[ 33.057616] kauditd_printk_skb: 9 callbacks suppressed [ 33.057623] audit: type=1800 audit(1579624238.905:33): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 33.084636] audit: type=1800 audit(1579624238.915:34): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.499354] random: sshd: uninitialized urandom read (32 bytes read) [ 36.859198] audit: type=1400 audit(1579624242.705:35): avc: denied { map } for pid=7280 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 36.909107] random: sshd: uninitialized urandom read (32 bytes read) [ 37.702993] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.59' (ECDSA) to the list of known hosts. [ 43.256534] random: sshd: uninitialized urandom read (32 bytes read) 2020/01/21 16:30:49 fuzzer started [ 43.487382] audit: type=1400 audit(1579624249.335:36): avc: denied { map } for pid=7289 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 44.269160] random: cc1: uninitialized urandom read (8 bytes read) 2020/01/21 16:30:51 dialing manager at 10.128.0.105:46463 2020/01/21 16:30:51 syscalls: 2843 2020/01/21 16:30:51 code coverage: enabled 2020/01/21 16:30:51 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2020/01/21 16:30:51 extra coverage: extra coverage is not supported by the kernel 2020/01/21 16:30:51 setuid sandbox: enabled 2020/01/21 16:30:51 namespace sandbox: enabled 2020/01/21 16:30:51 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/21 16:30:51 fault injection: enabled 2020/01/21 16:30:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/21 16:30:51 net packet injection: enabled 2020/01/21 16:30:51 net device setup: enabled 2020/01/21 16:30:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/21 16:30:51 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 46.822809] random: crng init done 16:32:56 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") 16:32:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYBLOB="f6387a1fa31d749f507adbe088fb40458a2a7940e783249ffbcc8980fb6758d022227c9a141ef0ec37117b9ec8da12c4cba816ac394c54025dbd9fac64e63ee7cadb1983e98e8e0a52ac192803dd3277fdc7cf219d04b36c06bb701eb0c6710b48f2bddf7968ab9aecb13a35abdba610f69235a21b86d3d84f"], 0x90) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/4096, 0x20010485}], 0x1) 16:32:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x4040aea0, 0x0) dup2(r5, r4) 16:32:56 executing program 2: waitid(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) socket$kcm(0x29, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="000000000000000000001200"}, {0xa, 0x0, 0x0, @dev}, r2}}, 0x48) add_key(0x0, 0x0, 0x0, 0x0, 0x0) 16:32:56 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_STAT(0x0, 0xd, 0x0) 16:32:56 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) [ 170.715978] audit: type=1400 audit(1579624376.565:37): avc: denied { map } for pid=7289 comm="syz-fuzzer" path="/root/syzkaller-shm107059679" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 170.760298] audit: type=1400 audit(1579624376.605:38): avc: denied { map } for pid=7308 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=53 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 170.923096] IPVS: ftp: loaded support on port[0] = 21 [ 171.708056] IPVS: ftp: loaded support on port[0] = 21 [ 171.737938] chnl_net:caif_netlink_parms(): no params data found [ 171.775449] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.782886] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.789893] device bridge_slave_0 entered promiscuous mode [ 171.797028] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.803743] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.810846] device bridge_slave_1 entered promiscuous mode [ 171.835473] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.846215] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.866242] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.873579] team0: Port device team_slave_0 added [ 171.881139] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.888229] team0: Port device team_slave_1 added [ 171.901665] IPVS: ftp: loaded support on port[0] = 21 [ 171.904414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.913343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.938860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.955048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.961720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.986965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.997445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.007362] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.071960] device hsr_slave_0 entered promiscuous mode [ 172.110315] device hsr_slave_1 entered promiscuous mode [ 172.195998] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 172.210147] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 172.255490] IPVS: ftp: loaded support on port[0] = 21 [ 172.286143] chnl_net:caif_netlink_parms(): no params data found [ 172.394978] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.401587] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.408474] device bridge_slave_0 entered promiscuous mode [ 172.421081] chnl_net:caif_netlink_parms(): no params data found [ 172.433833] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.440308] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.447348] device bridge_slave_1 entered promiscuous mode [ 172.487469] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.493981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.500964] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.507335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.524490] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.533841] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.547018] IPVS: ftp: loaded support on port[0] = 21 [ 172.600471] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.607563] team0: Port device team_slave_0 added [ 172.613614] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.620923] team0: Port device team_slave_1 added [ 172.644691] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.651220] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.658105] device bridge_slave_0 entered promiscuous mode [ 172.665497] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.671933] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.678873] device bridge_slave_1 entered promiscuous mode [ 172.697298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.703846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.729173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.744122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.750507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.776199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.787748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.804797] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.822242] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.835619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.845145] chnl_net:caif_netlink_parms(): no params data found [ 172.858098] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.867223] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.953318] device hsr_slave_0 entered promiscuous mode [ 172.990418] device hsr_slave_1 entered promiscuous mode [ 173.033211] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 173.041922] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.049316] team0: Port device team_slave_0 added [ 173.059162] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.066905] team0: Port device team_slave_1 added [ 173.074705] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 173.114418] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.120941] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.127998] device bridge_slave_0 entered promiscuous mode [ 173.135691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.142301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.168012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.183086] IPVS: ftp: loaded support on port[0] = 21 [ 173.206099] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.212712] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.219634] device bridge_slave_1 entered promiscuous mode [ 173.226508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.233012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.258837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.271893] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.326046] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.351447] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.372732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.422085] device hsr_slave_0 entered promiscuous mode [ 173.460359] device hsr_slave_1 entered promiscuous mode [ 173.503133] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 173.510140] chnl_net:caif_netlink_parms(): no params data found [ 173.518551] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 173.530387] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.538943] team0: Port device team_slave_0 added [ 173.545274] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.552744] team0: Port device team_slave_1 added [ 173.603542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.629259] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 173.642690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.648999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.674840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.687901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.694376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.720287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.731990] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 173.754160] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.762128] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.770811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.778211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.798781] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 173.805199] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.923429] device hsr_slave_0 entered promiscuous mode [ 173.970369] device hsr_slave_1 entered promiscuous mode [ 174.035073] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 174.047924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.062931] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.069339] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.078058] device bridge_slave_0 entered promiscuous mode [ 174.085282] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 174.097933] chnl_net:caif_netlink_parms(): no params data found [ 174.107125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.115369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.123285] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.129652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.148222] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.155099] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.163416] device bridge_slave_1 entered promiscuous mode [ 174.208725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.217842] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.230651] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.239599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.247485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.255487] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.262024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.272647] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.286464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.305034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.316788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.348406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.362205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.372423] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.389544] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.397288] team0: Port device team_slave_0 added [ 174.403196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.411958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.419707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.427994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.444790] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.452529] team0: Port device team_slave_1 added [ 174.463043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.470933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.499300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 174.515047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.521540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.547521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.566743] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.574189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.582075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.592035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 174.600431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.607981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.615889] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.622506] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.629597] device bridge_slave_0 entered promiscuous mode [ 174.638805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.645265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.671052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.692029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.699645] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 174.706219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.714187] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.721279] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.728179] device bridge_slave_1 entered promiscuous mode [ 174.735480] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.747465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.755571] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.775606] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.784077] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.786336] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.788722] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 174.806626] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.815829] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.835142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.842069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.849201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.856436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.864987] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.874650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.885122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.893796] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 174.933386] device hsr_slave_0 entered promiscuous mode [ 174.992783] device hsr_slave_1 entered promiscuous mode [ 175.060635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.069093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.077519] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.083940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.091180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.099063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.106800] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.113202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.120510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.132564] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 175.138692] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.146096] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.168132] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 175.175604] team0: Port device team_slave_0 added [ 175.181852] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 175.193387] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 175.201756] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 175.216782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 175.225709] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.233288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.240674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.247536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.255455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.263736] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.270231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.277330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.285456] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 175.292808] team0: Port device team_slave_1 added [ 175.301312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.313283] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.327467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.340650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.347965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.356197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.364009] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.370443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.377896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.398302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.416041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.424593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.433084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.441400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.451295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.458771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.466920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.492629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.504026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.510613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.537174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.568375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.576137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.584542] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.597095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.605912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.613831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.625906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.634972] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.649115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.657999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.665699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.673452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.682492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.699876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.744724] device hsr_slave_0 entered promiscuous mode [ 175.790359] device hsr_slave_1 entered promiscuous mode [ 175.830903] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 175.838253] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 175.848102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.857585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 175.883803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.891635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.899759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.907780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.915517] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.924225] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 175.933728] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 175.945292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.959358] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 175.967229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.975520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.982629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.990310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.002716] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 176.008940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.019510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 176.034135] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 176.041766] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.049513] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 176.060384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.069034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.077126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.085332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.102281] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 176.108498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.122946] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.135182] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.143565] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 176.156808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.164997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.172993] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.179361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.186770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.205139] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 176.216164] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 176.226310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.235566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.249647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 176.261012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.271120] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 176.279706] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 176.287067] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 176.294262] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 176.300691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.308503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.316424] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.322845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.329991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.338480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.345478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.367218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.375075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.385484] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 176.401475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.409328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.418212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.425881] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.433197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.451879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.473025] device veth0_vlan entered promiscuous mode [ 176.486959] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.499568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.508103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.517351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.526224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.534108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.551013] device veth1_vlan entered promiscuous mode [ 176.556942] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 176.576744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 176.588611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.597120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.604721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.612521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.623646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.635012] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 176.648412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 176.663027] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 176.669437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.677142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.686485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.697132] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.711250] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 176.721645] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 176.733247] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 176.746471] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 176.757834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.765459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.774542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.785658] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 176.794303] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 