0f2): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 797.728671] kobject: 'loop4' (000000004643c0f2): kobject_uevent_env [ 797.739456] kobject: 'loop4' (000000004643c0f2): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 797.758319] kobject: 'loop0' (0000000000a34441): kobject_uevent_env [ 797.781107] kobject: 'loop3' (000000002d802301): kobject_uevent_env [ 797.785576] kobject: 'loop0' (0000000000a34441): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 797.792114] kobject: 'loop3' (000000002d802301): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 797.852405] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 797.862046] kobject: 'loop2' (000000005dad9ea9): kobject_uevent_env [ 797.883133] kobject: 'loop2' (000000005dad9ea9): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 797.900902] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 797.927862] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 797.958114] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 797.975201] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 798.000265] kobject: 'loop4' (000000006cb5aab1): kobject_add_internal: parent: 'ext4', set: '' [ 798.004365] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 798.028293] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 798.044776] kobject: 'loop3' (00000000e2b0e01a): kobject_add_internal: parent: 'ext4', set: '' [ 798.054792] kobject: 'loop4' (000000004643c0f2): kobject_uevent_env [ 798.068139] kobject: 'loop4' (000000004643c0f2): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 798.088128] Memory cgroup stats for /syz1: cache:60KB rss:8780KB rss_huge:8192KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:8772KB inactive_file:0KB active_file:8KB unevictable:0KB [ 798.090345] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 798.138260] XFS (loop2): Invalid superblock magic number 15:05:09 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 798.152040] Memory cgroup out of memory: Kill process 23303 (syz-executor.1) score 9535000 or sacrifice child [ 798.162461] Killed process 23303 (syz-executor.1) total-vm:72588kB, anon-rss:2200kB, file-rss:35808kB, shmem-rss:0kB [ 798.175229] kobject: 'loop2' (000000005dad9ea9): kobject_uevent_env [ 798.181907] kobject: 'loop2' (000000005dad9ea9): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 798.192583] kobject: 'loop4' (000000006cb5aab1): kobject_cleanup, parent (null) 15:05:10 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:05:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x760025) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x7ba99ea286be877d}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x7f, @local}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000000180)}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000640)="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", 0xfc1}, {&(0x7f0000001640)}, {&(0x7f0000001680)="897b7fad280338a6618431406f6f329490ff7110af644f8de9350c46f88f8ea3c07f61769ecd18e6ace70a80017d95171c7313b9cc4a62a638c3d4f837351a7b85a00e68f0454637e78da01b78b5e7686ca4f8a37d2cdbca11875966721261552e729c355603cfc2ad6dfca5bae39c11289eef1902a2a4ec8f3e2be42576e2d29bfc5da35b4c6437b1c76045fd9f808851bb9d73cee7a0eeb42498b0b3aca880d64108dd5f3866c377c44829beb5acf1e9ab438c4d57af385176ae", 0xbb}, {&(0x7f0000001780)="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", 0xeec}], 0x7, 0x0, 0x0, 0x4040004}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7377616c6c6f632c0092ddee87e76f6ea917597752081e7e7167cf80563f86f6231a5ac5c65f01a247e6178965137f133a675be48dc83d1ff8c26dd8fce49677df1edb71292b7422ea8ba2cc2ff01f0b8ae6b6b9f604e57a85a85e78533ffd4c048158192a08a4a20d550621c82d9d6687c9ce05f1c0ea6d1992c5ed70df1eae143bfbcb7ec04c47377970366f8030f2f61553f83f171a2bef161463e91ca091b3726ff50d11562d7d1029dde45951"]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x6000, 