176.806159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.818187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.826299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.833713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.847983] device veth0_macvtap entered promiscuous mode [ 176.854886] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 176.863303] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 176.869423] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.880880] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 176.892637] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 176.899804] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 176.906714] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 176.916397] device veth1_macvtap entered promiscuous mode [ 176.923384] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 176.933328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.945263] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 176.952237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.959433] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.966807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.975226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.983341] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.989684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.997035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.005217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.013015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.020232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.027384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.035305] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 177.043440] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 177.058181] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 177.067954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 177.078533] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.086540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.095345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.103326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.110105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.117184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.125518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.133521] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.139999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.156586] device veth0_vlan entered promiscuous mode [ 177.166563] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.177003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 177.189406] device veth1_vlan entered promiscuous mode [ 177.196677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.206621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.217167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.227466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.238537] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 177.253368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.269849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.278928] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.287114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.297450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.307287] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 177.317429] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 177.324424] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 177.332552] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 177.341362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.349038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.364435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.376474] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 177.384757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.395280] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 177.403406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.413585] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 177.421111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.429806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.438430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.445747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.452979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.460986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.468610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.476274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.484154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.491411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.501478] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 177.511480] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 177.517592] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.541747] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 177.557893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 177.565219] device veth0_vlan entered promiscuous mode [ 177.574992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.582979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.591463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.598972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.609752] device veth0_macvtap entered promiscuous mode [ 177.618473] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 177.628048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 177.636845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.647921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.655243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.662888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.670643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.678093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.687079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.695044] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.701580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.708824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.716799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.724773] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.731359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.744857] device veth1_macvtap entered promiscuous mode [ 177.752642] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 177.764599] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 177.771536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.783280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.790894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.802864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 177.817043] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 177.826522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.834188] device veth1_vlan entered promiscuous mode [ 177.841629] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 177.852173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready 16:33:03 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7f000001}, 0xfffffffc}, 0x1c) [ 177.884932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.892805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.916048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.928553] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready 16:33:03 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x180, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) fchmodat(r0, &(0x7f0000001280)='./file0\x00', 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000012c0)=ANY=[@ANYBLOB="edff99b60365900a9e0000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r4, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x14) bind$inet(r4, &(0x7f0000001340)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000001240)=0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r3, 0x4, 0x8000}, &(0x7f00000000c0)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea1}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r8, 0x28, 0x2, &(0x7f0000000140)=0x850c, 0x8) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r9}]]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) [ 177.940447] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 177.952482] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 177.959925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.968205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.976905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.986537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.996992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.011363] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 178.022524] xt_HMARK: spi-mask and port-mask can't be combined [ 178.032487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.046634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.057728] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 178.065621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.075804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.084290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.092494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.099300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.106131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.115059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.123884] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.133259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.141388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.155285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.166846] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 178.177449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.198950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.206435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.215213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.223913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.232275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.254887] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 178.269589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 178.288250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 178.298219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.312533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.321066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.328939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.339443] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 178.350624] device veth0_macvtap entered promiscuous mode [ 178.356941] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 178.365791] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 178.373328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.383682] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 178.395354] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 178.403774] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 178.415069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 178.423286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.454160] device veth1_macvtap entered promiscuous mode [ 178.465793] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 178.468147] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 178.478235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 178.508519] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 178.519448] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 178.527141] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 178.537482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 178.545174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.552897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.565438] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 178.588917] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 178.610880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.625367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.632559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.639520] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.649495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.664353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.674321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.688211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.698550] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 178.709678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.723945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.740352] device veth0_vlan entered promiscuous mode [ 178.748041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.761594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.771513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.781709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.791154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.801607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.818418] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 178.825964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.849186] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 178.859709] device veth1_vlan entered promiscuous mode [ 178.871866] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 178.878428] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 178.897730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.909333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.931541] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 178.942342] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready 16:33:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x80000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc1a4d5717cd1b136) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x81000) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x440000, 0x0) sendmsg$nl_route(r6, 0x0, 0x2400000d) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 178.971976] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 178.985770] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 178.994946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.025738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.050690] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 179.059679] device veth0_macvtap entered promiscuous mode [ 179.077574] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 179.089517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.098084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.117377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.133826] device veth1_macvtap entered promiscuous mode [ 179.148334] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 179.155708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.167465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready 16:33:05 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x290800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0xf01, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x721}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7, 0x66500) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r11, 0x3}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000001780)={0xf4, r11, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x90d2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x8e) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x20400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x97, 0x3e, &(0x7f0000000480)="7a8dfba18d72cc9202c16cbe16342f8891954e33dc94ea52f147b72dff72b73c120f047aad1625217fd8a8b6660ec4ff752fb426a3f39653fb906a199102e5084cc3a6764664c0a72d57a4cdf1066d157e7b3a859576bc6b415e97a829177826a1140ad25bb5d38e4578ce2d1d4c71c336a69de661bf45ebb01ab902e733651d156385460ac43adc05a375d381f39106a175fe919e57b6", &(0x7f00000015c0)=""/62, 0x8, 0x0, 0x47, 0xac, &(0x7f0000001600)="d50c726f951070e5b2c5220e26a5faedb5112c072ff645c07479a360f304eb3554cd3fed22ae43a537016ace31eedc45b29ed707a9f5b43d14aacb7f0eef992fda34fcd18f3cca", &(0x7f0000001680)="76a9440d573a4ea7b5da798d42c31088789150b6bca6c16b597bd80c30296ca9d89eacd87da81d37a6dca0fafd8b9acd1640fa34f250d31a0da6d9ad1bc273951f7e2333eda3eda4f0bb1c529352ce515e0be4ab25bd399ac7345bc38dffbf59c7f443f1dd44a9c92a6968445bcab53cae59046b7152994d5bf14bef8f02603badad00afd3964957bfa93cbbc753d986203508bbdd170f7a0821e7761251d0f1443fbba9eb20f8bd769c4035"}, 0x40) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB='\x00\x00', @ANYRESHEX=r13, @ANYBLOB="2c6163631980659f98657874656e00000000000d0000000000"]) sendto$netrom(0xffffffffffffffff, &(0x7f00000005c0)="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", 0xff8, 0x20000000, 0x0, 0x0) [ 179.396420] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.403530] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.439084] audit: type=1400 audit(1579624385.285:39): avc: denied { create } for pid=7490 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 179.466256] audit: type=1400 audit(1579624385.285:40): avc: denied { write } for pid=7490 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 179.495244] audit: type=1400 audit(1579624385.295:41): avc: denied { read } for pid=7490 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 179.522775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.533229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.642731] 9pnet: Insufficient options for proto=fd [ 179.700888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 179.709475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.720110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.729732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.739788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.749791] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 179.757566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.767555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.781391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 16:33:05 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x0, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r6, r5, 0x0, 0x7fffffa8) accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7f, 0x801) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0xfffffffffffffffd) write(r8, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) dup2(r5, 0xffffffffffffffff) [ 179.813017] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 179.829433] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 179.863949] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 179.870036] hrtimer: interrupt took 36187 ns [ 179.876440] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 179.889246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.909251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 16:33:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000000)={0x2, 0xa, 0x4, 0x40000000, 0x8001, {}, {0x2, 0x2, 0x0, 0x1f, 0x4, 0x8, "1a88c10f"}, 0x1, 0x3, @userptr=0xfffffffffffffff7, 0x7f, 0x0, r0}) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000080)=@fragment={0x2c, 0x0, 0x1, 0x0, 0x0, 0x15, 0x66}, 0x8) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001780)={@random="d975e9e72cc4", @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ff5204", 0x8, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) [ 179.962541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.984554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.000744] audit: type=1800 audit(1579624385.855:42): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16534 res=0 [ 180.002140] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 180.031293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.032508] audit: type=1804 audit(1579624385.885:43): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir034438510/syzkaller.azLgt0/4/file0" dev="sda1" ino=16534 res=1 [ 180.069803] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready 16:33:05 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x56324a54, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000000000000, 0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0xa1bf184cfcb4c1fa, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000001500)='/dev/fuse\x00', 0x0, 0x100, &(0x7f0000001540)={0x1, 0x1000, 0x3, 0x7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000380)={0x8, {"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", 0x1000}}, 0x1006) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000080)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x3cb) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c00010062726964676500000300020092ab29e6bc90313f5c14a8d5d4534e466f18e765b4fd2a0e0ffabd5f884b8215627962f7a4aab6691329692afb3fdcc3e7378871f430fe0e63a139f8432b7c88d952fec2b4b0543063914575e89dce08917ef4c83982304f91f231dc1ecf62c4bf0541ff2b5060b6a4d69b9403c96422fd8632e43e946636599dedd725bcd83c8971198e43e29e4b1c15388e01dee5bf7c4e128ff5b5c146c15db0684e76186c1d4209d8b4158f7b359d8efa69231277e09c47884e9fb0b010687409fc6fa73c91c9504b4460a91a865e0897f10dc1c1e0edc0d560f18478d67cc5cf8dbb0ee5003f6cc7185e99bc93bcb9eb76abba12076a8d076c853092edf73f4224c4e770006630b3a7e43c7e4c90ce6a20fac946584d406aa1cc75103f746d1f026456e44c9a39c62eecdb8bb82ca275e24c5c9095cbc8a6701a2447f9f6e6e4a372717366f176f0e4df46e9e28ede8a00e2a8b3dc"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x40}, 0x1, 0x4ae010000000000}, 0x0) accept4(r0, &(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x80, 0x81000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000001480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20104}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x48, r3, 0x80a, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24020000}, 0x81) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFNETMASK(r11, 0x891b, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e21, @empty}}) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r12, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r12, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0xff, 0x7ff}, 0x10) 16:33:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x2010, r0, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) writev(r2, &(0x7f0000000700)=[{0x0}, {&(0x7f0000001600)="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", 0xa01}], 0x2) [ 180.108394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.124106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.133189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.141264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.152007] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 180.196777] device veth0_vlan entered promiscuous mode [ 180.207210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.216018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.228218] audit: type=1400 audit(1579624386.085:44): avc: denied { map } for pid=7517 comm="syz-executor.0" path="socket:[28498]" dev="sockfs" ino=28498 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_dgram_socket permissive=1 [ 180.265671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.284608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 16:33:06 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000680)="5846534200007ca580b57fffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f8002000038c8000000000000000000000000800000f9ffffffff8000000000000000825c000001000010000000002100000000000806c034", 0x67}, {0x0, 0x0, 0x1ddfda1e}], 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000080)='#GPL\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) r3 = dup3(r2, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 180.298622] device veth1_vlan entered promiscuous mode [ 180.378851] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 180.423184] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 180.448514] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 180.483709] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 180.514736] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 180.543989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.551864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.563574] device veth0_macvtap entered promiscuous mode [ 180.569759] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 180.578921] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 180.589366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.596898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.604417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.612010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.618940] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.631609] device veth0_vlan entered promiscuous mode [ 180.637886] device veth1_macvtap entered promiscuous mode [ 180.647605] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 180.659137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 180.670298] device veth1_vlan entered promiscuous mode [ 180.677016] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 180.687127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 180.702426] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 180.722239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.736064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.746208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.756905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.766120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 180.775895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.786031] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 180.793483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.805055] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.813340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.820971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.828326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.836113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.848833] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 180.858784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.869014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.878790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.889644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.898865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 180.908726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.919013] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 180.926148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.936053] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 180.943776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.952223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.960312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.967934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.981623] device veth0_macvtap entered promiscuous mode [ 180.987736] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 180.998179] device veth1_macvtap entered promiscuous mode [ 181.004773] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 181.019435] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 181.036691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 181.048882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.058875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.068449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.078277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.087477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.098689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.108057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 181.117977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.128316] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 181.136896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.150594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.157896] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.165524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.173681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.183546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.193561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.203609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.214013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.223489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.233481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.242674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 181.252451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.263028] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 181.276323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.288774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.297879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:33:07 executing program 3: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) memfd_create(&(0x7f0000000340)='-self&)vboxn\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) stat(0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x15e, 0x0, &(0x7f0000000000)={0x77359400}) syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') keyctl$set_reqkey_keyring(0xe, 0x0) socket(0x0, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) pipe(0x0) 16:33:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xf944fda59bafd24b) write$cgroup_int(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000200)=0xb6, 0x4) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) keyctl$setperm(0x5, 0x0, 0x31020100) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xffffffffffffffff) keyctl$update(0x2, r4, &(0x7f0000000240)="db", 0x1) r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r6) r7 = add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, r3) request_key(0x0, 0x0, 0x0, r7) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$search(0xa, r5, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000280)={'syz', 0x3}, r7) openat$rtc(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r10 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000240)=0x80000003be, 0x4) ftruncate(r10, 0x80006) sendfile(r8, r10, 0x0, 0x8000fffffffe) [ 181.414147] xt_HMARK: spi-mask and port-mask can't be combined [ 181.483491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.494973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.514122] device bridge_slave_1 left promiscuous mode [ 181.520098] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.565568] device bridge_slave_0 left promiscuous mode [ 181.571315] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.685286] device hsr_slave_1 left promiscuous mode [ 181.744440] device hsr_slave_0 left promiscuous mode [ 181.791734] team0 (unregistering): Port device team_slave_1 removed [ 181.802526] team0 (unregistering): Port device team_slave_0 removed [ 181.813346] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 181.865629] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 181.952479] bond0 (unregistering): Released all slaves 16:33:07 executing program 4: r0 = socket(0x28, 0x2, 0x0) write(r0, &(0x7f0000000000)="1f00000054000d0000000000fc07ff1b070404390000000007000100010039", 0x1f) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x119000, 0x0) 16:33:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r2, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8200, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000740)={0x6, 0x8208, 0x0, 0x0, r5}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x74, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22, 0xffff, @remote, 0x3}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0xb67f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xf7f6}, @in6={0xa, 0x4e21, 0x40, @remote, 0x801}]}, &(0x7f00000001c0)=0x10) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x2a6, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) r6 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 16:33:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x28000, 0x1) socket$netlink(0x10, 0x3, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400000, 0x0) 16:33:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xf944fda59bafd24b) write$cgroup_int(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000200)=0xb6, 0x4) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) keyctl$setperm(0x5, 0x0, 0x31020100) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xffffffffffffffff) keyctl$update(0x2, r4, &(0x7f0000000240)="db", 0x1) r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r6) r7 = add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, r3) request_key(0x0, 0x0, 0x0, r7) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r7) keyctl$search(0xa, r5, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000280)={'syz', 0x3}, r7) openat$rtc(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r10 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000240)=0x80000003be, 0x4) ftruncate(r10, 0x80006) sendfile(r8, r10, 0x0, 0x8000fffffffe) 16:33:07 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) wait4(0x0, &(0x7f0000000080), 0x4, &(0x7f0000000280)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='[d::]:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000340)={0x5, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x1}, 0x90) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1002000000013) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 16:33:07 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x6, 0xe8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000740)={0x6, 0x8208, 0x0, 0x0, r3}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e22, @loopback}}}, 0x84) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@noacl='noacl'}, {@quota_quantum={'quota_quantum'}}]}) 16:33:08 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x14, 0x52, 0x1, 0x0, 0x40000000}, 0x14}}, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10080, 0x0) ioctl$TIOCCONS(r3, 0x541d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000280)={0xfffffc01, 0x5, 0x4, 0x1, 0x9, {r7, r8/1000+10000}, {0x2, 0x1, 0x1f, 0x6, 0x12, 0x80, "eb3a0394"}, 0x0, 0x1, @userptr=0x4, 0x9, 0x0, r9}) r10 = semget(0x2, 0x0, 0x360) semctl$GETPID(r10, 0x3, 0xb, &(0x7f0000000100)=""/218) [ 182.201784] libceph: connect [d::]:6789 error -101 [ 182.206977] libceph: mon0 [d::]:6789 connect error [ 182.226816] gfs2: quota_quantum mount option requires a positive numeric argument 16:33:08 executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x180) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a9ec8a3a63673a36d66b103e1fdbb4678731c44d5772a8b52f88132613f2ab9faa48e75b0508e2367018dc4479c6757b0a5622107e780a52d43a222d4aa8fa0c3e961e2401d5dbb22107ce4584d22a35c2ff5c7069779f3a8e888a8ac94312cdb43f7907ebfcf3dc4ad1f5e7577c5c2c9146439e6910c437a8213e177dfca08fb12f6c6a8343821e53d1f0ef24575797141dd16b8065042500017c0bab7265ba185fa61404145c500be7e57f2af455765c675c710da30fb915abbfcb8fe5e5a54f998aeb8ecb869537d7ddb529a8d66a4905586c9dd0d81d4841e2c90bd8fa2bf3802bf963edaae01ebd125510bbe75beac077af773d5d2a34b256e8369f68b0fcab87c7ee033997f53b635b59ac5aa1456d0b35e1dd734149dbcf541d744962b2bd0ece4c267760c3a6d4bce9b03000000cfa703a1a48b59700f8c902e46ae26e6e31185a19c07959edcb6bfc88c9e6bc124147521f6eb327231e35785951377c40b713a4f6854b02c428bef068f9494aa8fc9f99ddff40ef4fdc9360eb1bc2a25ac491f2bc9c7a23fe5662170feb55b3999b45b8b80a8438df19e183d854691a1f2b34352fed522c4265e4ece52f35d351a1676982ce0f2eb2c454b9df04b976179611f1be4deac0dd4c79a122f3d33e52bcce38808809820094c31af5cca2d79bf783bb87588d8c21bad663bbde2644cab2b605d0ca91b5c2417ab7c7bba5173b0bfddfd1d87ce6d257c0526fc051adaf783cb44e5f09899886b26ca746f8d2b392e0871bca6f1cb40c5ac1bf5ca80b934424deddfb547d8f9a38a25aa39752cac866986bb0faaf07ffeecd27bd736fa1a058ee5b17adbde605eb5f3648b4ee013640d018b42ef6b"], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x581, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x2c, 0x12, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x2, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x54}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r1, 0xe8217246c7a99b03, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x1) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = getpid() tkill(r9, 0x9) move_pages(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getparam(r9, &(0x7f0000000380)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @loopback, @initdev}, &(0x7f0000000400)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000440)={'vxcan0\x00', r10}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:mnt_t:s0\x00', 0x1b, 0x1) [ 182.264603] xt_HMARK: spi-mask and port-mask can't be combined [ 182.280232] libceph: connect [d::]:6789 error -101 [ 182.288586] libceph: mon0 [d::]:6789 connect error [ 182.289425] gfs2: can't parse mount arguments 16:33:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0xc0002, 0x0) bind$unix(r0, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0185879, &(0x7f0000000080)) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f00000001c0)) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x6, 0x1800, 0x1, 0x4, 0x8, 0x1, 0x401, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x7b05, 0xfffffff7, 0x3ff, 0x7, 0x40}}, &(0x7f00000003c0)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000540)={r5, 0xc3, "a08c0033d8e8080c6e509ded325dc19887b9be6f6d80168e6ade81e8ecd779a52c6eaf097b6d73677e1fffb332d7d79f09762c680d071220c1c0849e8628d412803f382fb4e6d6bf5e3a3d63298575cf37e32a4f5353fa2beb1095a47f113a315aebcf0c67cc2c6c41f94d465a61501497705922e6b4418a62fb0d47d39e20eae650122a1cd6ea9235242fc395c9cbd1ce2e52588bf3cdbe2f0fe19287dbaaa4b7f2595c0fcd45aa12bca7a8f5469577520e5a0541dec29361cc79761c60bd2f8048f8"}, &(0x7f0000000400)=0xcb) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000940)={0x8, 0x888d, 0x0, 0xfffffff7, [], [], [], 0x0, 0x5, 0x1, 0x1b, "13cc6a7a45751f58c3e11dc3da0213a7"}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000240)=0x3) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="01f8987a77ebfce34464a92c6c79e0f18c7237ab8f07cdd4588a82a7dea3dd807edbda4c22e418c732939665ff7f55162218cab46d060a7f5432f6715f16fd8df00d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r9, @in6={{0xa, 0x0, 0x9, @loopback, 0x100}}, [0x2, 0x200, 0x0, 0x6, 0x4, 0xff, 0x9, 0x10000, 0x1, 0x3, 0xfffe, 0xeef, 0x4, 0x0, 0x9]}, &(0x7f0000000300)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000006c0)={r10, 0x4}, &(0x7f0000000700)=0x8) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) 16:33:08 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141142, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="0ef6fa"]) write$P9_RREADDIR(r3, &(0x7f00000002c0)={0xb, 0x29, 0x2, {0x8}}, 0xb) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @reserved}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000400)=[{&(0x7f00000004c0)}], 0x800000, &(0x7f00000005c0)={[{@dax='dax'}, {@mtpt='mtpt'}, {@lazytime='lazytime'}, {@biosize={'biosize', 0x3d, 0x4}}], [{@fsmagic={'fsmagic'}}, {@seclabel='seclabel'}, {@uid_gt={'uid>', r7}}]}) [ 182.483328] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 16:33:08 executing program 0: fcntl$getflags(0xffffffffffffffff, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x6}, {0x8, 0x13, 0x0, 0x0, 0x8}]}}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x1) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x1}, 0x21754, 0x3, 0xfffffffe, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x490}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000680)=""/130, 0x82) syz_open_dev$vcsn(0x0, 0x2, 0x80) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0x4, r3, 0x83, 0x8, 0x800, 0xff0f}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000015c0)={0x0, 0x0, 0xb}, 0x8) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) [ 182.591839] Unknown ioctl -1054845647 [ 182.623077] 9pnet: Insufficient options for proto=fd 16:33:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/4096}, {&(0x7f0000000400)=""/45, 0x30f}], 0x100000000000003f, 0x0, 0x0, 0x0) ptrace(0x4206, 0x0) ptrace(0x4207, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f00000002c0)={[{0xff, 0x8, 0x1, 0x0, 0x9, 0x20, 0x0, 0x5, 0x0, 0x0, 0x2, 0xff, 0x6}, {0x4, 0x1000, 0x0, 0xc0, 0x6, 0xa3, 0x0, 0x2, 0x6, 0x7, 0x40, 0x9, 0x4}, {0x8000, 0x9103, 0x1f, 0x6, 0x0, 0x5, 0xad, 0x4, 0x13, 0x1, 0x8, 0x4, 0x400}], 0x633e}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000180)={0x81, 0xe30, 0x2, 0x5, 0x11, "c65868f269e47c5ee6cab6f7e9df3bc3ad4b4d"}) [ 182.826409] XFS (loop2): mtpt option not allowed on this system [ 182.867946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.940857] overlayfs: filesystem on './file0' not supported as upperdir [ 183.047209] Unknown ioctl -1054845647 [ 183.102343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.133154] libceph: connect [d::]:6789 error -101 [ 183.166564] libceph: mon0 [d::]:6789 connect error [ 183.196713] 9pnet: Insufficient options for proto=fd [ 183.222634] libceph: connect [d::]:6789 error -101 16:33:09 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a800000010000100"/20, @ANYRES32=r3, @ANYBLOB="040000000000000008001300", @ANYRES32=r5, @ANYBLOB="80002b007c0001000c00000002000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="dd701000f0ffffff1521000008000000"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='syzkaller\x00'], @ANYBLOB="08000000000000000000000000000000001004001300"/40, @ANYRES32=0x0, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="02000690b16b0002"], @ANYBLOB="0800000410000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="030000000300000000000000ff0f0000"], @ANYBLOB="10000000", @ANYRES32, @ANYRES32, @ANYBLOB="00008000d73071f533e512ec721ce53d7e3c360a97a4a9f87d5dbd17ca033db16029b1046590e5307baf9e1a4a06e89e360d2b8f7a00a186ba973a53a64fd755eceecf8be92aa85dbf33a446e863144b1fff10ee17410f042933590000"], 0xa8}}, 0x0) [ 183.278641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.302506] libceph: mon0 [d::]:6789 connect error [ 183.459033] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.477283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.494659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.543136] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 183.642761] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 183.728871] syz-executor.2 (7627) used greatest stack depth: 24288 bytes left [ 184.800915] NOHZ: local_softirq_pending 08 [ 185.470967] IPVS: ftp: loaded support on port[0] = 21 [ 186.288482] chnl_net:caif_netlink_parms(): no params data found [ 186.326446] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.332973] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.340169] device bridge_slave_0 entered promiscuous mode [ 186.346886] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.353437] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.361034] device bridge_slave_1 entered promiscuous mode [ 186.376377] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.385616] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.404327] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.411675] team0: Port device team_slave_0 added [ 186.417354] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.424738] team0: Port device team_slave_1 added [ 186.440669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.446992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.472607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.484057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.490509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.516798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.527217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.534888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.613601] device hsr_slave_0 entered promiscuous mode [ 186.660351] device hsr_slave_1 entered promiscuous mode [ 186.711143] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 186.718454] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 186.780503] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.787036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.793715] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.800262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.832011] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 186.838487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.846992] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.857046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.864333] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.872019] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.883560] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.889903] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.899948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.908117] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.914605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.931401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.938976] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.945411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.953799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.962828] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.974705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.988417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.998640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.009800] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 187.016563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.024876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.032968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.047119] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 187.055010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.062381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.073497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.139652] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 187.149938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.186024] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 187.193327] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 187.202563] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 187.212518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.220755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.227803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.237145] device veth0_vlan entered promiscuous mode [ 187.248289] device veth1_vlan entered promiscuous mode [ 187.254611] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 187.265859] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 187.277470] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 187.289347] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 187.296577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.303965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.311768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.322509] device veth0_macvtap entered promiscuous mode [ 187.331740] device veth1_macvtap entered promiscuous mode [ 187.341418] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 187.351391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 187.362311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.372204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.382587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.392786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.402142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.412579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.421773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.431548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.440744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 187.450673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.461381] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 187.468640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.477355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.485868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.495501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.506575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.516790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.527337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.537781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.547710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.557186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.567079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.576664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 187.586614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.596859] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 187.604501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.612233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.619996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:33:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x6, 0x5, 0x0, 0x7f, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000100)={{0x0, r2/1000+30000}, {0x77359400}}, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x2a) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) restart_syscall() socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x30) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) semget$private(0x0, 0x1, 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000080)='./bus\x00', 0x0) 16:33:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) creat(&(0x7f0000000380)='./file0\x00', 0x80) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4600, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)={0x1f, 0xa, 0x4, 0x200000, 0x1, {r2, r3/1000+30000}, {0x5, 