0x0) 15:05:10 executing program 1: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/236, 0x0, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000003c0)=0x4) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r5, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r4, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 798.204911] kobject: 'loop3' (000000002d802301): kobject_uevent_env [ 798.216845] kobject: 'loop4' (000000006cb5aab1): calling ktype release [ 798.219578] kobject: 'loop3' (000000002d802301): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 798.244881] kobject: 'loop4': free name [ 798.295266] kobject: 'loop4' (000000004643c0f2): kobject_uevent_env [ 798.301963] kobject: 'loop4' (000000004643c0f2): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 798.316759] kobject: 'loop2' (000000005dad9ea9): kobject_uevent_env [ 798.323339] kobject: 'loop2' (000000005dad9ea9): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 798.338977] kobject: 'loop3' (00000000e2b0e01a): kobject_cleanup, parent (null) [ 798.341205] syz-executor.1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 798.357006] kobject: 'loop3' (00000000e2b0e01a): calling ktype release [ 798.367827] kobject: 'loop2' (000000005dad9ea9): kobject_uevent_env [ 798.375665] kobject: 'loop1' (00000000f4125086): kobject_uevent_env [ 798.378193] kobject: 'loop2' (000000005dad9ea9): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 798.382300] kobject: 'loop1' (00000000f4125086): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 798.400833] kobject: 'loop3': free name [ 798.415233] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 798.420679] CPU: 1 PID: 21383 Comm: syz-executor.1 Not tainted 4.19.84 #0 [ 798.428095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.437911] Call Trace: [ 798.440530] dump_stack+0x197/0x210 [ 798.444188] dump_header+0x15e/0xa55 [ 798.447955] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 798.453086] ? ___ratelimit+0x60/0x595 [ 798.457203] ? do_raw_spin_unlock+0x178/0x270 [ 798.461841] oom_kill_process.cold+0x10/0x6ef [ 798.466352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 798.471914] ? task_will_free_mem+0x139/0x6e0 [ 798.476441] out_of_memory+0x362/0x1330 [ 798.480443] ? lock_downgrade+0x880/0x880 [ 798.484629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 798.490194] ? css_next_child+0xf5/0x2c0 [ 798.494291] ? oom_killer_disable+0x280/0x280 [ 798.498815] mem_cgroup_out_of_memory+0x1d2/0x240 [ 798.503694] ? memcg_event_wake+0x230/0x230 [ 798.508103] ? do_raw_spin_unlock+0x178/0x270 [ 798.512635] ? _raw_spin_unlock+0x2d/0x50 [ 798.516808] try_charge+0xec5/0x1490 [ 798.520555] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 798.525426] ? lock_downgrade+0x880/0x880 [ 798.529596] ? get_mctgt_type+0x8f0/0x8f0 [ 798.533779] memcg_kmem_charge_memcg+0x83/0x170 [ 798.538517] ? memcg_kmem_put_cache+0xb0/0xb0 [ 798.543160] ? get_mem_cgroup_from_mm+0x156/0x320 [ 798.548037] memcg_kmem_charge+0x136/0x370 [ 798.552336] __alloc_pages_nodemask+0x3c3/0x750 [ 798.557048] ? kasan_unpoison_shadow+0x35/0x50 [ 798.561665] ? __alloc_pages_slowpath+0x2870/0x2870 [ 798.566715] ? trace_hardirqs_on+0x67/0x220 [ 798.571089] copy_process.part.0+0x3e0/0x7a30 [ 798.575684] ? _raw_spin_unlock+0x2d/0x50 [ 798.579850] ? do_wp_page+0x585/0x10b0 [ 798.583760] ? mark_held_locks+0x100/0x100 [ 798.588014] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 