0x2, 0x0, 0x6, 0x8, 0xf9, "c765c2c6"}, 0x1, 0x2, @planes=&(0x7f0000000280)={0xffffffc1, 0x20, @mem_offset=0x7f}, 0x3, 0x0, r5}) linkat(r1, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000340)='./file0\x00', 0x1400) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 16:33:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {0xe}, 0x100, 0x40, &(0x7f0000000880)="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", 0x1000, 0x3, 0x0, 0x0, 0x8, 0x101, &(0x7f0000000140)="e9b10900c3af20761c1bcc8789314e7b3e51eb38990df94435d357f7399eaa3c8a1c5d6f82afffb9a16f4c50166305e83c52adbb274c8313c69e4026f2cde370d6e1608b29acfa0228152ee34cfb8e30896043a37d25961d9074b2aaebeaf1ad513ed42ed43aab5a52b3c977c0bda890f70e8f3cd64a74586a80718e71e335145a83d740798cf84865b2a207b77322d0cbc8ac87d8153b24c9880f8cc25ccce11e85265091baeffa9e01dcd252e3156b150cc74498d8bfe57ca0c785ee28ebf6885cd535925229"}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) bind$vsock_dgram(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x2710}, 0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)={0x7, [0x4, 0x2, 0x5, 0x747a, 0x4, 0x5, 0x14]}, &(0x7f0000000280)=0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x1) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) 16:33:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/4096}, {&(0x7f0000000400)=""/45, 0x30f}], 0x100000000000003f, 0x0, 0x0, 0x0) ptrace(0x4206, 0x0) ptrace(0x4207, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f00000002c0)={[{0xff, 0x8, 0x1, 0x0, 0x9, 0x20, 0x0, 0x5, 0x0, 0x0, 0x2, 0xff, 0x6}, {0x4, 0x1000, 0x0, 0xc0, 0x6, 0xa3, 0x0, 0x2, 0x6, 0x7, 0x40, 0x9, 0x4}, {0x8000, 0x9103, 0x1f, 0x6, 0x0, 0x5, 0xad, 0x4, 0x13, 0x1, 0x8, 0x4, 0x400}], 0x633e}) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000180)={0x81, 0xe30, 0x2, 0x5, 0x11, "c65868f269e47c5ee6cab6f7e9df3bc3ad4b4d"}) 16:33:14 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x4}}}]}, 0x38}}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r0, &(0x7f0000000040), 0x0, 0x24044080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x8, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null]}) 16:33:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r11, r10, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYPTR, @ANYRES32, @ANYRES16=r0, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRESHEX, @ANYBLOB="198ba38e7d6480e2393b851b9484", @ANYBLOB="116043a15303b6b50bef70e112a75af056e92386a7ac634a51a427de6d2f09796e658b868860be9fdc8e5a7723982b6fa104a39bb1b6ad680bad18a3381643232555e95a6e22d5d1458829e702f4246488e3d0f029f1546ab0443c7549fba1e9a28c6aa5b847e4568b83c8407bfc5d226ab1431981c9065f3d99f665bb2b2c92dd703d11d877f2a9d6eea9d11fa26eafadddf19173b21aba6720cfb2828446ddbfb2ed461692e0c22abbe202cdeb72d63299fa1da7e4763c7e8c09a39654a987c70469f222cf5297165d", @ANYPTR, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYPTR64], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYBLOB="62c814edb8fd9f96ec5b1bf99cc395fd3076b51117ab9cefbdd4db4c7fcca97715ba5f8e6baa3af8246412556c2c", @ANYRESDEC=r9, @ANYPTR64, @ANYPTR64, @ANYRES64, @ANYRESDEC], @ANYRESHEX=r11], @ANYRESOCT, @ANYBLOB="4b917da0f3a31a6e50ce9723d6b20d46a91a42af5cc53d02c3d76cd39e555342333c96abff4399e521abc7e5e6569434862124d1c8ceaa220974bb8f4b1a822bbe2ad59d50d5d4449a15beea8e66b206ece3ad3b4f4d6c484a95572d33fc5e5fc02f2ee96d27e60e24069cb56d6a4ce86926002855df030c39471a3ceb46d3f3b32671bb77eaf348ad5be5f1e1a39a02175c38d1643b985536ea", @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYPTR64], 0xa}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r12, &(0x7f0000000080)={0x10, 0x0, 0xa}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r12, 0x0) r13 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r13, 0x10d, 0xd3, &(0x7f0000000140), &(0x7f00000000c0)=0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r14 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r14, 0x4, 0x6100) write$cgroup_type(r14, &(0x7f0000000200)='threaded\x00', 0x175d900f) 16:33:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80000, 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0x4, 0x400, 0x1, r4, 0x0, &(0x7f0000000080)={0x9909dc, 0x10bae521, [], @p_u32=&(0x7f0000000000)=0x1}}) getpeername$unix(r6, &(0x7f0000000140), &(0x7f0000000200)=0x6e) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) [ 188.824066] xt_HMARK: spi-mask and port-mask can't be combined [ 188.832152] xt_HMARK: spi-mask and port-mask can't be combined [ 188.846836] xt_HMARK: spi-mask and port-mask can't be combined 16:33:15 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) write$P9_RVERSION(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="13"], 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x10) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r2, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1000000000000000000000000000000010000000220008000100000000000000"], 0x20}}], 0x2, 0x0) sendfile(r0, r1, 0x0, 0x9546) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 16:33:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) sched_yield() r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)='wlan0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0f01c92e0f00106626dd7e0066b88c000f00d0c4c301688079670000bdb97b080000b8b1bae9baba000000000f304366b881008ed00f01c966b807018ec0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000000440)="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") 16:33:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000380)=@xdp, &(0x7f0000000000)=0x80) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_NMI(r3, 0xae9a) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(0x0, &(0x7f0000000180)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f0000000080)=0x39, 0x4) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) [ 189.315967] audit: type=1800 audit(1579624395.165:45): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16585 res=0 [ 189.348388] audit: type=1804 audit(1579624395.195:46): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir451191801/syzkaller.GrU0yX/2/file0" dev="sda1" ino=16585 res=1 16:33:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) creat(&(0x7f0000000380)='./file0\x00', 0x80) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4600, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)={0x1f, 0xa, 0x4, 0x200000, 0x1, {r2, r3/1000+30000}, {0x5, 0x2, 0x0, 0x6, 0x8, 0xf9, "c765c2c6"}, 0x1, 0x2, @planes=&(0x7f0000000280)={0xffffffc1, 0x20, @mem_offset=0x7f}, 0x3, 0x0, r5}) linkat(r1, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000340)='./file0\x00', 0x1400) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 16:33:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x3, &(0x7f00000003c0)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x3ff8000000000}, {&(0x7f0000000300)="fd9a05fac5f102943510941fee58347ba5816aa2427604579bb5e562f8f91d721f02e4f770ca629a6eacf6df7ec86ab510e845d5660130fb0d2c5a8c08f8948f98d0c499d446618ea8f901213e59e727c38090f03e7d1f69dbcefce90e4425bf778b23ffbd2e94b4344f92fdbbe6934124c0ed2a8cff53146082474570338966322e821b9b8c42d17b8a0a1006ac670eb01859f815b1bbf54a", 0x99, 0x2}], 0x4803, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = getuid() r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000180)={0x0, r2}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) accept4$netrom(0xffffffffffffffff, &(0x7f0000000700)={{0x3, @netrom}, [@default, @default, @rose, @bcast, @rose, @null, @rose, @netrom]}, &(0x7f0000000780)=0x48, 0x1800) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r8, @ANYBLOB='\b\x00\x00', @ANYRES32=r8, @ANYBLOB="100006000000000020000000000000"], 0x5, 0x0) r9 = getegid() lstat(&(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080000", @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYRES32=r12, @ANYBLOB="100006000000000020000000000000"], 0x5, 0x0) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r14, @ANYRES32=r14, @ANYBLOB="100006000000000020000000000000"], 0x4, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000600)={0xa00000, 0x5, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x99096f, 0x8, [], @p_u32=&(0x7f0000000580)=0x10000}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup3(r17, r16, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) renameat(r15, &(0x7f0000000640)='./file1\x00', r18, &(0x7f0000000680)='./file0\x00') fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [{0x2, 0x4, r3}], {0x4, 0x6}, [{0x8, 0x7, r8}, {0x8, 0x2, r9}, {0x8, 0x4, r10}, {0x8, 0x2}, {0x8, 0x3, r12}, {0x8, 0x1, r14}], {0x10, 0x1}, {0x20, 0x2}}, 0x5c, 0x3) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='fuseblk\x00', 0x2018000, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize'}}], [{@smackfshat={'smackfshat', 0x3d, 'trusted.syz\x00'}}]}}) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000140)=""/15, 0xf) 16:33:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf37d8d9591d4b8c8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) ioctl$TIOCSTI(r0, 0x5412, 0x1ff) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) setresgid(0x0, 0x0, 0x0) [ 189.581585] kvm: emulating exchange as write [ 189.676127] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 189.771119] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 189.788305] xt_HMARK: spi-mask and port-mask can't be combined 16:33:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) creat(&(0x7f0000000380)='./file0\x00', 0x80) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4600, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)={0x1f, 0xa, 0x4, 0x200000, 0x1, {r2, r3/1000+30000}, {0x5, 0x2, 0x0, 0x6, 0x8, 0xf9, "c765c2c6"}, 0x1, 0x2, @planes=&(0x7f0000000280)={0xffffffc1, 0x20, @mem_offset=0x7f}, 0x3, 0x0, r5}) linkat(r1, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000340)='./file0\x00', 0x1400) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) 16:33:15 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000531000)='numa_maps\x00') read$FUSE(r1, &(0x7f0000000080), 0x10c2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001180)={{{@in, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, 0x0) setregid(r5, 0x0) getgroups(0x1, &(0x7f0000001140)=[0xee00]) setresgid(r6, r3, 0x0) getegid() creat(&(0x7f0000000180)='./bus\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080), 0x10c2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getpeername$l2tp6(r10, &(0x7f0000001080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000010c0)=0x20) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) [ 189.855972] xt_HMARK: spi-mask and port-mask can't be combined [ 189.881345] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 189.943420] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 189.949491] EXT4-fs (loop3): mount failed 16:33:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) creat(&(0x7f0000000380)='./file0\x00', 0x80) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4600, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)={0x1f, 0xa, 0x4, 0x200000, 0x1, {r2, r3/1000+30000}, {0x5, 0x2, 0x0, 0x6, 0x8, 0xf9, "c765c2c6"}, 0x1, 0x2, @planes=&(0x7f0000000280)={0xffffffc1, 0x20, @mem_offset=0x7f}, 0x3, 0x0, r5}) linkat(r1, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000340)='./file0\x00', 0x1400) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 190.033314] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 190.065610] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 190.114215] xt_HMARK: spi-mask and port-mask can't be combined [ 190.117830] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 190.129850] xt_HMARK: spi-mask and port-mask can't be combined 16:33:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket(0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r5, 0xa05, 0x0, 0x0, {}, [{{0x8, 0x1, r8}, {0x4}}]}, 0x20}}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x4) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000e0ff00001c0012000c000100626f6e64000000000c00020008000100060000006b7e198ce2e0eafd12712725216c5de3fd38c2080000000000000000046aa106df20e457e8344673460d34d5837a7a5b83a7b440a66fdb53c657a59e2ae7c0c3fc9b35ab643f48200df5ce87f074602a02b575ad5a32c1bbcead140e44c398b3eae621d257390839ca7170c78692c5aedbe296d638d2cb4e6eb874a1f005aacfb82e152db0714287efec2a8a94502ca9c06df4273f4afc3744ff4902a9b65657aaa665bb7646404a3217f1f155e640ed7a5f158950bc1138d9821e763624695f96e6026df01bb2af11fceec3409da2cedb"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2801000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000000112000800010073697400f400020014000300fe8000000000000000000000000000bb0800140046000000060011004e2000000500050020000000050004008100000008000200", @ANYRES32=0x0, @ANYBLOB="0500040001000000060010000500000011004e23000005000400020000000400130005000900290000000800140004000000080008003c000000060010000300000006000f0003000000060011004e2100000600100009000000080014005e04000014000300f074cd28ee2d7cd15a94eadf581d750914000300fe8800000000000000000000000000010600100020000000060010000104000006001000ad000000060011004e200000060012004e20000008000a000000", @ANYRES32=r13, @ANYBLOB], 0x128}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r17, @ANYBLOB="01000000e0ff00001c0012000c000100626f6e64000000000c00020008000100060000006b7e198ce2e0eafd12712725216c5de3fd38c2080000000000000000046aa106df20e457e8344673460d34d5837a7a5b83a7b440a66fdb53c657a59e2ae7c0c3fc9b35ab643f48200df5ce87f074602a02b575ad5a32c1bbcead140e44c398b3eae621d257390839ca7170c78692c5aedbe296d638d2cb4e6eb874a1f005aacfb82e152db0714287efec2a8a94502ca9c06df4273f4afc3744ff4902a9b65657aaa665bb7646404a3217f1f155e640ed7a5f158950bc1138d9821e763624695f96e6026df01bb2af11fceec3409da2cedb"], 0x3c}}, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44045e4535571fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000b00010067726574617000000c00020008000100", @ANYRES32=r17, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r17, @ANYBLOB], 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x110, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0xf4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x7, 0x81, 0x3, 0x401}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}]}}]}, 0x110}}, 0x1) setsockopt(r1, 0xe6, 0x53, &(0x7f0000000040)="8a30f573fd1e0a4e523e2ffb62a5731618d6fe568ed4957ff5914531e208e7fc3ec30400fe20c92cd3d0d9e9b0c8e9ca9c849f7fb0c1975941f234f6012c5c8bf6620be7652717ca256e2d4b89c4e5", 0x4f) [ 190.136156] audit: type=1400 audit(1579624395.975:47): avc: denied { map } for pid=7757 comm="syz-executor.1" path=2F6D656D66643A0B656D31C1F8A68D4EC0A35CE2CBA2BAE5F497AC232AFF202864656C6574656429 dev="tmpfs" ino=29521 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 190.201856] EXT4-fs: failed to create workqueue 16:33:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000000)={0x4, 0xffffffffffffff78, 0x3, 0x0, 0x0, [{{r8}, 0x80000001}, {{r1}}, {{r0}, 0xfffffffffffffffc}]}) tkill(r2, 0x9) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x100, 0x0, 0xfffff001, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 16:33:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80001, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r5, 0x40045730, &(0x7f00000001c0)=0x2) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40045000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x64, r6, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x23, 0x1, 'selfbdevwlan1selfvmnet0\'md5sum\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr="4205114c19790ef3f1b5be1ad4669720"}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x10001}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x44008) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r6, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000008}, 0x20000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f00000003c0)={&(0x7f0000000000/0x4000)=nil, 0xbd, 0x5, 0x1, &(0x7f0000001000/0x1000)=nil, 0x800}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000000440)=0x7, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r11, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$tun(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="018003000080f4ff00080e0665c99dbccd95b3e70bd3fa1d06b6a57a68adfe65f84619f1d18bd94d82ce0629b0a54a48260dcbc50b867f02347f304ab62851d88696c32572fb6d0ec04aa6447f02e47aab0ad85eeecc5df1afd260a982a577793f543342d851ae381e22cf861e6be28a6e28f33c07b7d6f3224347215bba1e033f0f5dce068d51a75e0ac32c048c423738c37f18608be66ff143515f88dbfbe654ec9f56"], 0xa4) [ 190.236510] EXT4-fs (loop3): mount failed 16:33:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @empty, 0x6}}]}, 0x70}}, 0x0) 16:33:16 executing program 3: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/ptmx\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000200)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6", 0x7d}], 0x1) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r1, 0x7) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e7020026b611668ce4ad24e3e0b5bde9ebb7bb51185ff3c4"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4040041) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x61, [], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f00000000c0)=""/97}, &(0x7f0000000180)=0x78) close(0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0x7ff, @mcast2, 0x3ff}, 0x1c) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000080)={0xe7e, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0x2) 16:33:16 executing program 0: vmsplice(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000680)}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xc6, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r4, 0x7004) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x8020003) lseek(0xffffffffffffffff, 0x0, 0x3) getpeername$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, 0x0) [ 190.412885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 190.447344] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.5'. 16:33:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9300, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000}, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) set_mempolicy(0x8002, &(0x7f0000000000)=0x5, 0x6) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/229) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x8, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) fcntl$dupfd(r1, 0x0, r3) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_WRITE(r6, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x1}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r9, 0x80dc5521, &(0x7f0000000040)=""/31) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)) [ 190.534564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22325 sclass=netlink_route_socket pig=7802 comm=syz-executor.5 16:33:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\r\x00\x00\x00'], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000640)={0x16, 0xe, &(0x7f0000000240)="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"}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507009cf9416fba02af15aa2966", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x35061}, [@IFLA_LINKINFO={0x20, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x40}}, 0x0) 16:33:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x1de0, 0x8}, 0x0) socket$inet6(0xa, 0x5, 0x81) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/56, 0x38}], 0x1}, 0x10003}], 0x1, 0x102, 0x0) pipe(&(0x7f00000001c0)) chdir(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x2a) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x4, 0x0, 0x8, 0xfffffffd}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/dev_mcast\x00') r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r4, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000080)={0x3, 0x2}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x10220800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x0, 0x2) r6 = socket(0x28, 0x4, 0x0) close(r6) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000880)="f2866ebf0187749422690734faa06e90110f9313df6aa3cc25130a44ebf5e20981d1c7e1819be99a7f1dffb4c8656636bdde8c7afc82f7874e8f8c952a902ed90b79201f35b566abc23e97cf678e4f1bb393f69b8bfa396ed34fba8303e24a3da0385ee6761e05e32071daf7653758ea91449b008f73d5bcb4a7f753c3408b12641e7f21688a2f", 0x87) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10) open(&(0x7f0000000780)='./file0\x00', 0x0, 0x80) creat(&(0x7f0000000080)='./bus\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) getgroups(0x2, &(0x7f0000000740)=[0x0, 0x0]) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x42, @remote}, 0x10) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x1) 16:33:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x321001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000200)={{0x2, 0x1, 0x2, 0x0, 0x7ff}, 0x0, 0x81, 'id1\x00', 'timer1\x00', 0x0, 0x4, 0x3, 0x800, 0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4ca]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000500)=0x4, 0x4) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg\x00', 0x480800, 0x0) connect$ax25(r8, &(0x7f0000000480)={{0x3, @null, 0x2}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @default, @default]}, 0x48) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup(0xffffffffffffffff) [ 190.990087] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.016705] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 16:33:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x100}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000040)=""/6, &(0x7f0000000100)=0x6) getdents(0xffffffffffffffff, 0x0, 0x0) write$ppp(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc0, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/key-users\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000004080)) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @ipv4={[], [], @loopback}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 191.063011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22325 sclass=netlink_route_socket pig=7809 comm=syz-executor.5 16:33:17 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() epoll_create1(0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) pipe2$9p(&(0x7f0000000100), 0x4800) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) write(r3, &(0x7f0000000340), 0xfffffdf6) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001280)=ANY=[]) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1000000, 0x3, 0x0, 0xfffffffffffffffb, 0xb8f5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4100, 0x1004}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) write$9p(r4, &(0x7f0000001340), 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x2761, 0x0) open_by_handle_at(r5, &(0x7f0000001240)=ANY=[@ANYBLOB="0900000002000048695745e78c3281bbe90ac5473fe4ef29"], 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000140)=0xffffffffffffff72) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) chown(0x0, r6, 0x0) r7 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in6=@dev}}, {{@in6=@mcast2}}}, &(0x7f0000000240)=0xe8) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b8", 0x1, 0xfffffffffffffffc) chown(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001280), &(0x7f0000cab000)=0xc) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080), 0x0, 0xfffffffffffffffc) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)='fuse\x00', 0x20000, &(0x7f0000001380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,max_read=0x0000000000000008,default_permissions,fsuuid=0eJ909Pe-6\x00f5-8d77-ab7Z-8d\x00e\x008f1,fsmagic=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a2c61756469742c726f6f74636f6e746578743d73ffff000000000000657569643e00"/52, @ANYRESDEC=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=net/snmp\x00,\x00']) socket$inet6(0xa, 0x0, 0x0) [ 191.322193] device veth3 entered promiscuous mode [ 191.371064] device team_slave_1 entered promiscuous mode [ 191.376695] device team_slave_1 left promiscuous mode [ 191.420161] device veth3 left promiscuous mode [ 191.470548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 191.503876] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.5'. [ 191.522706] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 16:33:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7f, 0x801) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000002c0)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f00000005c0), 0x10) write(0xffffffffffffffff, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000100)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000340)={0x9e0000, 0x1ff, 0x80, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9b0940, 