798.592707] ? kasan_check_write+0x14/0x20 [ 798.596966] ? do_raw_spin_lock+0xc8/0x240 [ 798.601230] ? mark_held_locks+0x100/0x100 [ 798.605504] ? __cleanup_sighand+0x70/0x70 [ 798.609763] ? lock_downgrade+0x880/0x880 [ 798.613952] ? __might_fault+0xfb/0x1e0 [ 798.617955] _do_fork+0x257/0xfd0 [ 798.621431] ? fork_idle+0x1d0/0x1d0 [ 798.625166] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 798.630806] ? __x64_sys_clock_gettime+0x16d/0x240 [ 798.635764] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 798.641155] __x64_sys_clone+0xbf/0x150 [ 798.645155] do_syscall_64+0xfd/0x620 [ 798.648986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 798.654196] RIP: 0033:0x458c0a [ 798.657404] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 798.676318] RSP: 002b:00007ffc80710bd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 798.684058] RAX: ffffffffffffffda RBX: 00007ffc80710bd0 RCX: 0000000000458c0a 15:05:10 executing program 0: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000640)='threaded\x00', 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/236, 0x0, 0xec, 0x1}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.\\G10I\xb8\x8f8\x00\x15o\x1e\xc98\x7f\xcb\xecA\xf3\xbf\x9c\xd8R\xa2|\xef\xe3\x8b\x05\x94\xf9Gx\x1f\xfdi\x9b\x83`\xb8Y\x1aV\xbe\xeb\xb3\xd3v\xb9\x0fs\x90\xb6\xaa`\xe8\x12\xc3\"\x87\xbf\xab\x80h\x97\x89C\t\x84\x9d\xed\xa5ED\xb5P\xde\xa65\xf7\xa1\x1eW\xb3n\xd1\x0f\xeaa\xe2\xcf:\xb6\xa0+\x12W\x9e\x13\x15\xdb\xf6T#\x83\xe59\x04', 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) socket$kcm(0x11, 0x0, 0x0) r4 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000003c0)=0x4) r7 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0xc, r5, 0x8, &(0x7f0000000240)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x40, 0x6, 0x401}, 0x10}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000600)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair(0x5, 0x3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r4, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) write$cgroup_int(r7, 0x0, 0x0) [ 798.691368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 798.698649] RBP: 00007ffc80710c10 R08: 0000000000000001 R09: 0000000001141940 [ 798.705943] R10: 0000000001141c10 R11: 0000000000000246 R12: 0000000000000001 [ 798.713226] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc80710c60 [ 798.724711] Task in /syz1 killed as a result of limit of /syz1 [ 798.734052] memory: usage 9952kB, limit 0kB, failcnt 25 [ 798.735220] kobject: 'loop3' (000000002d802301): kobject_uevent_env [ 798.739521] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 798.752710] kobject: 'loop3' (000000002d802301): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 798.754021] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 798.769760] Memory cgroup stats for /syz1: cache:60KB rss:4596KB rss_huge:4096KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4504KB inactive_file:4KB active_file:4KB unevictable:0KB [ 798.792970] Memory cgroup out of memory: Kill process 23131 (syz-executor.1) score 9534000 or sacrifice child [ 798.803444] Killed process 23131 (syz-executor.1) total-vm:72720kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 798.814709] kobject: 'loop4' (000000004643c0f2): kobject_uevent_env [ 798.816534] oom_reaper: reaped process 23131 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 798.824402] kobject: 'loop4' (000000004643c0f2): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 798.843297] syz-executor.1 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 798.860377] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 798.866802] CPU: 