0x4154, [], @p_u16=&(0x7f0000000200)=0x4}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f0000000180)='./file0\x00', r3}, 0x10) bind$netlink(r2, &(0x7f0000000140)={0x400000010, 0x0, 0xfffffffe, 0x200000}, 0xc) fcntl$getown(0xffffffffffffffff, 0x9) r4 = socket(0x10, 0x2, 0xc) write(r4, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100040423dcffdf00", 0x1f) socket$inet6_tcp(0xa, 0x1, 0x0) [ 191.831970] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.847049] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 16:33:17 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r5, 0xab03) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bind$bt_rfcomm(r8, &(0x7f0000000100)={0x1f, @fixed={[], 0x10}, 0x12}, 0xa) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = inotify_init1(0x0) fallocate(r9, 0x5600000000000000, 0x8, 0x10ff7d) 16:33:17 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000280)) r4 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x330) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f0000000380)) tee(r0, r5, 0x2, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0xd000], 0x4000000, 0x10}) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000001400)={@null, @bcast, @bcast, 0xa, 0x1b, 0x3, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r11, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(r12, 0x401870cc, &(0x7f0000000000)={0x5, 0x2, 0x2, 0x1}) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xe00}], 0xe, 0x0) r13 = syz_open_dev$media(&(0x7f00000003c0)='/dev/media#\x00', 0xfffffffffffffe00, 0x200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup3(r15, r14, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={r16, r13, 0x7, 0x3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup3(r18, r17, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup3(r21, r20, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) timerfd_settime(r22, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r19, 0x84, 0x8, &(0x7f0000000140)=0x10000, 0x4) [ 191.872890] FAT-fs (loop0): Filesystem has been set read-only 16:33:17 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0xc2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:17 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) r4 = dup2(r1, r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x99ddb7c8515e0bf2}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x42}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r9, 0xae45, 0x3) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="66ba4100ec0f20e035002000000f22e00f7ef2f2e0000fc77a9d8fe96091ad5200000064f30fc7b70f00000066b83c010f00d0ea7b5549161c00f0312407", 0x125}], 0xabb4cbfa6006e1, 0x0, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce], 0x10000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) socket$alg(0x26, 0x5, 0x0) 16:33:17 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x321001) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000200)={{0x2, 0x1, 0x2, 0x0, 0x7ff}, 0x0, 0x81, 'id1\x00', 'timer1\x00', 0x0, 0x4, 0x3, 0x800, 0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x28d, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4ca]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000500)=0x4, 0x4) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg\x00', 0x480800, 0x0) connect$ax25(r8, &(0x7f0000000480)={{0x3, @null, 0x2}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @default, @default]}, 0x48) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup(0xffffffffffffffff) [ 192.052272] audit: type=1400 audit(1579624397.905:48): avc: denied { create } for pid=7877 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 16:33:17 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0xc2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x488201, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000001040900000000000000000000000000050001000100000008000440000000000ff6deb02588e92da36e031e1a52b2bd205d530caa3aca9ddc2a85a43406313e9f8fddc8279846d94adedd43560d5ae0779712282920e81ecdcf4a24c4ac8b25447f2656aaa684b6385643683c60129776b7f454390239e582d1628a6fe75d6aba982d06e5e62f33495de2d818764cf81a054e446701e27d4ff7157e43cb967e152b3e450dfa"], 0x24}}, 0x0) 16:33:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x18, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0xf8e) r3 = socket(0x11, 0x1, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file0\x00') 16:33:18 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0xc2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 192.188113] xt_HMARK: spi-mask and port-mask can't be combined [ 192.205187] audit: type=1400 audit(1579624398.055:49): avc: denied { write } for pid=7893 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 16:33:18 executing program 0: personality(0x1bb2baf3005ac137) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0/bus\x00', 0x84) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x200140, 0x130) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x0) 16:33:18 executing program 5: r0 = getpid() r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000100)=0x1) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) capget(0x0, 0x0) waitid(0x0, r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x15) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000000c0)={0x0, 0x0, 0x2ad, 0x1, 0x8000}) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x4}, {{0xffffffffffffffff, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000440)=""/53, 0x35}, {0x0}], 0x5, &(0x7f0000003180)=""/4096, 0x1000}, 0x1}], 0x2, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm_plock\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x40) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x711800, 0x0) renameat(r6, 0x0, r1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup3(r12, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r13, 0x80184132, &(0x7f0000000640)) ioctl$KVM_RUN(r10, 0xae80, 0x0) 16:33:18 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0xc2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, 0x0) read(r0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x460040, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000004a80)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0x1d, r3}, 0x10, &(0x7f0000004b80)={&(0x7f0000004b00)={0x6, 0x80, 0x7f, {0x0, 0x2710}, {0x77359400}, {0x3, 0x0, 0x1, 0x1}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "a0f850da95330af0"}}, 0x48}, 0x1, 0x0, 0x0, 0x48001}, 0x800) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) dup2(r4, r5) 16:33:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x2b0, 0x18977, [], [{}, {0x801, 0x0, 0x80000001}]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) mq_open(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80000, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x131, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000100000008000a00000000000800170055b20b3a61d8ac35835d029035ef81c519681238670dddf4909275a2b38fafd823008552e921f073d649d9e3d3a9285a3b56a17382f84d5b6263a9aa770b7080f2fc1c3049dd6b3dd46ec3557adeec648ba5fa7b39a7", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x50, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7fff}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf0ac}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8008000}, 0x20048844) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1400600}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x888b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80001, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002dbd7000fedbdf25040000002300010073656c6662646576776c616e3173656c66766d6e657430276d643573756d00000080000044ce4215080002000300000008000c000008000700ac1e0001000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x44008) ioctl$RTC_UIE_ON(r1, 0x7003) r7 = socket$inet_sctp(0x2, 0x3, 0x84) ftruncate(r7, 0x40) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000280)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000040)={0x0, 'ip6_vti0\x00'}) setsockopt(0xffffffffffffffff, 0x9, 0xffffff81, &(0x7f0000000040)="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", 0xfb) 16:33:18 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0xc2000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 192.555595] xt_HMARK: spi-mask and port-mask can't be combined [ 192.582675] l2tp_core: tunl 0: sockfd_lookup(fd=973845077) returned -9 [ 192.905460] l2tp_core: tunl 0: sockfd_lookup(fd=973845077) returned -9 [ 193.177661] xt_HMARK: spi-mask and port-mask can't be combined 16:33:19 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000200)=0xff, &(0x7f0000000280)=0x1) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) r7 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r7, r8, 0x0, 0x7fffffff) sendfile(r8, r8, &(0x7f0000000140)=0x8800, 0x8800000) 16:33:19 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0xc2000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, 0x0) read(r0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x460040, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000004a80)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000004bc0)={&(0x7f0000004ac0)={0x1d, r3}, 0x10, &(0x7f0000004b80)={&(0x7f0000004b00)={0x6, 0x80, 0x7f, {0x0, 0x2710}, {0x77359400}, {0x3, 0x0, 0x1, 0x1}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "a0f850da95330af0"}}, 0x48}, 0x1, 0x0, 0x0, 0x48001}, 0x800) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) dup2(r4, r5) 16:33:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xd) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x8, 0xfffffffff7fffffb}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7e}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xcc6e, 0xfffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(0x0, 0x80000002, 0x0) lseek(r4, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x2000, 0xb90, 0x2, 0x0, 0x0, 0x0, 0x801}, 0x0, 0x800000000000000, r6, 0xa) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000d83fe4)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="d3b7ce6cf3aa3425ccae98a5addb0ef6f51bd7b42c1bed7fab0793c14d1e3fdf93a212c464ca20675682d272b86bd6ad34b2d8b790e1955ff7ed9f56fb0f39b0b4456d6a35133bed3802a79388cce2c3c1764b7c90203fd06418e972cc6e6b6ab14701000000000000005fa0145702000000000000009911b4a41c4a3d50a7183e7ea54ed46337bcc51da0219522674296d50479f12a4da6b43500c409e23fe1b7872487917432a3d9bad3c3a64119b493d49eb3d2d97502fa787af089c5d9f04d2b665e18f3f4cda8469eedd5cc5ad8df79a8f6dd76b33af1c4b0bc7fe85f5d5d1a685a4770f1b6c5c9e28acea54347fdeef169e70c6c6afec46e9b385054082933096ff880de350a421072b6c779e1fe24151f326a5f83af8ce8208fa68bc36147f93b8e0f4931a0fd0848bb07111d7eb9730638203603e88f3de8ade766166af4fd41d7490cee54f8e159563ff900b3991d3c0c1091507605fc4a6f3d998848a40d3cb64f61dd0f9a4a156fe10a00"/380, @ANYRES32=0x0], &(0x7f0000000240)=0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='auxv\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x80000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000900)=0xce, 0x7c) sendmmsg$inet(r8, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1, 0x0, 0x0, 0x1cb}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000200)=0x8) 16:33:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x2b0, 0x18977, [], [{}, {0x801, 0x0, 0x80000001}]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) mq_open(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80000, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x131, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000100000008000a00000000000800170055b20b3a61d8ac35835d029035ef81c519681238670dddf4909275a2b38fafd823008552e921f073d649d9e3d3a9285a3b56a17382f84d5b6263a9aa770b7080f2fc1c3049dd6b3dd46ec3557adeec648ba5fa7b39a7", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x50, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7fff}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf0ac}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8008000}, 0x20048844) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1400600}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x888b}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80001, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002dbd7000fedbdf25040000002300010073656c6662646576776c616e3173656c66766d6e657430276d643573756d00000080000044ce4215080002000300000008000c000008000700ac1e0001000000"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x44008) ioctl$RTC_UIE_ON(r1, 0x7003) r7 = socket$inet_sctp(0x2, 0x3, 0x84) ftruncate(r7, 0x40) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000280)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000040)={0x0, 'ip6_vti0\x00'}) setsockopt(0xffffffffffffffff, 0x9, 0xffffff81, &(0x7f0000000040)="483c0a658b94ca256f6cbec707df42345e60ddd1f83d5f96eb4221914ac9d46d3703ac821812e4541eefa8c1da2a4854a4e8479f59a211b502c0e2fde64fe63c246625af96d5a46ec4219c29e5ceb932df20f400dbf8510867c2a7d50e88beef42bcfb59c48b8a760a877affc7a62bda306da8cf050910056d72619c928ebe6277cd7f8490b213f8e0e46deb7ddafef56c45b8ba6099c2cc3092b7a54b754b273da58ab76e998df10c980992e19402b7358b2519abdf0c7e511457368c16f68531c269b490e8394fc272a526ed9200df826c43b87547f478f7a62a69a1d88c7a6b19fa3b4b9ba769d001792122c5b1888b64968ac3c587eb6d506a", 0xfb) [ 193.598698] xt_HMARK: spi-mask and port-mask can't be combined 16:33:19 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x6, 0x34, 0x8b3c}, 0xc) r1 = dup(r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000080, 0x0, 0x0, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7ffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 16:33:19 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0xc2000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 193.719360] l2tp_core: tunl 0: sockfd_lookup(fd=973845077) returned -9 16:33:19 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)={0x18, 0x1, 0x0, 0x5}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) dup3(r5, r6, 0x0) dup2(r4, r7) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) 16:33:19 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0xc2000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:19 executing program 3: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:19 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) signalfd(r4, &(0x7f0000000380)={[0x101]}, 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001900010000a1b20000000000ff01007bf99eed000000000000000001e0a4000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$sock_bt_cmtp_CMTPCONNADD(r10, 0x400443c8, &(0x7f0000000000)={r11, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r13, r12, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)={r13}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000000280)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x30) 16:33:19 executing program 2: mknod(&(0x7f00000005c0)='.\x00', 0x400, 0x0) r0 = getuid() setreuid(0xee00, r0) lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x4}, {0x9, 0x4}], r0}, 0x18, 0x0) setuid(0xee01) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) 16:33:19 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') chdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) [ 193.986957] xt_HMARK: spi-mask and port-mask can't be combined 16:33:19 executing program 3: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='cpuacct.usage_sys\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) socket$kcm(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup3(r12, r11, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCAP(r13, 0x80685600, &(0x7f0000000200)) 16:33:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000000)={'ipvlan0\x00', r5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x1f, 0x1}, 'port0\x00', 0x8, 0x80000, 0xffffff7f, 0x7fffffff, 0x7fff, 0x2, 0x5, 0x0, 0x5, 0xdd}) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x408000, 0x0) ioctl$SOUND_PCM_READ_BITS(r7, 0x80045005, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000000)={'ipvlan0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=r4, @ANYBLOB="01000000e0ff00001c0012000c000100626f6e64000000000c00020008000100060000006b7e198ce2e0eafd12712725216c5de3fd38c2080000000000000000046aa106df20e457e8344673460d34d5837a7a5b83a7b440a66fdb53c657a59e2ae7c0c3fc9b35ab643f48200df5ce87f074602a02b575ad5a32c1bbcead140e44c398b3eae621d257390839ca7170c78692c5aedbe296d638d2cb4e6eb874a1f005aacfb82e152db0714287efec2a8a94502ca9c06df4273f4afc3744ff4902a9b65657aaa665bb7646404a3217f1f155e640ed7a5f158950bc1138d9821e763624695f96e6026df01bb2af11fceec3409da2cedb"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) getsockopt$bt_BT_POWER(r14, 0x112, 0x9, &(0x7f00000002c0)=0x80, &(0x7f0000000340)=0x1) write$P9_RUNLINKAT(r7, &(0x7f0000000380)={0x7, 0x4d, 0x2}, 0x7) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r11}]]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000240)={@empty, r11}, 0x14) 16:33:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r2, 0x0) r4 = dup2(0xffffffffffffffff, r2) recvfrom$netrom(r4, &(0x7f0000000000)=""/35, 0x23, 0x40002102, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004) 16:33:20 executing program 3: ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x10) [ 194.110845] audit: type=1804 audit(1579624399.965:50): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/13/file0/bus" dev="ramfs" ino=31270 res=1 16:33:20 executing program 5: clone(0x210000, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getuid() setreuid(0xee00, r1) setuid(r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x340, 0x0, 0xb8, 0x0, 0xb8, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'veth1\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3f, 'syz0\x00'}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'nr0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'bridge_slave_1\x00', {0x0, 0x8, 0x0, 0xf65b, 0x1, 0x7fff, 0x8}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f) 16:33:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)='wlan0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0f01c92e0f00106626dd7e0066b88c000f00d0c4c301688079670000bdb97b080000b8b1bae9baba000000000f304366b881008ed00f01c966b807018ec0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000000440)="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") r9 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x20b02, 0x0) setsockopt$netlink_NETLINK_RX_RING(r9, 0x10e, 0x6, &(0x7f0000002180)={0xfffffc00, 0x3, 0x8}, 0x10) 16:33:20 executing program 3: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0xc2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 194.296510] audit: type=1804 audit(1579624400.025:51): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/13/file0/bus" dev="ramfs" ino=31270 res=1 [ 194.349268] NFQUEUE: number of total queues is 0 16:33:20 executing program 3: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0xc2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 194.414886] audit: type=1400 audit(1579624400.045:52): avc: denied { map } for pid=7995 comm="syz-executor.2" path="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/13/file0/bus" dev="ramfs" ino=31270 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 16:33:20 executing program 3: r0 = openat$audio(0xffffffffffffff9c, 0x0, 0xc2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 194.540970] audit: type=1804 audit(1579624400.045:53): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/13/file0/bus" dev="ramfs" ino=31270 res=1 16:33:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000000)={'ipvlan0\x00', r5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000180)={{0x1f, 0x1}, 'port0\x00', 0x8, 0x80000, 0xffffff7f, 0x7fffffff, 0x7fff, 0x2, 0x5, 0x0, 0x5, 0xdd}) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x408000, 0x0) ioctl$SOUND_PCM_READ_BITS(r7, 0x80045005, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000000)={'ipvlan0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=r4, @ANYBLOB="01000000e0ff00001c0012000c000100626f6e64000000000c00020008000100060000006b7e198ce2e0eafd12712725216c5de3fd38c2080000000000000000046aa106df20e457e8344673460d34d5837a7a5b83a7b440a66fdb53c657a59e2ae7c0c3fc9b35ab643f48200df5ce87f074602a02b575ad5a32c1bbcead140e44c398b3eae621d257390839ca7170c78692c5aedbe296d638d2cb4e6eb874a1f005aacfb82e152db0714287efec2a8a94502ca9c06df4273f4afc3744ff4902a9b65657aaa665bb7646404a3217f1f155e640ed7a5f158950bc1138d9821e763624695f96e6026df01bb2af11fceec3409da2cedb"], 0x3}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) getsockopt$bt_BT_POWER(r14, 0x112, 0x9, &(0x7f00000002c0)=0x80, &(0x7f0000000340)=0x1) write$P9_RUNLINKAT(r7, &(0x7f0000000380)={0x7, 0x4d, 0x2}, 0x7) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r11}]]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000240)={@empty, r11}, 0x14) [ 194.636683] NFQUEUE: number of total queues is 0 [ 194.696900] audit: type=1804 audit(1579624400.545:54): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/13/file0/file0/bus" dev="ramfs" ino=31324 res=1 16:33:20 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') chdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 16:33:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0xc0002, 0x0) bind$unix(r0, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) fcntl$dupfd(r2, 0x0, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0185879, &(0x7f0000000080)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x6, 0x1800, 0x1, 0x4, 0x8, 0x1, 0x401, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x7b05, 0xfffffff7, 0x3ff, 0x7, 0x40}}, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r6, @ANYBLOB="08100000", @ANYRES32=r6, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000240)) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r7, @in6={{0xa, 0x0, 0x9, @loopback, 0x100}}, [0x2, 0x200, 0x0, 0x6, 0x4, 0xff, 0x9, 0x10000, 0x1, 0x3, 0xfffe, 0xeef, 0x4, 0x0, 0x9]}, &(0x7f0000000300)=0x100) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) 16:33:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xc0801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0xffffffff}, 0x2060, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000009c0)={{0x108, 0x5, 0x0, 0xbc, 0x5, 0x0, 0x290, 0x3}, "e6467cda302158d97561b8c2dcd6524a3454561f8b1240d945cff63cc536f72cc91069b34a720cc9fe7c38c231e02b37f67911499fead70372e4c9e0a1bf07a1600e1010383e6c084d7c172d09303eadad46cb78b6806c80760ba8a679d544f8693999114ec844f9beacaa35b3eb41fdf4e83bd5d8a95e76630ea050683a2ff4d6698bf292dc7b9244075130a748f9a617e50c576308357543e2c2090bca83f05b6a7e3629c36acb047920a097c5af9b873eabea42cf2c9214872f3237d229c46d6bd9ecab25ed26e8b70595f8ac1609b08342d50862df8b0d4cf0218c232ce92d822562fb2bc4edc9b5e8039475e94289ef7100f603f8f1df773702bee19e95e5771cda5d5249b65c45892e9982b5dadf50e08d804756e4dd8031caf0049019eba67ab6c6ae1c2762eb0fc8712018eb3dfb593c1ebbc906ea1200d184d5ca2b335c1e8c9452c4c25cd0350258074de0648c559d07069890e4c5b6c6e615322d4128ba43e38833e1c993510965b40f5711b9ce6d1f70cd6dbb63b7153b490c76f1ea36eb5b4783964458b9543078b93f86869e9b5f3532b9419e95f35d9168d2e173d822e88827002d93c1a1cfedcbc29cd4f86f5213bd71549f3952b5b5dd48d59e4272d7d54d2f67be36689861b93e3d66a7f01cad819f6d2f3d260ea2f8a8dcdd4f6f2a90e27f51d77de9a0957e806b8fb27858ed86097729bb51aa189b30acdbc121b86a506a7a8e972cd1fd8f063d7fca11a170a41d9b46ec08d5e2d5f611b100bef6a9113dafcc697f1a1b9bb3dbdeb39e10969b52c4ca15a118f6b6ab41711fac3d0416aa841c45a44baf3f379ce1be2622cdcc4a521be8a383ab603426e16685bf5fdf0df19c87929d3860668297484655236278b1c0cf163f5de1d9677b6d18e02c3acbeaf326e8f5678002f00234d5d6334af67a0d385b133719194e9696d7d9cc3e803558cc9e239c3f1519adeb8fa355099d0cd5393a7713e634fb36e64738970d7b1dfed4ec3ef6b3d23011731b1c354bb13d080f9ea2c85690a7c95939cd9840c5a7bf5fe46f0749108de935b3775f05266213e088b42385d9ebe9c5dc3bc2b88b8297ca531759b4226f58c603f1e5fd65f1aac0cffffac1fd71176b75378e968cd4a0dbe5b5ebec857a53860820d6341f8aa0edf5a34704c9350040aec9d5846508acceaa1601383f9bb37216af36f6f621bb1f0486e94425afb8bc1b796c842990db4a812539864085076ee7cc1644bd8e236778972d524c0cfd4d0ef4714ac464c089413658481ed5c1b78bd3a93225ddeac5aabdc093b45f0f8fc8289bf5a7c6af10916261187ea6a3349edd725c2345eb1eb2b456ca803dd3f0cf17d636d2305ddf9eef876bf8eecaa305b80504c8dfd51410354a6da4bc67fcce629fcc8f09f75c3f165c07dc164564b96f005181633cb2bd76d7da2a83660b1d3b9e6032b924b5b0757fe522aee35918eff9340d2abbe97f08f5a28ac0b1ca9dd93e14642327125930b938ff6419078823b82e04bc12c7e988ad93c863c9c2b098025686f607898e8a21c77058e779999c50defc8ec4fe79c2b132e51a5cd42a81ffa07184b8e7f00115f082a479ca5d8b1d891f6f7de41f64fb2f97f185c56590de54f389f7a3829333e02d2abf9b5ea590c40f8f7962a137ed048a90f56ef58fea53b641238f1059fdf82f951d35b196f5e648c3ae53943cc2963f5f0d28f4febd804ec0cd7ebceb15bc4c17861a45f2794fe89300731ffcd061d3735be28331f2d1efbc05bd0a78b64d5da7f03cd302ad96469d42526f7730765573ac1c3d85ae8086da2fdbd659b5ecf3d76ff5ae72443c6c08f35f2cc45cb4e158942b91b0fc75520bffa82876bbc7d39b33cde6d325ef526c32c5b5218649e0c8be53d520637dd5c31cf637f0d1bd21b1987c3a109e28b89ad7903db110fbb25a1ec3b55c55db6193591715d377d4a23de160c6107e64911b4587e7ebc312619910ef01ec22aa5dc04b62990b5080a9eb778ee53cc5fdde9377ec46c998fc162e6b6e65332af5cdbc5e2378a3702c9f3d020b1d2b86e07571612715fa9e22a8e75239ae1e1a1e76230d3079cdc3031b46cef4f40a427b0e71284515e93d62c94965940eb73d3db3a91c41aa7844ef36952be7b62c6318afda82af7bcb0c6aac6c36b9656ef8545cf6aed3b4d18faf1df8a84afab0e1d1c672f9e1902c23362ac7c73e0c85a9176dc9e7924eb42f54a2abfb9ae397b5c554271f10dd72e360843a98022f869fb5f849c972dc1228635f252c77c2d572e5e11275d96d0ecafb4188bdb6b8d870d0e2dc4f8706bc9732aa96b337b3ae9062051d7dd8200a75019454087e3a0425e388b92e9eb8a024c2777ba19912b91a26666f8835ea469f18e473ae2827e8924bf4e61d057768910955fea7040ab511268491bad7e62ad55647fc122d8c1dccf7642e5952292bea20c721b2b0c5cca73a8ef4072d9474fd5bf4a00b3385d35f36040614aad948ca6b8d89e5c33a9f7b4ccd2d0bbd79977cce802b032077a0801a5ad269930978c33c00caa2e74f5a5540170b4942107767cf0e2a219c49b7302f9293f1b5cda6e8704eb0e10d3086d591aa6d3d078e1f1503c8fe8e7eccd668a48259e5298894bf410774776c05dc1ce6533a9c39e90c887ed60c426afc7056f9bf10ed4b3323fbbed2b07d6c29fd14dcd9d53c7c4b6270788a3fc145e7af23e36d04c5a54edcd2489dc821ef525ff3774fbb7ee4c03fe9048b35ce76ba7637f0e98266bf26bc04c0ca7defe838c5114ae6cc765bb78764446373c25c605f9073badda9cfaa5dff7794285dd83e0a825e13aab6403dec3e4cb9d811b39ce77605fbd957a138e5f5a7466c2ff16f4ad13dca7cf35b747245e099f8f74af6649448082b508460e9c41c0c8336214cfd81f58bbbf97f8ea89b6b24520351056a79cc63243cc210d37a8215dd1f15a78b323ea0bad9079e0b08b1bab345f0c46ec4893bc6aee87fd20f4b99f3e545ab30ee187e040960f595ff6cae3d2edcdafd3079dd010e500a79bba5777f573c1ade421c6bb8f27e78575925859aef8af2d31481a6c0678a307bb7132486daa5dd9c75770b8d14a318323c568235cb5075f215ecc1192e5bf6e8a2482ab8ac904b2c5c18025f5cd4cdf1b745488734a8c1a996f32735537c184fba0fdb17aa750bf1c2959037b5cada205e93cc9ca798dd63ed0b1741486ee062afb5c85b71246db70ddd75830e41e8d7fdd91bf59456d90296c624e8826bc4067b9adf41fd02ff088b18dac20236af36400b181fb0c33f18f5e623e50d22ab79c8628dd602c81dada408c06b51d0360e2e6e232110a4e906c23745b565b3506976953a9f777f8f40ba91b64683277ffba18f769c145ce62b4a48eae89813d9b8d1ff3650257d37303e488426431ec77149cad0981ba0f44a0dd4b05d6dbf2461c8a7d566a81f10c765bfeee4c8f5aa457f7f11b205a67c4540f7d1f0b79d37d77444cafaa1d02d91d868275d5218687f6779556d22a901a2251b29f0ab90f7c8af8af6c6f45da5d5856fc963b29fdf89c7454e9d5d91242ed52f9a55dd04a6ac68fc5ced8bf9f8d1db3dc6962508adc9673bea96d12b9aa4a7f760dc4235feec98c8570bddcd1beb4c7c929a433af3284bdf0ea19d5e62907b45f58492ad93aeaed43376f7efcec1770890d9254b0fe9c6823a9e899fb094b39fe1170c89b52bb675da521380efba438cb43811da25954a0f8e32e96de42389c3bc07cae4114317ad12adbe605a6721d604e46826bb7424f55239a12be7b1fca16cc1e954f242f35fa7efaec22c2789ae8f8a640ccb2c13825b1b576d8ed550a0859dcc47c8b9911873f7f7b0d66a5ebffcdb51ac3236442281f9d77cce5d0ab56936ae5c912425def8acaa3d8744be91d41b6e23e751ee3425e551e630ba572c3030eee21a969ceccb28423a2e9aa5e0bdaff9f537e302eb31273d00eb0dbe9d56f4f11cf1501291f397271d57f6bdaa56bcb01026b632e04f8bb39e76b2de74b2e6175c89ad3726f7b816a85024250b7dab4e6ccef2427a70db0ed553bccc8e49d94805adbf9f8eddacc2f656be712823f059f461b305d16a6fa8ed838580687436a3d5e0a13029508c34e9766f3c6486bf3d791a514f30ccc370fd794f4d44bb1107139f84d7b2cb5502bfd88cb9bc0dbe921f6221b01780b89397c9ee5fce64f43db47541c24d22d29ae6ad496607e609c44c42694907b58754dddc20b349a794ee2a6503367a73a6760fac0ca68fdcad5576cddaeef577144d9e8795196fee42db9284b0f9c49bcd0562ad95794610f82698289a15ae9fd0cfbe806e9177d1744c30cdab27cde6d3f76a92c475e6fba80c599b59ca67fe154129bf7d12e69a014ca8d9d54029a743e85874fc21a8d86485f6e551f286c3544a3bd72554c0615ab0f41937ee9e67fcd506a62ef993256fe1f6cf14fa8a24afd75d9bfeb5d105652557e1f97b5cdc483dc4d8cf021202b87097fd2b803ecaeeeb9679f1b431e8186dd128c82682a6c4b23ebef057dd1ee05c17fd6507125054f5b2548c2c9bd41a48484b18968b69933983510d7a130775ce6249c05151800b407e0a370c220eb1edd68f5a165bb573e7ae45fdf6b82e0fbba99f89f889b415d15ec0a9ae1251c50148b8c13996e425d779c61144a8f9524fa6bf973254dff33a9337fe35fee3dc3fee51b9b289a59681a529de2d8e5222217f6711cea8c6bd50c6c89d7adf1ca9059e7dc138c314a852c96d7e0ee601082534f9c70a660ff9291812cc2852d8c647a08c823dbeaf068e78d57d06116f5a50e7d71c2220c5a5fdc01364cc5088168bd346e2a5ed214ccc2f5358a80c8eb6754c0d14dacbe78fe6b376b744b4f91a14fa44355277f7e1973cbb9ffd31dc36853bc46a42965eb59905fb8b7fa0b666e60ad69cf3e5bf134b4b71c6b44f8c2d0ea9fb50ea01fb1281bc09d275ef4aab4baf037ae9a1ddb5f5b7ed469c93e14c2a0827de8be31f267060fe9242b2c935235b2d773cc4deb6d4aaeb7a66bbd1e3e5646969d8ba4e78bca06725e0a89c3606c5e881e5542779dae8dc9d051c08a82882589bc16710fa745ec6dd27d523404d86839e8c414f3dccfdd26e2d578c7120d2796cb6afd86147da5e86edfd29dd9ba9e4f28ca634145bd7ae8c13384bff5f703aa230dc8e7ec50ee767f4d786bc8b1d93fee908f4bd108f85894ac8f99470272d1149a40263758cac663e420edb5e4e214e3d810fcfe85baf985f1c197e10f94b37bb16cb421c6e610f605e8c8c2b9f72b308aa9333bb3f34f41fa410985cb61ed02718949670e64a2698bab5b285efa277adc64938d6598c0be578a8bb4248db84b9b490c94c6fa8a27884ac4e1d53d04d6132a7d1642f5155706093264d20c0358a8c19d369293617153ad5192b307d00f5424e88fc0eade139e71e6b99508539d3656068f8e420e9bf14cdf67eb8dd6ff676daf8a8b95bbc9555e5deeaed107b274056219b8da680817e1c8eb9d894b3029bd4afda0deba22fe75078845a4017476b996fa892d6e38bf7158beeb02aed2bd6731023efed15f547f9a73cf32f61a7b0c64583d92d00686671fe33ede865d55e4d552ce30abb4d404b330f58162bb54c7a39e8fb28d7eb38e3611f9d7b88f56a1d5abbf2eb6721d0b9dc7402bb95d3ce4f90f4cfa40145a7ba9b6ca298c4bd486461c6c43ef23326702afe93037c43945630eb4d10d0c0de92bcb5877e2dfbb1962705070fa6d454bb3289e1bd13e4bfe7", [[], [], [], []]}, 0x1420) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0x10bd2) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r2 = socket(0x11, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r2, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) socket(0x11, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) 16:33:20 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 194.800650] Dropped {multi|broad}cast of type= [86dd] [ 194.857148] audit: type=1804 audit(1579624400.555:55): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/13/file0/file0/bus" dev="ramfs" ino=31324 res=1 16:33:20 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) r0 = dup(0xffffffffffffffff) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) r1 = inotify_init() r2 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) epoll_wait(r2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x4) sendfile(r2, r2, &(0x7f0000000080), 0xa198) [ 195.026773] Unknown ioctl -1054845647 [ 195.040500] audit: type=1804 audit(1579624400.565:56): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/13/file0/file0/bus" dev="ramfs" ino=31324 res=1 16:33:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "b01b561fe62bbc7c", "ffa6976852159c4b58a64c9e6f5f8b08", "4c4005f7", "070c3c526102f223"}, 0x28) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x521102, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ocfs2_control\x00', 0xc0000, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() pipe(&(0x7f0000000200)) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f00000048c0)=[{{&(0x7f0000000600)=@caif=@rfm, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000400)=""/244, 0xf4}], 0x2, &(0x7f00000007c0)=""/100, 0x64}}, {{&(0x7f0000000840)=@nl=@proc, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/124, 0x7c}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f00000042c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000500)=""/149, 0x95}, 0x4}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000d80)=""/157, 0x9d}], 0x1}, 0x6}], 0x5, 0x100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x1a8d}, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xd27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffb, 0x42, 0x0, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000340)="a7a527696863ebb3c88720893beb8b113f1eede479fcf043b11c463207c7c5a4ac418a9029449e720323c91c09b528fc8c13bd1e3c28e476bc9dc14c0a2457342cbc", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x2, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, r8, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x3c}) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000040)=0x1) 16:33:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:21 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000020005f0214f9f40700090400020200001f000000000000000800010000000000", 0x24) socket$vsock_stream(0x28, 0x1, 0x0) [ 195.179410] audit: type=1804 audit(1579624400.865:57): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/14/file0/bus" dev="ramfs" ino=31352 res=1 16:33:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 195.279704] audit: type=1804 audit(1579624400.885:58): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/14/file0/bus" dev="ramfs" ino=31352 res=1 16:33:21 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000020005f0214f9f40700090400020200001f000000000000000800010000000000", 0x24) socket$vsock_stream(0x28, 0x1, 0x0) 16:33:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 195.599440] overlayfs: filesystem on './file0' not supported as upperdir [ 195.630291] audit: type=1804 audit(1579624400.885:59): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/14/file0/bus" dev="ramfs" ino=31352 res=1 [ 195.646267] Unknown ioctl -1054845647 16:33:21 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') chdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 16:33:21 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "b01b561fe62bbc7c", "ffa6976852159c4b58a64c9e6f5f8b08", "4c4005f7", "070c3c526102f223"}, 0x28) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x521102, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ocfs2_control\x00', 0xc0000, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() pipe(&(0x7f0000000200)) sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f00000048c0)=[{{&(0x7f0000000600)=@caif=@rfm, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000400)=""/244, 0xf4}], 0x2, &(0x7f00000007c0)=""/100, 0x64}}, {{&(0x7f0000000840)=@nl=@proc, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f00000006c0)=""/124, 0x7c}], 0x3}, 0x5}, {{0x0, 0x0, &(0x7f00000042c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000500)=""/149, 0x95}, 0x4}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000d80)=""/157, 0x9d}], 0x1}, 0x6}], 0x5, 0x100, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x1a8d}, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xd27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffffffffffb, 0x42, 0x0, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000340)="a7a527696863ebb3c88720893beb8b113f1eede479fcf043b11c463207c7c5a4ac418a9029449e720323c91c09b528fc8c13bd1e3c28e476bc9dc14c0a2457342cbc", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x2, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, r8, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x3c}) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000040)=0x1) 16:33:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f0000000040)) socketpair(0x0, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r1 = getpid() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1ff, r1}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(0x0, &(0x7f0000000200), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000002c0)=@ll, &(0x7f0000000380)=0x80) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-control\x00', 0x103080, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 16:33:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:21 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RREAD(r0, &(0x7f0000000480)={0xb, 0x75, 0x2}, 0xb) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x141283, 0x0) sendto$isdn(r1, &(0x7f0000000200)={0x800, 0x3, "98baf84f3f769a7986d6998e949ac02e0bbfd26120f47f27cd05383940868dcbe72ff9acbe398d339fc50dfcfe24b028e480ed32befe43fdd3b034892cd221e2b7ff9d40"}, 0x4c, 0x20004800, &(0x7f0000000280)={0x22, 0x0, 0x5, 0x1, 0xff}, 0x6) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETS(r4, 0x5402, &(0x7f00000002c0)={0x4, 0x9, 0x100, 0x3, 0x13, "fbcedef5eeb7196e5761e1da001d63839a0cd8"}) wait4(0x0, 0x0, 0x80000000, 0x0) r5 = getpid() tkill(r5, 0x9) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r8 = accept4$alg(r6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) bind$alg(r11, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) sendfile(r8, r7, 0x0, 0xffff0000) [ 195.886683] audit: type=1804 audit(1579624401.735:60): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/15/file0/bus" dev="ramfs" ino=31404 res=1 16:33:21 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:22 executing program 1: ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) r1 = getpid() tkill(r1, 0x9) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x20, 0x7, 0xa1, 0x0, 0xffffffff, 0x10281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x100000000, 0x8001}, 0x0, 0x2, 0x65, 0x6, 0x3, 0xffffffff, 0x100}, r1, 0x8, r4, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x0) accept4$unix(r6, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x80800) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xa1, 0x0, 0x4, "85655eb63e9b630c2b194ff936996ac5", "08365654e66481a0265c5e1b99ba150d499a6c70c26bc2b709ee951c8d499f4da5edba204fe06e9c1fd17e0c5f05a62b51c607bc9b1a661fb0eee6f2a58832a2550d5dcd4858730bfdb1cf53c9d39f8232b81c94963035a9e9c3933cbe009519ccf4b2055abe322af858dac5808734cbd65a163a6b3208c5fcded4e49ea919534840129afc8452103b68e360"}, 0xa1, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) close(r0) 16:33:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x92080, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x400000000803, 0x5f) open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r4 = socket$inet6(0xa, 0x400000000803, 0x5f) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x0, 0x40000, 0x0}, &(0x7f00000001c0)="a52769085663", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000002c0)=0x5) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) r7 = dup2(0xffffffffffffffff, r6) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) r8 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x80) ftruncate(r8, 0x200004) sendfile(r4, r8, 0x0, 0x80001d00c0d0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0) 16:33:22 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x10) [ 196.308381] audit: type=1804 audit(1579624401.745:61): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir954080464/syzkaller.Rm4MT4/15/file0/bus" dev="ramfs" ino=31404 res=1 16:33:22 executing program 1: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) mlock(&(0x7f000038b000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) 16:33:22 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000040)=0x401, 0x4) getdents(0xffffffffffffffff, 0x0, 0x0) write$ppp(0xffffffffffffffff, &(0x7f00000002c0), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000004080)) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000100), &(0x7f00000001c0)) 16:33:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000005c0)=""/79) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffa8, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b000c0000000000000004140e000a0002000000dc2976d153b4", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000500)={0x2, 0x7}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$sndseq(r2, &(0x7f0000000200)=[{0x7, 0x1, 0x5, 0x5, @tick=0x2, {0x1, 0x1}, {0x3, 0x20}, @ext={0xe5, &(0x7f0000000100)="063265b110753f11a0f514a43fc551cf80b1373fc231a049e9940bb0dbdcb4c3023c08ead3880386ea212f328e95b2c83a848670ec98f1368967f0bf3d53529010040a7ea48950535a89ffbab48ce44fe1f4a0985ccdb5d6c9de2b60a1469b8b2507bf8277e122dfed902808e627d8486e79b6be3869a82ec4a24c64d68ad7fcb00d41e673b637eecd89384087bc06457b46dcf014cf8cd332fc269acf0e5091aa8f9144e76ad8e769cf24bcbb3f3dfd2e540e0ecd9461b6eb0730a37864e3c42d2a5fbb64439d36aca45245669cdcb93d7b5647424be01a5336fee0cf12c66640f822f8e3"}}, {0x80, 0x3, 0x80, 0x68, @tick=0x2, {0xc9, 0x8}, {0x2, 0x6}, @quote={{0x6, 0x9}, 0x4}}], 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000280)={0x3, [[0x709, 0x4, 0x3f, 0x8000, 0xd4f, 0xffffffff, 0x3, 0x7], [0x8, 0x400, 0x401, 0x7fff, 0xfffffffe, 0x4, 0x6, 0x2], [0x0, 0x1, 0x0, 0x6, 0x4, 0x800, 0x0, 0x8001]], [], [{0x8, 0x1}, {0x2, 0x2, 0x0, 0x1}, {0x87, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1f, 0xffffffe0, 0x0, 0x0, 0x1}, {0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x5, 0x0, 0x0, 0x1, 0x1}, {0xff, 0x2d2}, {0x101, 0x0, 0x1, 0x0, 0x1}, {0xffffffff, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x5bf3, 0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1, 0x0, 0x1}]}) 16:33:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() socket$inet6(0xa, 0x0, 0xd) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3}, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0xfd, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x0, 0xb90, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x800000000000000, r3, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYRES32=0x0], 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x80000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r8, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x600c081}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r9, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1, 0x0, 0x0, 0x1cb}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000200)=0x8) 16:33:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xd) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x8, 0xfffffffff7fffffb}, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7e}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xcc6e, 0xfffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vcsa(0x0, 0x0, 0x0) lseek(r4, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x2000, 0xb90, 0x2, 0x0, 0x0, 0x0, 0x801}, 0x0, 0x800000000000000, r6, 0xa) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000d83fe4)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="d3b7ce6cf3aa3425ccae98a5addb0ef6f51bd7b42c1bed7fab0793c14d1e3fdf93a212c464ca20675682d272b86bd6ad34b2d8b790e1955ff7ed9f56fb0f39b0b4456d6a35133bed3802a79388cce2c3c1764b7d90203fd06418e972cc6e6b6ab14701000000000000005fa01457ad4f03ccb008dd479911b4a41c4a3d50a7183e7ea54ed46337bcc51da021952267429602000000000000003500c409e23fe1b7872487917432a3d9bad3c3a64119b493d49eb3d2d97502fa787af089c5d9f04d2b665e18f3f4cda8469eedd5cc5ad8df79a8f6dd76b33af1c4b0bc7fe85f5d5d1a685a4770f1b6c5c9e28acea54347fdeef169e70c6c6afec46e9b385054082933096ff880de350a421072b6c779e1fe24151f326a5f83af8ce8208fa68bc36147f93b8e0f4931a0fd0848bb07111d31e218a3033ccf0ec5402c1446435ee0ee667db25205dab973ddc51e381f1af36eef5a5008a8c79779e2353e0005d08a5e79c3c71b9893b1af550ebdffc85a81059e0fe44d0a091c9d494fa28b521a04b29049776bb775af368ee161f7575baa986a921db58b2bc09330ed7f0a0147ea1d4fa552e44afe705973c2a6556e0cd8", @ANYRES32=0x0], &(0x7f0000000240)=0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='auxv\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x80000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000900)=0xce, 0x7c) sendmmsg$inet(r8, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0xc01}], 0x1, 0x0, 0x0, 0x1cb}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="da", 0x220908}], 0x1}}], 0x4000000000001cc, 0x4000000) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000200)=0x8) 16:33:22 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:22 executing program 1: getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000006c0)={'nat\x00'}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000500)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:33:22 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 16:33:22 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 16:33:22 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, &(0x7f00000003c0)={{0x80, 0x40}, {0x7, 0xc9}, 0x4, 0xd, 0x7}) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000029cff67a06000000005e0c1d29ca8637fe", @ANYRES32=r9, @ANYBLOB="01000000e0ff00001c0012000c000100626f6e64000000000c00020008000100060000006b7e198ce2e0eafd12712725216c5de3fd38c2080000000000000000046aa106df20e457e8344673460d34d5837a7a5b83a7b440a66fdb53c657a59e2ae7c0c3fc9b35ab643f48200df5ce87f074602a02b575ad5a32c1bbcead140e44c398b3eae621d257390839ca7170c78692c5aedbe296d638d2cb4e6eb874a1f005aacfb82e152db0714287efec2a8a94502ca9c06df4273f4afc3744ff4902a9b65657aaa665bb7646404a3217f1f155e640ed7a5f158950bc1138d9821e763624695f96e6026df01bb2af11fceec3409da2cedb"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000b00010067726574617000000c00020008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="17684a50afd58e82ddc3758254187aad71839ceb3ddd42e81cf08dab3415c62a689497619019fe76d7efc68bcb6afc5bd49f36a90b982f0fed21b7aa9e080d9468692cea731674e546c37f9878047d19a79248df3ae53e0c56455bb21d86fd88633c7da5b7f32813cb4410db191f758c472957fcddd85aecfe80ae2eca649e64a823453e9cc9ea94ddb6677784a3320cc5e2b02adcd2c5c7e3fe6c3f06"], 0x44}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000004c0)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@local, r9}, 0x14) close(r2) socket$inet(0x10, 0x0, 0x3) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) fallocate(r10, 0x20, 0x100, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d008"], 0x1}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x38}}, 0x0) r11 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r11) request_key(&(0x7f0000000380)='big_key\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='selinux#eth1\x00', r11) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 16:33:23 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) [ 197.205559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63183 sclass=netlink_route_socket pig=8205 comm=syz-executor.0 [ 197.256358] batman_adv: Cannot find parent device 16:33:23 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)) [ 197.299463] xt_HMARK: spi-mask and port-mask can't be combined 16:33:23 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)) 16:33:23 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) wait4(r1, 0x0, 0x20000000, 0x0) r2 = getpid() setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e24, 0x3f, @mcast1, 0x2dc0}, {0xa, 0x4e23, 0x4, @ipv4={[], [], @multicast2}, 0x5}, 0x1, [0x5, 0x0, 0x80000001, 0x7, 0x101, 0x2, 0x80000000, 0x51b]}, 0x5c) r3 = getpid() r4 = getpid() r5 = pkey_alloc(0x0, 0x6) pkey_free(r5) pkey_free(r5) rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) ptrace$pokeuser(0x6, r3, 0x388, 0xb8) ptrace$pokeuser(0x6, r2, 0x388, 0xfffffffffffffffe) socketpair(0x0, 0x800, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00000000c0), 0x4) 16:33:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000002340)={0x0, 0x7, 0x1, [0x6]}, &(0x7f0000002380)=0xa) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000023c0)={r6, 0xb5, 0xae, "3bc8b0f1744d82647ea413e545e91e71e77693f8c91468243919b9145c7da4164a89c33489e6733ac68536b43df2b612553380c3e81f505b6160cfbf9ed83148267c212d3c6190ce2d943a72490c9334096ab927e4656a5574c5f8229281ad37de42ff60dcf5a2bd7a3b977a1b304f8ecb7e513570574565b2fd7fbe537c9026aa88d115f66ec2b61bbc7cbed795fbb15a39610582ab5120f0b8fad8c131aef867178c96321748467d1be2f305aa"}, 0xb6) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="25bca274769e620a2734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a782d270146d0e0206e73ba8c63cd7dcdf760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='lazytime']) syz_mount_image$ocfs2(&(0x7f0000000080)='ocfs2\x00', &(0x7f0000000180)='./file0\x00', 0x401, 0x4, &(0x7f0000002280)=[{&(0x7f00000001c0)="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", 0x1000, 0x3}, {&(0x7f00000011c0)='0O', 0x2, 0x9b}, {&(0x7f0000001200)="9c29ea1d2e0029bbb0d709306c074d18e434987a6a4a84467621b6b53209ccec5885c06061140e6ff7a787c502997da14b155d5003eec1de459673a0dd71e7be32adfcf545f2e2b4445c4299825010f4195cd9c2c4fc92ad729226d1a28310df6ad12377feb290d1b0f2", 0x6a, 0x1ff}, {&(0x7f0000001280)="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", 0x1000, 0x6888000000}], 0x200400, &(0x7f0000002300)='user-$em1[/\xe9bdeveth1:wlan0eth0vmnet0%lo\xa4\x00') 16:33:23 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)) 16:33:23 executing program 1: open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r2 = getpid() tkill(r2, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000000)='map_files\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r0, r1, 0x0, 0x10000) 16:33:23 