1 PID: 21383 Comm: syz-executor.1 Not tainted 4.19.84 #0 [ 798.873764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.883826] Call Trace: [ 798.886428] dump_stack+0x197/0x210 [ 798.890078] dump_header+0x15e/0xa55 [ 798.893812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 798.895109] kobject: 'loop0' (0000000000a34441): kobject_uevent_env [ 798.898923] ? ___ratelimit+0x60/0x595 [ 798.898935] ? do_raw_spin_unlock+0x178/0x270 [ 798.898954] oom_kill_process.cold+0x10/0x6ef [ 798.918221] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 798.923776] ? task_will_free_mem+0x139/0x6e0 [ 798.926774] kobject: 'loop0' (0000000000a34441): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 798.928302] out_of_memory+0x362/0x1330 [ 798.928322] ? lock_downgrade+0x880/0x880 [ 798.946718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 798.952272] ? css_next_child+0xf5/0x2c0 [ 798.954898] kobject: 'loop3' (000000002d802301): kobject_uevent_env [ 798.956344] ? oom_killer_disable+0x280/0x280 [ 798.956367] mem_cgroup_out_of_memory+0x1d2/0x240 [ 798.956380] ? memcg_event_wake+0x230/0x230 [ 798.956398] ? do_raw_spin_unlock+0x178/0x270 [ 798.980675] kobject: 'loop3' (000000002d802301): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 798.981035] ? _raw_spin_unlock+0x2d/0x50 [ 798.994615] try_charge+0xec5/0x1490 [ 798.998352] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 799.003219] ? lock_downgrade+0x880/0x880 [ 799.009640] ? get_mctgt_type+0x8f0/0x8f0 [ 799.013812] memcg_kmem_charge_memcg+0x83/0x170 [ 799.018499] ? memcg_kmem_put_cache+0xb0/0xb0 [ 799.023004] ? get_mem_cgroup_from_mm+0x156/0x320 [ 799.027858] memcg_kmem_charge+0x136/0x370 [ 799.032087] __alloc_pages_nodemask+0x3c3/0x750 [ 799.036755] ? kasan_unpoison_shadow+0x35/0x50 [ 799.041328] ? __alloc_pages_slowpath+0x2870/0x2870 [ 799.046337] ? trace_hardirqs_on+0x67/0x220 [ 799.050649] copy_process.part.0+0x3e0/0x7a30 [ 799.055134] ? _raw_spin_unlock+0x2d/0x50 [ 799.059270] ? do_wp_page+0x585/0x10b0 [ 799.063232] ? mark_held_locks+0x100/0x100 [ 799.067453] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 799.072301] ? kasan_check_write+0x14/0x20 [ 799.076574] ? do_raw_spin_lock+0xc8/0x240 [ 799.080808] ? mark_held_locks+0x100/0x100 [ 799.085042] ? __cleanup_sighand+0x70/0x70 [ 799.089272] ? lock_downgrade+0x880/0x880 [ 799.093441] ? __might_fault+0xfb/0x1e0 [ 799.097418] _do_fork+0x257/0xfd0 [ 799.101003] ? fork_idle+0x1d0/0x1d0 [ 799.104742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 799.110276] ? __x64_sys_clock_gettime+0x16d/0x240 [ 799.115201] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 799.120554] __x64_sys_clone+0xbf/0x150 [ 799.124519] do_syscall_64+0xfd/0x620 [ 799.128312] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.133489] RIP: 0033:0x458c0a [ 799.136672] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 799.155560] RSP: 002b:00007ffc80710bd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 799.163264] RAX: ffffffffffffffda RBX: 00007ffc80710bd0 RCX: 0000000000458c0a [ 799.170526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 799.177904] RBP: 00007ffc80710c10 R08: 0000000000000001 R09: 0000000001141940 [ 799.185182] R10: 0000000001141c10 R11: 0000000000000246 R12: 0000000000000001 [ 799.192448] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc80710c60 [ 799.207386] Task in [ 799.207405] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 799.207407] /syz1 killed as a result of limit of [ 799.209808] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 799.209818] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 799.243826] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 