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r11, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r15, r14, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="34200000220001000000000000000000040000000400008008002400", @ANYBLOB="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", @ANYBLOB="080070001f0800000c101d8008001b00", @ANYRES16, @ANYRES64=r14], 0x5}, 0x1, 0x0, 0x0, 0x800}, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r16, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x34, r17, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10050410}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="080028bd7000fddbdf250200000008000400e0000001080008000100000008000800000000000800080001e5d89667000500ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4) fcntl$dupfd(r5, 0x0, r5) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000200)={0x0, 'ip6tnl0\x00', {}, 0x4}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f00000001c0)={0x6, 'bond0\x00', {0x1ff}}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r18 = socket(0x40000000015, 0x5, 0x0) connect$inet(r18, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r18, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r18, &(0x7f0000002200)="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", 0xd000, 0x0, 0x0, 0x0) r19 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r19, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) socket$inet6_udplite(0xa, 0x2, 0x88) r20 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r20, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) creat(&(0x7f00000003c0)='./file0\x00', 0x1) r21 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r21, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = dup3(r23, r22, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0x400200) r25 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r25, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r26 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x2000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r26, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@loopback, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@multicast2}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000ff02000000000000f8f90000000000001f00000000000000ff0f0000000000000900000000000000230000000000000004000000000000000600ed00000000000007000000000000000000000008000000ff0f000048dcff000000000000000074e50000fbec95bbb854070000ffff0000fd683a96ceb141000805424b000000000000000000000000030000030000000001800000000000000300000000000000070000"]) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "33b09646484c8f3a90c91311fd878129ae00"}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 16:33:23 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 197.712132] EXT4-fs (loop5): Unsupported filesystem blocksize 0 (1923657432 log_block_size) 16:33:23 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000180)=0xffffffff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="ac"], 0x1) ftruncate(r2, 0x10099b7) sendfile(r0, r2, 0x0, 0x88000fc000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SIOCAX25DELFWD(r8, 0x89eb, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000740)={0x6, 0x8208, 0x0, 0x0, r12}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f00000000c0)={r12, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000140)={r13, 0x9}, &(0x7f00000001c0)=0x8) [ 197.786307] FAULT_INJECTION: forcing a failure. [ 197.786307] name failslab, interval 1, probability 0, space 0, times 1 [ 197.806715] (syz-executor.5,8251,1):ocfs2_parse_options:1484 ERROR: Unrecognized mount option "user-$em1[/ébdeveth1:wlan0eth0vmnet0%lo¤" or missing value [ 197.885613] xt_HMARK: spi-mask and port-mask can't be combined [ 197.917663] CPU: 1 PID: 8250 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 197.925565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.934970] Call Trace: [ 197.937591] dump_stack+0x142/0x197 [ 197.941243] should_fail.cold+0x10f/0x159 [ 197.945422] should_failslab+0xdb/0x130 [ 197.949432] kmem_cache_alloc_trace+0x2e9/0x790 [ 197.954124] ? lock_acquire+0x16f/0x430 [ 197.958120] ? snd_pcm_oss_change_params+0x8c/0xb0 [ 197.963081] snd_pcm_oss_change_params_locked+0x16f/0x32f0 [ 197.968727] ? __mutex_lock+0x36a/0x1470 [ 197.972808] ? lock_params+0x22/0xa0 [ 197.976516] ? snd_pcm_oss_change_params+0x8c/0xb0 [ 197.981459] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 197.987281] ? lock_downgrade+0x740/0x740 [ 197.991473] ? __might_fault+0x110/0x1d0 [ 197.996595] snd_pcm_oss_change_params+0x63/0xb0 [ 198.001371] snd_pcm_oss_get_active_substream+0x102/0x150 [ 198.004658] (syz-executor.5,8251,0):ocfs2_fill_super:1217 ERROR: status = -22 [ 198.006928] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 198.006947] ? snd_pcm_oss_release+0x280/0x280 [ 198.006958] ? __might_sleep+0x93/0xb0 [ 198.006969] ? __fget+0x210/0x370 [ 198.006984] ? snd_pcm_oss_release+0x280/0x280 16:33:23 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0x9, 0x80080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000740)={0x6, 0x8208}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x100, 0x8, 0x3, 0x0, 0x0}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000006c0)={r7, 0x2}, &(0x7f0000000700)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000024008903000000000000000000000000480003"], 0x1}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newae={0x40, 0x1e, 0x0, 0x0, 0x0, {{@in6=@remote}, @in6=@loopback}}, 0x40}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 198.035267] do_vfs_ioctl+0x7ae/0x1060 [ 198.039183] ? selinux_file_mprotect+0x5d0/0x5d0 [ 198.043972] ? lock_downgrade+0x740/0x740 [ 198.048149] ? ioctl_preallocate+0x1c0/0x1c0 [ 198.052588] ? __fget+0x237/0x370 [ 198.056067] ? security_file_ioctl+0x89/0xb0 [ 198.060502] SyS_ioctl+0x8f/0xc0 [ 198.063888] ? do_vfs_ioctl+0x1060/0x1060 [ 198.068048] do_syscall_64+0x1e8/0x640 [ 198.071970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.076926] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.082121] RIP: 0033:0x45b349 [ 198.085366] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.093079] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 198.100341] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 198.107611] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 198.115031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 198.122313] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 0000000000000000 [ 198.172955] xt_HMARK: spi-mask and port-mask can't be combined [ 198.183769] xt_HMARK: spi-mask and port-mask can't be combined [ 198.195495] xt_HMARK: spi-mask and port-mask can't be combined [ 198.209552] xt_HMARK: spi-mask and port-mask can't be combined 16:33:24 executing program 0: syz_emit_ethernet(0xc0, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff96c1e957e076521b1359827321064b310800450000000000019078ac1e0001ac0114aa0300907800000000450000000000000000210000c71414aaac1414aa00"], 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="010400005c0bcfe8697071") bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x101, @dev={0xfe, 0x80, [], 0x30}, 0x200}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@mcast1, 0x38, r6}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x705, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x803}, [@IFLA_LINKINFO={0x1c, 0x12, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, [@IFLA_MACSEC_INC_SCI={0x5, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x2]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 16:33:24 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x1d) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000340)={0x2, "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"}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x7f, 0x3, 0x20, "c3887ff532ba99dd23108274efa199d9", "77e94ebc6c706db381135a26bae657e1a565f3a0ed8ae735231b610a1872368a74cb05633d5ee571970ecad2e1768e9159295126f8ef048b8b68efe50e5432a0d6169b694f4ff26ff4ed79c9a1ce8e5d1c87fe93b11fd822430e2a9e814d4ff99b00b05cd7979269342a"}, 0x7f, 0x1) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x0) r5 = dup(r4) write$uinput_user_dev(r5, &(0x7f0000000e00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x1f]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) 16:33:24 executing program 3 (fault-call:2 fault-nth:1): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:24 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x417500, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f00000003c0), 0x4) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="2321202e2f66696c239a0f6e04e1aee44a78d26d95ada0bdb44616a20d7196412d4e11b1694d009019fd094760993a1b28746f82d4406ca9eccdc9040c29580eded5264febfa2304024dffd8acbf693ab0cce50c3f602c00dcae65442e3d23113af25fbcc56e8018f4e33741e2c3771a44d8443853e26cdb90921ff7f5a500000000cb6d70f6b81dfa0752c4e5f76f00f73bc1ce29b1dda4eb723da4d21a1849c3a634ee3cd34c09fa87e784fb1cf66489ce932f1d9c1e1ace9159c48c7bdbefb5571b434040ded7e0c7fba72ab7be00b5bb81366a9865f82d249b40638ecbdcabfb2ad676c67efa18f280ec9f92d172ab8e97"], 0xff) close(r3) geteuid() r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00005befdc)) r5 = syz_open_pts(r4, 0x1) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) dup3(r5, r4, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) r10 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r11, 0x0) r12 = getgid() setregid(0x0, r12) r13 = getpid() sched_setscheduler(r13, 0x5, &(0x7f0000000380)) r14 = getgid() setregid(0x0, r14) r15 = getpid() sched_setscheduler(r15, 0x5, &(0x7f0000000380)) r16 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r17, 0x0) r18 = getgid() setregid(0x0, r18) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000005f00)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000005f80)) r19 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r19, 0x40045431, &(0x7f00005befdc)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) dup3(0xffffffffffffffff, r19, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000006000), 0x100) r20 = getgid() setregid(0x0, r20) r21 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r21, 0x40045431, &(0x7f00005befdc)) r22 = syz_open_pts(r21, 0x1) fcntl$setstatus(r22, 0x4, 0x0) write(r22, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r22, 0x5423, &(0x7f0000000080)=0xe) dup3(0xffffffffffffffff, r21, 0x0) [ 198.432105] FAULT_INJECTION: forcing a failure. [ 198.432105] name failslab, interval 1, probability 0, space 0, times 0 [ 198.473487] CPU: 0 PID: 8276 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 198.481353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.490725] Call Trace: [ 198.493327] dump_stack+0x142/0x197 [ 198.498450] should_fail.cold+0x10f/0x159 [ 198.502627] should_failslab+0xdb/0x130 [ 198.506614] kmem_cache_alloc_trace+0x2e9/0x790 [ 198.511287] ? lock_acquire+0x16f/0x430 [ 198.515283] ? snd_pcm_oss_change_params+0x8c/0xb0 [ 198.520336] snd_pcm_oss_change_params_locked+0x1a7/0x32f0 [ 198.525965] ? __mutex_lock+0x36a/0x1470 [ 198.530173] ? lock_params+0x22/0xa0 [ 198.533925] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 198.539896] ? lock_downgrade+0x740/0x740 [ 198.544064] ? __might_fault+0x110/0x1d0 [ 198.548145] snd_pcm_oss_change_params+0x63/0xb0 [ 198.552909] snd_pcm_oss_get_active_substream+0x102/0x150 [ 198.558474] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 198.562906] ? snd_pcm_oss_release+0x280/0x280 [ 198.567493] ? __might_sleep+0x93/0xb0 [ 198.571398] ? __fget+0x210/0x370 [ 198.574985] ? snd_pcm_oss_release+0x280/0x280 [ 198.579581] do_vfs_ioctl+0x7ae/0x1060 [ 198.583473] ? selinux_file_mprotect+0x5d0/0x5d0 [ 198.588248] ? lock_downgrade+0x740/0x740 [ 198.592647] ? ioctl_preallocate+0x1c0/0x1c0 [ 198.597076] ? __fget+0x237/0x370 [ 198.600550] ? security_file_ioctl+0x89/0xb0 [ 198.604987] SyS_ioctl+0x8f/0xc0 [ 198.608378] ? do_vfs_ioctl+0x1060/0x1060 [ 198.612545] do_syscall_64+0x1e8/0x640 [ 198.616546] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.621418] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.626615] RIP: 0033:0x45b349 [ 198.629809] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.637531] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 198.644896] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 198.652193] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 198.659480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 198.666771] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 0000000000000001 [ 198.686930] device tunl0 entered promiscuous mode [ 198.704534] device tunl0 left promiscuous mode [ 198.787242] input: syz0 as /devices/virtual/input/input6 16:33:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 16:33:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r1 = semget$private(0x0, 0x400000000d, 0x0) semop(r1, 0x0, 0x0) semop(r1, &(0x7f0000001840), 0x0) semctl$GETPID(r1, 0x0, 0xb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getuid() chown(&(0x7f0000000040)='./file0\x00', r4, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000180)={0x0, r5}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r8, @ANYBLOB='\b\x00\x00', @ANYRES32=r8, @ANYBLOB="100006000000000020000000000000"], 0x5, 0x0) r9 = getegid() lstat(&(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02d3ec0001000050fd00000000fb002100000000080000", @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYRES32=r12, @ANYBLOB="100006000000000020000000000000"], 0x5, 0x0) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r14, @ANYRES32=r14, @ANYBLOB="100006000000000020000000000000"], 0x4, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000001c0)=0x81, 0x4) fsetxattr$system_posix_acl(r5, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [{0x2, 0x4, r6}], {0x4, 0x6}, [{0x8, 0x7, r8}, {0x8, 0x2, r9}, {0x8, 0x4, r10}, {0x8, 0x2}, {0x8, 0x3, r12}, {0x8, 0x1, r14}], {0x10, 0x1}, {0x20, 0x2}}, 0x5c, 0x3) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000140)={{0x3, r2, r3, r4, r14, 0x8, 0x7fff}, 0x2, 0x1229, 0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) 16:33:24 executing program 3 (fault-call:2 fault-nth:2): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 198.985971] device tunl0 entered promiscuous mode [ 198.998563] device tunl0 left promiscuous mode 16:33:24 executing program 0: getpid() syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc01456b8, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x4610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x40, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x40}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x80) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffb, 0xa7, 0x6, @buffer={0x0, 0xbd, &(0x7f0000000100)=""/189}, &(0x7f0000000540)="0ef63b981efac890330ed493c90a1e78a8868133f28244959f37e3989f527636064b72357e23632655cbdf039131691b6a15ef9982f55986f8dd7671b56c1eed4364be2d3768276a919e80f05da5669625c6388129433777bb7b5b96e2c327f5d42caa727cee234676d5721b04c7aa18b7b0c27c8032f479f1a7213cd601fb2d03acac04f8ad0c05644374aa3c0c9944d318f89d133ae75166ded3589031ec9b661dc2af6baaca", &(0x7f0000000080)=""/38, 0x7, 0x10, 0x0, &(0x7f00000001c0)}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) dup3(r2, r3, 0x0) dup2(r0, r7) [ 199.073433] FAULT_INJECTION: forcing a failure. [ 199.073433] name failslab, interval 1, probability 0, space 0, times 0 [ 199.124156] CPU: 0 PID: 8308 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 199.132012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.141384] Call Trace: [ 199.144001] dump_stack+0x142/0x197 [ 199.147657] should_fail.cold+0x10f/0x159 [ 199.152004] should_failslab+0xdb/0x130 [ 199.156014] kmem_cache_alloc_trace+0x2e9/0x790 [ 199.160713] ? lock_acquire+0x16f/0x430 [ 199.164715] ? snd_pcm_oss_change_params+0x8c/0xb0 [ 199.169691] snd_pcm_oss_change_params_locked+0x1df/0x32f0 [ 199.175435] ? __mutex_lock+0x36a/0x1470 [ 199.179523] ? lock_params+0x22/0xa0 [ 199.183406] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 199.189235] ? lock_downgrade+0x740/0x740 [ 199.193408] ? __might_fault+0x110/0x1d0 [ 199.197507] snd_pcm_oss_change_params+0x63/0xb0 [ 199.202444] snd_pcm_oss_get_active_substream+0x102/0x150 [ 199.208012] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 199.212436] ? snd_pcm_oss_release+0x280/0x280 [ 199.217035] ? __might_sleep+0x93/0xb0 [ 199.220939] ? __fget+0x210/0x370 [ 199.224413] ? snd_pcm_oss_release+0x280/0x280 [ 199.229107] do_vfs_ioctl+0x7ae/0x1060 [ 199.233034] ? selinux_file_mprotect+0x5d0/0x5d0 [ 199.237799] ? lock_downgrade+0x740/0x740 [ 199.241966] ? ioctl_preallocate+0x1c0/0x1c0 [ 199.246381] ? __fget+0x237/0x370 [ 199.249862] ? security_file_ioctl+0x89/0xb0 [ 199.254285] SyS_ioctl+0x8f/0xc0 [ 199.257668] ? do_vfs_ioctl+0x1060/0x1060 [ 199.261837] do_syscall_64+0x1e8/0x640 [ 199.265724] ? trace_hardirqs_off_thunk+0x1a/0x1c 16:33:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r1 = semget$private(0x0, 0x400000000d, 0x0) semop(r1, 0x0, 0x0) semop(r1, &(0x7f0000001840), 0x0) semctl$GETPID(r1, 0x0, 0xb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getuid() chown(&(0x7f0000000040)='./file0\x00', r4, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r5) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000180)={0x0, r5}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r8, @ANYBLOB='\b\x00\x00', @ANYRES32=r8, @ANYBLOB="100006000000000020000000000000"], 0x5, 0x0) r9 = getegid() lstat(&(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02d3ec0001000050fd00000000fb002100000000080000", @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYRES32=r12, @ANYBLOB="100006000000000020000000000000"], 0x5, 0x0) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r14, @ANYRES32=r14, @ANYBLOB="100006000000000020000000000000"], 0x4, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000001c0)=0x81, 0x4) fsetxattr$system_posix_acl(r5, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [{0x2, 0x4, r6}], {0x4, 0x6}, [{0x8, 0x7, r8}, {0x8, 0x2, r9}, {0x8, 0x4, r10}, {0x8, 0x2}, {0x8, 0x3, r12}, {0x8, 0x1, r14}], {0x10, 0x1}, {0x20, 0x2}}, 0x5c, 0x3) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000140)={{0x3, r2, r3, r4, r14, 0x8, 0x7fff}, 0x2, 0x1229, 0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000800)}) [ 199.270588] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.275794] RIP: 0033:0x45b349 [ 199.278984] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.286708] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 199.294108] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 199.301389] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 199.308691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 199.315972] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 0000000000000002 16:33:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0xfdffffff00000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000002200290800000000400000000500000014001100fe8000000000000200000000000000aa"], 0x1}, 0x1, 0xfdffffff00000000, 0x0, 0x94}, 0x20000040) 16:33:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a2860923298c84af81c58f8801b3df02b7090ccc23a19ab419a71027defca4acc6257f4fc9687b3383b42b9739886450c9e9d68a9df47d522cc663e0d00b3420d89d66d77830c5031b67815b3c383330bc726aef70d782c81bad4ba6558fe759ae76d4cdbc04a33701ba95679db646bb1f74f84235931e36632abb6eb1a1d268655c8a6d376469ffb5e3a61b253fd9172496080717954a75813c6c133046064a3d8dac5ee06f2a0d013346f26d1f9614fd9ff6078f3d9dae9ae501574a543ee"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r4, @ANYBLOB="a1b65bb50470cea900"], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r4}}, 0x20}, 0x1, 0xa}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 16:33:25 executing program 5: socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x4) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 199.628294] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 16:33:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000040)={0x9, 0x8}) sendto$inet6(r1, 0x0, 0x0, 0x20000813, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000bc0)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000c00)={@rand_addr="9b2cf196d43b0b838b6275b529600808", 0x26, r9}) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x20c00, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000740)={0x6, 0x8208, 0x0, 0x0, r11}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f00000003c0)={r11, 0xe5, "0c4c44b96911784ca9e95acbd2fbc2874bec1565db6ce7539f6440f6a273dca1f2b497fc9984a2fe8b7cf35b34a219558f53a630f893f231dc9932932ff775aa1be5f594c5a8ba9141777e41a4b1bd2c8849cd30fea6ed29f434344c6ec2e6bc646ac8c95f0b92937613bc7a7580b6868be3592da72292b5dfe017bba77bfdf2e05599e69b5c722ae37ee70ab9ba59358089cf98ca5a80ef46250ef3ea31d69e316ee8ac2325c719b8e4037d7c87b41c0e444c7208395354a27b5a56d64cc05cd5b35bad9c891d46e366ee8191d03084187d915ee4dc1fcf4d97f5b1b4483afa7c2a64ddb1"}, &(0x7f00000004c0)=0xed) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x308) ioctl$sock_SIOCOUTQ(r12, 0x5411, &(0x7f0000000080)) [ 199.672168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 16:33:25 executing program 3 (fault-call:2 fault-nth:3): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 199.751588] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.791069] FAULT_INJECTION: forcing a failure. [ 199.791069] name failslab, interval 1, probability 0, space 0, times 0 [ 199.795243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.811061] CPU: 0 PID: 8343 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 199.819006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.828379] Call Trace: [ 199.830987] dump_stack+0x142/0x197 [ 199.834625] should_fail.cold+0x10f/0x159 [ 199.838880] should_failslab+0xdb/0x130 [ 199.842876] kmem_cache_alloc_trace+0x2e9/0x790 [ 199.847724] snd_pcm_oss_change_params_locked+0x662/0x32f0 [ 199.853392] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 199.859252] ? __might_fault+0x110/0x1d0 [ 199.863401] snd_pcm_oss_change_params+0x63/0xb0 [ 199.868183] snd_pcm_oss_get_active_substream+0x102/0x150 [ 199.873765] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 199.878303] ? snd_pcm_oss_release+0x280/0x280 [ 199.878566] xt_HMARK: spi-mask and port-mask can't be combined [ 199.882919] ? __might_sleep+0x93/0xb0 [ 199.882931] ? __fget+0x210/0x370 [ 199.882951] ? snd_pcm_oss_release+0x280/0x280 16:33:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x3, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0xfffffd35, 0x1, 0x1, 0x0, 0x2c4c}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x10000004) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300ffff0000e7fffffff28600"], 0x6) [ 199.882964] do_vfs_ioctl+0x7ae/0x1060 [ 199.882977] ? selinux_file_mprotect+0x5d0/0x5d0 [ 199.882986] ? lock_downgrade+0x740/0x740 [ 199.882996] ? ioctl_preallocate+0x1c0/0x1c0 [ 199.883007] ? __fget+0x237/0x370 [ 199.883023] ? security_file_ioctl+0x89/0xb0 [ 199.883035] SyS_ioctl+0x8f/0xc0 [ 199.883044] ? do_vfs_ioctl+0x1060/0x1060 [ 199.883057] do_syscall_64+0x1e8/0x640 [ 199.883070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.942270] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.947608] RIP: 0033:0x45b349 [ 199.950821] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.958558] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 199.965860] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 199.973125] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 199.980518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 199.987925] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 0000000000000003 16:33:26 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0xf759b5d48011add7) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/enforce\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000300)={r2, &(0x7f0000000280)=""/66}) r3 = openat$cgroup_ro(r1, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0x1, @mcast2, 0x7}}, 0x0, 0x0, 0xc, 0x0, "38b271fefd1fbc989060d7c98b8ce21b98cf816119add77458a031c74371ce76e21e26a98d0c63ea0de87ac9ab8f27c65e855381621b48f3b948b47bc17f92af801a5e890e451d9c85b58a5110e2e89c"}, 0xd8) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x22) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) fallocate(r5, 0x8, 0x6, 0x1f) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffce) fallocate(r0, 0x12, 0x81, 0xa) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x40) r7 = socket$inet6(0xa, 0x400000000001, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) syz_open_pts(r8, 0x81) close(r8) ioctl$TIOCGWINSZ(r8, 0x5413, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000280)=0x18601c20, 0x4) r9 = dup(r7) ioctl$FICLONE(r6, 0x40049409, r7) setsockopt$inet6_tcp_int(r9, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x13}, 0x1c) write$FUSE_LSEEK(r4, &(0x7f00000001c0)={0xfffffffffffffd30, 0x0, 0x2, {0x4}}, 0x18) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='bridge_slave_1\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x2200c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000580)="03cbda9024fdf5aa818256f950d38167766f5ee316b61a5efd21a85cf40a29413b56330310bd231ab71100478bdb87363ec2f26b", 0x34, 0x0) r10 = open(&(0x7f0000000440)='./bus\x00', 0x101042, 0x0) ftruncate(r6, 0x800fe) sendfile(r9, r10, 0x0, 0x8000fffffffe) 16:33:26 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$vsock_dgram(r3, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x5420) 16:33:26 executing program 3 (fault-call:2 fault-nth:4): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:26 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0xfffffffffffffffb, 0x9ac00) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x1}) 16:33:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x40002, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = openat$bsg(0xffffffffffffff9c, 0x0, 0x402442, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r2, 0x4147, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) futimesat(r3, &(0x7f0000000600)='./file0\x00', &(0x7f0000000840)={{}, {r4, r5/1000+30000}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0xc0185879, 0x0) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x6, 0x1800, 0x1, 0x4, 0x0, 0x1, 0x401, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x7b05, 0xfffffff7, 0x3ff, 0x7, 0x40}}, &(0x7f00000003c0)=0xb0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r8, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r9, @ANYBLOB="06004651abce"], &(0x7f0000000400)=0x2) r10 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/f.le.