799.254120] kobject: 'loop3' (00000000626885e6): kobject_add_internal: parent: 'ext4', set: '' [ 799.259591] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 799.281339] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 799.294719] EXT4-fs: failed to create workqueue 15:05:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x760025) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x7ba99ea286be877d}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x7f, @local}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000000180)}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000640)="c2efd2507b62a223b33947403f066c3883a89ee60ac5ba811f05b1417da1834cbbc12eccc23574c80b7cb9546c93d8972746be5773afae5b43c1452067f4dd2be141687d80bd2803ec40ffe475fd130d833de17b2b37fbace3b2f97a1df8c580d2defee2efbf2e6f7e145384ca82b2717f20c0765b02bb5f65497709c8c7453c7fe92ebc03cccb8b0c70d372cbb177a2c207aeb3f6b769d8a90097a252fd59f418594d8a65dd55c6e7303a1f5282be5db760098c080dfea7ddf8573b338cc90818b2eb91a4748119ee51b97b74c986b549052b693ece69f6661825d6d49eb93b64f9c1d7bee9b1ca49c2e05e29f7e72c499784f039f36a2918c01541ab9fc479f0c8c3584b59d622b128a7daf29d3d8dbe8f1fc26f86ed88da6d2f4c26ba8b1597fbfcdee356c93bd93830b9e61faed952dc8a5b6929bc3e96116e7a3fd9ac6b5d15b69e7521c4ea560e40056daf2c569c17b0e8ae73b43e56e58017ffa0ed2a21e727fd1bbdea6d1bd9bf0bd14a76d6a9b0c2573385ede40d4c7e2fe2a7f0d066b93c23105d5702a3b6b41237586ed04ea0ac603db6a6f780f74ff6936de813ab3b1c0e7b5170f3bc0cf9dbe495936f6c2c5a9c600fa07d0f22d33d675e43f160530a2bd7287eebf032a17c71f1060e1e68ba71cd1298c8475d87e9fd67bc2c04feaf0d963d8a43b36909701fab7a45d10e37412ec81e315190ad1abbe892f43f5ce7fd4bf6bc087c7d69ebe7e781062bf41282a6c763252721b089b215095332415e7f834e938e5ba7234f93fa4f057f2f32ef6b9345c655d86185592c51bcf830956a7e2be598c50f80ee46f65c9d33d0ca999579f77a67058cbb586fccee466e682b4b509767789e26c01d6bd970d2bfcd31c2d63e0a73cc1b3cac55973197d77d858da84df961c7a0eac3bb3f18172411afd3beb89bc4e9d71b0715835011b71e2d1e65ba933880dcc4f4a77a6c508db6474676fd54a6b68716d4aa16664e6b0f4a5b8e7e1f9263a69dc019cfc31120ca662e9388e434683b6a44b72e86f84d25be3d999ea5381ad0539a74097f34b3b2a5c5001633444b0c5c6e78a0929f1f999d1e838f06618bb0ff9c7a45495548e8f00a499e9a00d4b89c78b0ef99b81685b6f628e15177e19c245238cb53595eaa9d4eec45f9a7807ef7ee4c36b4ff4006f1d91c5e8f8936368b7d40599b547d20ce5ee954fe58db502b8e0a704c66f62915f26c9ba8a30fe07f5995fd8a7e6531d8b238d971d4a7ea4c7aa980706bce9eb0888c121842a385015c5b2ee90e2233e7af4ae6e40acf41e0c470269c2ecec386d097a80faa04ee44cb336c2068c19fcca0d2a41178b897dc65e2d19c53778ad20431e3192d65c158614b80bf1711c342cf48728b6b10938845b1ea357d4d44dac485962b9be97a73c2b3877c26a4ad6275e4901f9d871164c08387b5ba50c22df736f4d2403e26f0f102e80dbffabbf9acbe019f2835c9175ee06ba59c6074bf1989358ecca2512a8d7fbf0d02738853c88ff028affeca9a8b0f65cf51086c41dbd830f863b1f19da3689208c2378134b9f84eaf203650f2730f3498f73b7a6cc51bf1d17bc1c637130f109b407879cfdd5591c2ca5398929563e930cbdce5b52646c73519f7f77e47caae009f9ebe0944cd5268f0a428df2ead172619a38db21295e2acf38abd87d6210d5a6df86759ffc712101536c046b49722b28fd0edeb1d383a1caf9e78b5473e52a45c21a94da8433b57e648a26dadf87d1797959650eb1d41d3520cfb564484c9015a8efd17997c215a15720582884604993344d1ccc82f77c89f794c060c3bf0d842709808a3f58a9a88c755fa9a08683678ce4417872add9402cfd289302da47dc667c6a252a16d69f7080c96e2bc05b75b2731c5ec673428438051650e948e998303ad3142f10b74436f0d5f1643fa32285cd49fb849feb03bd035ed6cb8588ae1e02b85b663b5f2a5345d3fe802a9c9b2c52e70f8bea708a36777ebca60b6428e767a33a16c406eb597efe5cb7d7eae40a68f9726a35ddb9e272fa61f88496ba33a72eb9b67933b8744b64c91476d7451960e59c59a70b51ff5b61adcb122a018c1a89f23f7aa0ec499ebf35fc8afbe73fad231d9ba5b7efa6c4afec8dce28b3aca7c469bd1014ca294ecc0c76b20f8cf1e14cdaf428ccb5e03b6d0b5f4676c5bd311729f6d40f0813755b1e8ddd8434fcc429d3a870eb8004a20b6461ac780473b10145ff9b649a49558183a1b6321cb0a418b28e8cd0852727bcf496a382c5c098aa6a97d86d1b054e412e9954a48ea4531a56736c44cb36a60ff61fe51b92de355805ebae827e504e794ced75ef5eb55a0450febf28194f75eebbfa710ab3d3a19f7ffe8e757076e0102fb3030084afab8550cd265a31fa635934e5d8641e5c1db498f75537d11ef19a2b5532141a71ea737068c380ffc4e7cc95ba2e2aeecca66ebaf565d3b08b8874b7dc6e1ee7dfd76cfe6ea2cc306bb1732bd0ec94f5d310416ff2c234c22234b79ace002fc2fc77c8edb7e7df5d7601cc3e1d4c58df036771395c152a1021f4a6a67d7a7f63d48be2faad98aef8ff9ed9df03a823464f91aeae075def500a2b8ceafc3325e15de8cfc31a1cd0955a0ec9c9c041cbeafc822db084943e27b58f404164e036c712dd552d52146264bfc5af04ed96d8cb9824ed49af2d14d130865fa07ca35c98871fadcab3c4eeaf6b88d18c27254245cb2f8f2e67d55e989a18d40a7c45e6bd36e00055e33112ad759d30f9789c9b40cf82cfa461847a9132d064cd74990ae9db96193928d258e4d47dd855b0dde0221d3a45e9bbb7fde435a8e64cc046b95741b3a5ea9575f00a27fa352ac33087064f731183b2659e15bf6a1e2b03cbc09f6ecc92bb95c07c17351c96a01f54ca636a1b318f66fb905398eacad0a4f481624fe903cae06767297b839271c8977bfb7e5e8e12655e84e897aec4c669ff9f62f372af3a53cf4d9614ba081aa914e6c29922528cd33ee709d4161b308bcfcecdcc395d11d9414a2e63128aaf97dbb5e3f82a074bf1611c75ea1ae42ce261dbd59fb20885ca9aad19834beab14ce4b7d0599855ad66286f3804fd0c8332593202f9e3d20dbb386a85c0570d7aae0f0ba745d15aa82e505c17ebb6bbca5e1d2b3f93d9d93300b64fa13732c684a2803bd92f33ac04d7ab50b9235dbac5db902c958c118b34a8d3d13d5a2464d0bddb0a8d08d12394691ae666fa3829e82dd3b536a1d4c3eeaa1ca7888918aef40367ea1cbd13658a00cda19b18cf47fbe2236f4c5ded9b9a52e7eb653b5580850edfd35e18be940920b417f2a1e04b6edfe77f5bd2db5cecc5218ef0aa1acaa5b2fef5627334d2a1fc88816fcacc54d61ad8d7d34a62000a64b29c5d1b9054288cd4aed2353d72b93703616c1309c8f81a074f8a7fdb14b4e4905a0c04c3f9e7d515a82b773e600fd3a9eab7350026e6e472d615b9295b7fca46bdb936cec6ccd50e442e85179456a1f96010050098725ae4c61e84aafebcbc90c51bed9acba96136e8b364712388501597803786d333380f28b2f8cd0e6fd9c65acc4204d9d1fb2de5f7b50b4ff309f77c7b562e2ed116a498317d093716d58bb86bf42b31a284c91474b96179356324adda58fdd6238d1e51b5b2d65c8e6c69b27618f124f8c9c2558c7693c7575240dc211e119240dbc8271501bea9397f10ce3ffce71b0eaf56edcecee45f0f5253474e5ab845ce61739e543f05f0786278afc67c616c643ae53c41fe7be1770605062537e670f91d0e46febb48f86310ae2cdcffb57b819f95f2bdd90dfd8a036988f1aad99a63e77478ab9e2678b3df21300f614d1acffbcb357f381ba63eaea14091df41ff429c93dc0067e2397d97fc17c3229fa0204e00d8be488bf6f01dc906bf36c1c7be0b3d1c78756cf6ee22fd3f1acc22482027ffdf724b4e7a748838fe5fb94e981c3b2d20dfdb87190b2b648d3cc25398dce0225bde02d7a165773193a422bff58fcfb008a85e92a489ebb2c5e51d2f7288a3b8f770f95edb2439bd22d5d3c3b6f098f667d19e01d8602b338e264572e2502bd6552ff6255312446587b87816df48d2649d8f9382c3092c09ebc06709ac59364b804b67a49001460413c895b45d5e979a218a2f9a06345ef17a418ab86b8fc8f06c5fbd5f4229272890decd3b145b691ee1c59925fab2ab925a230c757f4d62ecd6ebd060c8754c60810acbb6133598d3ae8fd148161af13b0e5c32237a7c174b66014dea9b607109583acceb97ca378d8b48996d30db9067c51b7320b99cc3b35883b6d57cda881db4641af3092ca30e05989b96be34bb35e2252e701b6d2a7f5ba5f77fedbaf49b84824d6ad5f3b1a640d08901845df63c4d813eee5956c6a8737d29722b04af7332fd7bf052ba87cc6be04df7bea4fa947964eaada5a21e7eee2cdcddf4e267a7aed444645408f4b407c2392d4c289dfcc18be3a9c96401f6e946f11cc8362dc9d444be3d2d396798013311b432fc7af88a2cb9babd2710ed26a82df6e168752b1288532d093747f0156e0e5688c149e5688dc5e839c3b256ddb0b9f8354d15e2d0b4db5233e0b0f13115f1d0e92aedfc270d7c382a4e2ad515acfbc2bf2c1ff7604632b32c978a6e4a214a464dbc1eadd657e0487d27602a4b644686e7343529697ff50d94a1013c5ee6aa2f994bfbc81d15a135b2f4f7e87d3da431c56ce60bd7c1771dc2b7f0f68fc39820ed75a71c5ea721fd8b13f48a64896c700192270ceb745306ac5483d320e8ea20504df1de9e0f1fb4208aaa674ea73ec86c36ede8e422b372c9d0df3f5ec9b3f5e92056e4d47137ed41342b50921aa9da82b35a31a0e43bd93989241a9f37e99596a3e8f3aee16430b5d0e26f08fa91fce86cb99dde5df070bb462d88beb4aa06671c9c0351580b357d250dad200b936168dd26d1add0a4a5211c284fe671438d01614701b337be87ab7a2c414ca8ba81d22f3f01b4ccc1d986b1e84c6f453701f71e1d9a38eb0eae32e587e6bdf7709c7f64e4bf8c93830493e64641ffe49a314992c68f4c65e5645af78de8283f576294d5ac8cc2d8dbc47b5bc8a6685e85ca5cc6a7e45809e4f199ea0366f7ddae33915e7f0f471b92b9c7c2a18fd2fdf69d4ba209fc186ea50c936017dc56d7ce570ad85bb642a8f218e0c388a00fda4dfcfd277cc01e12a2cedfe4503ae5463991a0ddbbdb7721dc0dd102ea7c211b2c2e3888ffa7b2efd2852ff0319787c8aa049a36271bf11ae1c6eb4dad5e4f56f240a1d2f12302b90b9622c9c51ba59b92aee8deb43ad7a5cc6f3e71e9157f5938df89f6d9f85d918a7e0933031196d79e0bb32f2b2b467174dbb113022d846e6ced8e4d27c92e7e777ef0a7af0ee48d4c286a7c4930129c1807d58ae5ad54bc5df95db95a4d4d527bccc8463d23f2a9dcdf8e6f85a74427b829450bf8befe2a00409d82d1d38a4f10f6129620ee43541134f66cbe182a9acd018914484d884223ebefa00c555727641fd127ecfcf42974edd170cb636c0d7c39ada4ac66c300f757a306a078cbf3deb51de8ac05edb41c1359d323548195206586d0dae00e7d77171757ea0a72992f6721d59d4f058d8b3dc05f85db2c05e67ee9b3c3528061f90a529c14b52b10df024185b4ebf57e1f5e878fcbe555b63bc577020923d5599", 0xfc1}, {&(0x7f0000001640)}, {&(0x7f0000001680)="897b7fad280338a6618431406f6f329490ff7110af644f8de9350c46f88f8ea3c07f61769ecd18e6ace70a80017d95171c7313b9cc4a62a638c3d4f837351a7b85a00e68f0454637e78da01b78b5e7686ca4f8a37d2cdbca11875966721261552e729c355603cfc2ad6dfca5bae39c11289eef1902a2a4ec8f3e2be42576e2d29bfc5da35b4c6437b1c76045fd9f808851bb9d73cee7a0eeb42498b0b3aca880d64108dd5f3866c377c44829beb5acf1e9ab438c4d57af385176ae", 0xbb}, {&(0x7f0000001780)="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", 0xeec}], 0x7, 0x0, 0x0, 0x4040004}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7377616c6c6f632c0092ddee87e76f6ea917597752081e7e7167cf80563f86f6231a5ac5c65f01a247e6178965137f133a675be48dc83d1ff8c26dd8fce49677df1edb71292b7422ea8ba2cc2ff01f0b8ae6b6b9f604e57a85a85e78533ffd4c048158192a08a4a20d550621c82d9d6687c9ce05f1c0ea6d1992c5ed70df1eae143bfbcb7ec04c47377970366f8030f2f61553f83f171a2bef161463e91ca091b3726ff50d11562d7d1029dde45951"]) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x6000, 0x0) [ 799.299946] /syz1 [ 799.302367] memory: usage 7596kB, limit 0kB, failcnt 33 [ 799.324602] EXT4-fs (loop4): mount failed [ 799.332876] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 799.344660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 799.352740] Memory cgroup stats for /syz1: cache:60KB rss:2332KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2320KB inactive_file:0KB active_file:0KB unevictable:0KB [ 799.375219] Memory cgroup out of memory: Kill process 21448 (syz-executor.1) score 9530000 or sacrifice child [ 799.387160] Killed process 21448 (syz-executor.1) total-vm:72588kB, anon-rss:2192kB, file-rss:35796kB, shmem-rss:0kB [ 799.395324] kobject: 'loop2' (000000005dad9ea9): kobject_uevent_env [ 799.398450] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 799.405327] oom_reaper: reaped process 21448 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 799.418210] syz-executor.0 cpuset= [ 799.426367] kobject: 'loop2' (000000005dad9ea9): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 799.426590] syz0 mems_allowed=0-1 [ 799.456964] CPU: 0 PID: 24097 Comm: syz-executor.0 Not tainted 4.19.84 #0 [ 799.463934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.473299] Call Trace: [ 799.475909] dump_stack+0x197/0x210 [ 799.479561] dump_header+0x15e/0xa55 [ 799.483299] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 799.488431] ? ___ratelimit+0x60/0x595 [ 799.492335] ? do_raw_spin_unlock+0x178/0x270 [ 799.496849] oom_kill_process.cold+0x10/0x6ef [ 799.501361] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 799.506919] ? task_will_free_mem+0x139/0x6e0 [ 799.511438] out_of_memory+0x362/0x1330 [ 799.515437] ? oom_killer_disable+0x280/0x280 [ 799.519961] mem_cgroup_out_of_memory+0x1d2/0x240 [ 799.524827] ? memcg_event_wake+0x230/0x230 [ 799.529183] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 799.534307] ? cgroup_file_notify+0x140/0x1b0 [ 799.538821] memory_max_write+0x169/0x300 [ 799.542987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 799.548563] ? mem_cgroup_write+0x360/0x360 [ 799.552911] ? lock_acquire+0x16f/0x3f0 [ 799.556907] ? kernfs_fop_write+0x227/0x480 [ 799.562304] cgroup_file_write+0x241/0x790 [ 799.566560] ? mem_cgroup_write+0x360/0x360 [ 799.571408] ? kill_css+0x380/0x380 [ 799.575092] ? __might_fault+0x1a3/0x1e0 [ 799.579281] ? kill_css+0x380/0x380 [ 799.582935] kernfs_fop_write+0x2b8/0x480 [ 799.587110] __vfs_write+0x114/0x810 [ 799.590859] ? kernfs_fop_open+0xd80/0xd80 [ 799.595121] ? kernel_read+0x120/0x120 [ 799.599069] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 799.604647] ? __inode_security_revalidate+0xda/0x120 [ 799.609872] ? lock_acquire+0x16f/0x3f0 [ 799.613868] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 799.619450] ? check_preemption_disabled+0x48/0x290 [ 799.624497] ? rcu_sync_lockdep_assert+0xd/0xb0 [ 799.629446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 799.635008] ? __sb_start_write+0x1a9/0x360 [ 799.639359] vfs_write+0x20c/0x560 [ 799.642928] ksys_write+0x14f/0x2d0 [ 799.646582] ? __ia32_sys_read+0xb0/0xb0 [ 799.650664] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 799.656047] __x64_sys_write+0x73/0xb0 [ 799.659959] do_syscall_64+0xfd/0x620 [ 799.660628] kobject: 'loop3' (000000002d802301): kobject_uevent_env [ 799.663857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.663876] RIP: 0033:0x45a639 [ 799.678542] kobject: 'loop3' (000000002d802301): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 799.678652] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.706992] RSP: 002b:00007f2c28d19c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 799.714734] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 799.722033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 799.729319] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 799.736604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2c28d1a6d4 [ 799.743889] R13: 00000000004caf76 R14: 00000000004e3440 R15: 00000000ffffffff [ 799.782333] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 799.805554] kobject: 'loop4' (000000004643c0f2): kobject_uevent_env [ 799.816632] kobject: 'loop4' (000000004643c0f2): fill_kobj_path: path = '/devices/virtual/block/loop4' 15:05:11 executing program 3: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:05:11 executing program 4: sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003812000019000300e60100006cffff1f000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 15:05:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'sVz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x760025) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x7ba99ea286be877d}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x7f, @local}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000000180)}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f0000000640)="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