\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fchown(r7, r11, 0x0) getsockopt(r0, 0x4, 0x0, &(0x7f00000006c0)=""/225, &(0x7f0000000240)=0xe1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32], 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) socket$isdn_base(0x22, 0x3, 0x0) renameat(r10, &(0x7f0000000180)='.//ile0\x00', r10, &(0x7f00000007c0)='./file0/f.le.\x00') 16:33:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r3 = dup(r2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3b01000000000002c2040000000001030000000000000000"], 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000380)) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0x705, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x34, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x20, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr="829caead018b2e47d697e8c2cb2c4ae3"}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0x7fffffff}]]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x68}}, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x57) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) flistxattr(r6, &(0x7f00000001c0)=""/187, 0xbb) 16:33:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x9a0000, 0x3, 0xfffffffb, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909dd, 0x2, [], @value=0x4f6}}) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000200)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000400)={0x3ff, [[0x5, 0x6, 0x8, 0xfffffffd, 0xfffffff7, 0x5, 0x4, 0xa9000000], [0x5, 0x8, 0x3ff, 0x80000001, 0x9, 0x7, 0x5, 0x5], [0x8, 0x0, 0x13, 0x0, 0x63, 0x10001, 0x1, 0x5]], [], [{0x5, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2, 0xffff, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x100, 0x3f, 0x0, 0x1, 0x1, 0x1}, {0x80000001, 0x1, 0x1}, {0x80, 0x8, 0x1, 0x0, 0x1}, {0x8, 0x80000000, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x8, 0x1}, {0x2, 0xfff, 0x1}, {0x4b0b787c, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x67, 0x1, 0x0, 0x0, 0x1}, {0x7fff, 0xb34, 0x0, 0x1}], [], 0xffffffc1}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/97, 0x0}) write$P9_RLOCK(r4, &(0x7f0000000140)={0x8, 0x35, 0x1, 0x1}, 0x8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/107, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x2000005) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 200.204281] FAULT_INJECTION: forcing a failure. [ 200.204281] name failslab, interval 1, probability 0, space 0, times 0 [ 200.290933] CPU: 0 PID: 8365 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 200.298826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.308205] Call Trace: [ 200.310819] dump_stack+0x142/0x197 [ 200.314470] should_fail.cold+0x10f/0x159 [ 200.318651] should_failslab+0xdb/0x130 [ 200.322651] kmem_cache_alloc_trace+0x2e9/0x790 [ 200.327516] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 200.332689] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 200.337751] ? check_preemption_disabled+0x3c/0x250 [ 200.342798] snd_pcm_hw_param_near.constprop.0+0xbe/0x700 [ 200.348364] ? mark_held_locks+0xb1/0x100 [ 200.352538] ? quarantine_put+0xfa/0x1a0 [ 200.356161] Unknown ioctl -1054845647 [ 200.356622] ? snd_pcm_hw_param_max+0x6a0/0x6a0 [ 200.365126] ? trace_hardirqs_on+0xd/0x10 [ 200.369322] snd_pcm_oss_change_params_locked+0x8c5/0x32f0 [ 200.374996] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 200.380837] ? __might_fault+0x110/0x1d0 [ 200.384928] snd_pcm_oss_change_params+0x63/0xb0 [ 200.385499] xt_HMARK: spi-mask and port-mask can't be combined [ 200.389709] snd_pcm_oss_get_active_substream+0x102/0x150 [ 200.389723] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 200.389738] ? snd_pcm_oss_release+0x280/0x280 [ 200.389749] ? __might_sleep+0x93/0xb0 [ 200.389764] ? __fget+0x210/0x370 [ 200.417743] ? snd_pcm_oss_release+0x280/0x280 [ 200.422352] do_vfs_ioctl+0x7ae/0x1060 [ 200.426262] ? selinux_file_mprotect+0x5d0/0x5d0 [ 200.431036] ? lock_downgrade+0x740/0x740 [ 200.435203] ? ioctl_preallocate+0x1c0/0x1c0 [ 200.435217] ? __fget+0x237/0x370 [ 200.435235] ? security_file_ioctl+0x89/0xb0 [ 200.435249] SyS_ioctl+0x8f/0xc0 [ 200.435258] ? do_vfs_ioctl+0x1060/0x1060 [ 200.435272] do_syscall_64+0x1e8/0x640 [ 200.435282] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.464054] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.469258] RIP: 0033:0x45b349 [ 200.472459] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.478743] Unknown ioctl -1054845647 [ 200.480221] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 16:33:26 executing program 5: syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x26e1, 0x0) dup2(r0, 0xffffffffffffffff) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140), 0x171) r4 = dup2(r1, r3) dup3(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000001540)={0x9, @pix={0x3f, 0x12e, 0x0, 0x4, 0x80, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x6}}) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0xffffff65) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup2(r5, r6) dup3(r7, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000001540)={0x9, @pix={0x3f, 0x12e, 0x4f424752, 0x0, 0x0, 0x7, 0x3, 0x8, 0x1, 0x0, 0x0, 0x6}}) r8 = memfd_create(0x0, 0x5) dup2(0xffffffffffffffff, r8) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0xffffff65) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r9, 0x0, 0x4, &(0x7f0000000180)='em1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r7, 0x0, 0xd, &(0x7f00000001c0)='cgroup.procs\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r10 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r10, 0x0, 0xffffffffffffffff, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) r12 = userfaultfd(0x0) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r13, 0x84, 0xc, &(0x7f0000000140), 0x171) r14 = dup2(r11, r13) r15 = dup3(r14, r12, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000001540)={0x0, @pix={0x3f, 0x12e, 0x4f424752, 0x0, 0x80, 0x7, 0x3, 0x8, 0x1, 0x0, 0x0, 0x6}}) r16 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r17 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r18 = dup2(r17, r16) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0xffffff65) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000180)='em1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r18, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r14, 0x0, 0xd, &(0x7f00000001c0)='cgroup.procs\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r19 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r19, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r19, r15, 0x0, 0xd, &(0x7f00000001c0)='cgroup.procs\x00'}, 0x99fdac0968e6cfd6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000740)='{keyring\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) [ 200.480228] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 200.480233] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 200.480238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 200.480249] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 0000000000000004 16:33:26 executing program 3 (fault-call:2 fault-nth:5): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7f, 0x801) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000002c0)) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f00000005c0), 0x10) write(r4, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000540)={0x400000010, 0x0, 0x0, 0xf0e1}, 0x45) r7 = dup(r6) r8 = fcntl$getown(r7, 0x9) syz_open_procfs(r8, &(0x7f0000000100)='uid_map\x00') r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f00000009c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f00000003c0)={0x28, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000008}, 0x4000094) mkdir(0x0, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001]}, 0x45c) r12 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x1) fallocate(r12, 0x3, 0x0, 0x8020003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) [ 200.615737] xt_HMARK: spi-mask and port-mask can't be combined 16:33:26 executing program 1: r0 = getpid() mlock(&(0x7f00007f5000/0x2000)=nil, 0x2000) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) write$P9_RFSYNC(r2, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000040)) 16:33:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={[{@resize_auto='resize=auto', 0x8}]}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) [ 200.704924] FAULT_INJECTION: forcing a failure. [ 200.704924] name failslab, interval 1, probability 0, space 0, times 0 [ 200.765168] CPU: 1 PID: 8393 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 200.773035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.782404] Call Trace: [ 200.785018] dump_stack+0x142/0x197 [ 200.788673] should_fail.cold+0x10f/0x159 [ 200.792852] should_failslab+0xdb/0x130 [ 200.796854] kmem_cache_alloc_trace+0x2e9/0x790 [ 200.801552] ? snd_pcm_hw_param_first+0x2b1/0x680 [ 200.806428] snd_pcm_hw_param_near.constprop.0+0xbe/0x700 [ 200.812008] ? _snd_pcm_hw_param_set.constprop.0+0x272/0x4a0 [ 200.817835] ? snd_pcm_hw_param_max+0x6a0/0x6a0 [ 200.822524] ? _snd_pcm_hw_param_any+0x184/0x270 [ 200.827304] ? snd_pcm_plug_slave_size+0x17d/0x2c0 [ 200.832257] snd_pcm_oss_change_params_locked+0x1417/0x32f0 [ 200.838032] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 200.843855] ? trace_hardirqs_on+0x10/0x10 [ 200.848162] ? save_trace+0x290/0x290 [ 200.851995] snd_pcm_oss_change_params+0x63/0xb0 [ 200.856917] snd_pcm_oss_get_active_substream+0x102/0x150 [ 200.860334] REISERFS warning (device loop0): super-6507 reiserfs_parse_options: bad value auto for -oresize [ 200.860334] [ 200.862479] snd_pcm_oss_get_formats+0x63/0x280 [ 200.862497] ? snd_pcm_oss_set_channels+0x280/0x280 [ 200.884059] snd_pcm_oss_ioctl+0x14c2/0x2e50 [ 200.888492] ? snd_pcm_oss_release+0x280/0x280 [ 200.893096] ? __might_sleep+0x93/0xb0 [ 200.897013] ? __fget+0x210/0x370 [ 200.900498] ? snd_pcm_oss_release+0x280/0x280 [ 200.905102] do_vfs_ioctl+0x7ae/0x1060 [ 200.909004] ? selinux_file_mprotect+0x5d0/0x5d0 [ 200.913773] ? lock_downgrade+0x740/0x740 [ 200.917938] ? ioctl_preallocate+0x1c0/0x1c0 [ 200.922369] ? __fget+0x237/0x370 [ 200.925855] ? security_file_ioctl+0x89/0xb0 [ 200.930291] SyS_ioctl+0x8f/0xc0 [ 200.933676] ? do_vfs_ioctl+0x1060/0x1060 [ 200.937855] do_syscall_64+0x1e8/0x640 [ 200.941764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 200.946640] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 200.952092] RIP: 0033:0x45b349 [ 200.955310] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:33:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fedbdf2544000000d0001800bb6e70fcecbc247e53cc16584062a094f36e8436ea4d895d01287dd958e678ae64a869f4668b16ceb09b4d080e4a4db93893a76d1d80790c2b42e02038f7947f0e3b8102623a555cb8c1bfbfa5caadf61600389e9b37a008ca63538789ff7f6b386724eda5a0738c43e8c7d674c17fde0aaf83ffdfc0f6265c990241c90551fbb95d54de9a7170a0b9b4fd3ee7712b48f9c781b9074ad215308153977c5fdb6113ca0bf3e5d27349092c88f52d2c37ef49037da209d61a718f4273ad83aaa872a9cded55d42d20a4b867a9eb9aeb54c6aca10c0070000500060001000000080009982ba3ee2cb038f37fa32b640d000500000031002400bf69d97fab6df755cde6477eb5441786e8ab90701b05ac221134fa2c07"], 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x80000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x2e4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140)="c8edba5303a0f5f007c6b4c55745cb973dfac71a216cf8fcd2219e9045640153f71aa3d48ed2211c01c9b1ad3bc6d4b730e5221ecdf9d5080a25332d44333f3a5c215f45ed0180d892b4e75982a0b336a71d9a6bf0bec02aefe35ec9eabece53aba36dca0f25c749", 0xffffffffffffffcf, 0x54, 0x0, 0xffffffffffffff9e) 16:33:26 executing program 5: socket$inet(0x10, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x12) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040), 0x0) r6 = accept$alg(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f0000000340)={{0x3c, @remote, 0x4e22, 0x2, 'wlc\x00', 0x28, 0x3, 0x43}, {@remote, 0x4e21, 0x1, 0x8, 0x7, 0x8}}, 0x44) r10 = dup(r6) sendto(r10, &(0x7f00000002c0), 0x0, 0x10018015, 0x0, 0x0) read$FUSE(r10, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x10) 16:33:26 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) connect(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)) stat(&(0x7f0000000240)='./bus\x00', 0x0) r4 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) lchown(&(0x7f0000000380)='./file0/../file0/file0\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) r6 = dup(r5) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) [ 200.963020] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 200.970297] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 200.977586] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 200.984867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 200.992143] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 0000000000000005 16:33:26 executing program 3 (fault-call:2 fault-nth:6): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:26 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) pipe(0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001cc0), 0x1006) sendfile(r2, r2, &(0x7f0000000240), 0x2008000fffffffe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000dc) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/44) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 16:33:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea1}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r5, 0xb}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0110000000001a001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r6}]]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000010000d0400"/20, @ANYRES32=r9, @ANYBLOB="7d7713cd00000000000000bf3e378a9019aaf9d0eceeb29cab45d85f2cb19b8ad5dcd8abd81f95deac180f1a1e47a05a2b66dc939bd0e253e96240e2b9604cab9a600042b5fd25820a1a1d4cda1d3b354b940062305d33258e079fc74c37e09306bd330a5448ebf50bd2736a9e82e3f508d98285696f63fe4d516e500e7091b94ab021d855661ee2e97388d5c84d3e53a0f01f93022a3118d612d8b856f6c8c92523f5724f2e930db4fcbd5bd6df247d81c74f"], 0x20}}, 0x0) [ 201.175889] FAULT_INJECTION: forcing a failure. [ 201.175889] name failslab, interval 1, probability 0, space 0, times 0 [ 201.202102] CPU: 1 PID: 8430 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 201.209963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.219357] Call Trace: [ 201.221965] dump_stack+0x142/0x197 [ 201.225620] should_fail.cold+0x10f/0x159 [ 201.229794] should_failslab+0xdb/0x130 [ 201.233786] kmem_cache_alloc_trace+0x2e9/0x790 [ 201.238476] ? snd_pcm_hw_param_first+0x2b1/0x680 [ 201.243469] snd_pcm_hw_param_near.constprop.0+0xbe/0x700 [ 201.249174] ? snd_pcm_hw_param_max+0x6a0/0x6a0 [ 201.253865] ? snd_pcm_plug_slave_size+0x17d/0x2c0 [ 201.258818] snd_pcm_oss_change_params_locked+0x1482/0x32f0 [ 201.264668] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 201.270481] ? __might_fault+0x110/0x1d0 [ 201.274546] snd_pcm_oss_change_params+0x63/0xb0 [ 201.279311] snd_pcm_oss_get_active_substream+0x102/0x150 [ 201.284858] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 201.289554] ? snd_pcm_oss_release+0x280/0x280 [ 201.294165] ? __might_sleep+0x93/0xb0 [ 201.298068] ? __fget+0x210/0x370 [ 201.301533] ? snd_pcm_oss_release+0x280/0x280 [ 201.306164] do_vfs_ioctl+0x7ae/0x1060 [ 201.310087] ? selinux_file_mprotect+0x5d0/0x5d0 [ 201.314847] ? lock_downgrade+0x740/0x740 [ 201.319015] ? ioctl_preallocate+0x1c0/0x1c0 [ 201.323449] ? __fget+0x237/0x370 [ 201.326916] ? security_file_ioctl+0x89/0xb0 [ 201.331343] SyS_ioctl+0x8f/0xc0 [ 201.334700] ? do_vfs_ioctl+0x1060/0x1060 [ 201.338872] do_syscall_64+0x1e8/0x640 [ 201.342774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 201.347639] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.352817] RIP: 0033:0x45b349 [ 201.355993] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.363712] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 201.370987] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 201.378268] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 201.385688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 201.392969] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 0000000000000006 16:33:27 executing program 3 (fault-call:2 fault-nth:7): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 201.474902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.485329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.495267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.511093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.529238] FAULT_INJECTION: forcing a failure. [ 201.529238] name failslab, interval 1, probability 0, space 0, times 0 [ 201.541161] CPU: 0 PID: 8444 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 201.548989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.558360] Call Trace: [ 201.560976] dump_stack+0x142/0x197 [ 201.564629] should_fail.cold+0x10f/0x159 [ 201.569423] should_failslab+0xdb/0x130 [ 201.573413] __kmalloc+0x2f0/0x7a0 [ 201.577047] ? snd_pcm_oss_get_active_substream+0x102/0x150 [ 201.582757] ? snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 201.587637] ? do_vfs_ioctl+0x7ae/0x1060 [ 201.591796] ? SyS_ioctl+0x8f/0xc0 [ 201.595422] ? do_syscall_64+0x1e8/0x640 [ 201.599531] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.604955] ? snd_pcm_plugin_build+0x64/0x640 [ 201.609656] snd_pcm_plugin_build+0x64/0x640 [ 201.614199] snd_pcm_plugin_build_rate+0x21b/0x780 [ 201.619135] ? rate_transfer+0x250/0x250 [ 201.623252] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 201.628271] snd_pcm_plug_format_plugins+0x719/0xd80 [ 201.633391] ? snd_pcm_plug_slave_format+0x4c0/0x4c0 [ 201.638502] ? snd_pcm_plugin_free+0xb6/0xe0 [ 201.642920] ? trace_hardirqs_on_caller+0x400/0x590 [ 201.647932] ? trace_hardirqs_on+0xd/0x10 [ 201.652105] snd_pcm_oss_change_params_locked+0x168f/0x32f0 [ 201.657991] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 201.663904] ? __might_fault+0x110/0x1d0 [ 201.668119] snd_pcm_oss_change_params+0x63/0xb0 [ 201.673005] snd_pcm_oss_get_active_substream+0x102/0x150 [ 201.678558] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 201.682972] ? snd_pcm_oss_release+0x280/0x280 [ 201.687705] ? __might_sleep+0x93/0xb0 [ 201.691604] ? __fget+0x210/0x370 [ 201.695180] ? snd_pcm_oss_release+0x280/0x280 [ 201.699761] do_vfs_ioctl+0x7ae/0x1060 [ 201.703701] ? selinux_file_mprotect+0x5d0/0x5d0 [ 201.708480] ? lock_downgrade+0x740/0x740 [ 201.712652] ? ioctl_preallocate+0x1c0/0x1c0 [ 201.717193] ? __fget+0x237/0x370 [ 201.720702] ? security_file_ioctl+0x89/0xb0 [ 201.725164] SyS_ioctl+0x8f/0xc0 [ 201.728522] ? do_vfs_ioctl+0x1060/0x1060 [ 201.732679] do_syscall_64+0x1e8/0x640 [ 201.736662] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 201.741517] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.746700] RIP: 0033:0x45b349 [ 201.749980] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.757683] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 201.765109] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 201.772407] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 16:33:27 executing program 3 (fault-call:2 fault-nth:8): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 201.779899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 201.787287] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 0000000000000007 [ 201.824990] bond1: making interface gretap1 the new active one [ 201.836656] FAULT_INJECTION: forcing a failure. [ 201.836656] name failslab, interval 1, probability 0, space 0, times 0 [ 201.852146] bond1: Enslaving gretap1 as an active interface with an up link [ 201.859571] CPU: 1 PID: 8449 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 16:33:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002740)=@ipv4_delroute={0x24, 0x19, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff, 0x3, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f00000015c0)=[{0x6, 0x0, &(0x7f0000000100), 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]}], 0x492492492492297, 0x0) [ 201.867499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.876869] Call Trace: [ 201.879471] dump_stack+0x142/0x197 [ 201.883122] should_fail.cold+0x10f/0x159 [ 201.887296] should_failslab+0xdb/0x130 [ 201.891376] __kmalloc+0x2f0/0x7a0 [ 201.895068] ? snd_pcm_oss_get_active_substream+0x102/0x150 [ 201.904022] ? snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 201.908629] ? do_vfs_ioctl+0x7ae/0x1060 [ 201.912710] ? SyS_ioctl+0x8f/0xc0 [ 201.916267] ? do_syscall_64+0x1e8/0x640 [ 201.924087] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 201.929484] ? snd_pcm_plugin_build+0x40f/0x640 [ 201.934180] snd_pcm_plugin_build+0x40f/0x640 [ 201.938825] snd_pcm_plugin_build_rate+0x21b/0x780 [ 201.944071] ? rate_transfer+0x250/0x250 [ 201.948284] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 201.953334] snd_pcm_plug_format_plugins+0x719/0xd80 [ 201.958468] ? snd_pcm_plug_slave_format+0x4c0/0x4c0 [ 201.963702] ? snd_pcm_plugin_free+0xb6/0xe0 [ 201.968138] ? trace_hardirqs_on_caller+0x400/0x590 [ 201.973182] ? trace_hardirqs_on+0xd/0x10 [ 201.977358] snd_pcm_oss_change_params_locked+0x168f/0x32f0 [ 201.983110] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 201.989027] ? __might_fault+0x110/0x1d0 [ 201.993092] snd_pcm_oss_change_params+0x63/0xb0 [ 201.997864] snd_pcm_oss_get_active_substream+0x102/0x150 [ 202.003417] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 202.008144] ? snd_pcm_oss_release+0x280/0x280 [ 202.012757] ? __might_sleep+0x93/0xb0 [ 202.016676] ? __fget+0x210/0x370 [ 202.020163] ? snd_pcm_oss_release+0x280/0x280 [ 202.024874] do_vfs_ioctl+0x7ae/0x1060 [ 202.028791] ? selinux_file_mprotect+0x5d0/0x5d0 [ 202.033583] ? lock_downgrade+0x740/0x740 [ 202.037865] ? ioctl_preallocate+0x1c0/0x1c0 [ 202.042297] ? __fget+0x237/0x370 [ 202.045784] ? security_file_ioctl+0x89/0xb0 [ 202.050213] SyS_ioctl+0x8f/0xc0 [ 202.053601] ? do_vfs_ioctl+0x1060/0x1060 [ 202.057812] do_syscall_64+0x1e8/0x640 [ 202.061854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 202.066725] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 202.071931] RIP: 0033:0x45b349 16:33:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x80}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x10}, 0x0) r1 = socket$inet6(0xa, 0xa, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x8) clock_gettime(0x0, 0x0) write(r3, &(0x7f00000004c0)="2d7c148d9e70b32cd81e4e4fedcf1e9312d37fd2558871e9d9996a597910ad9b00d5c2d8cb313252d9f9274567789d1437a18beea97369288e0d9a4a137ba8a931a80e137d6dad359a3b53a59282961c0d9779f0dc65c7d7c9b713f69ecb939a278101a1dcbbaea4afd3d4ce37b2a004b198cbedc9be1096154a415a1b0d7f0d28aeacf81f9793e0bc413c8b70a2139eff30ac4a", 0xfffffdc6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ab64}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) write(r6, &(0x7f00000000c0), 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000240)) mount$overlay(0x0, 0x0, &(0x7f0000000100)='overlay\x00', 0x800413, &(0x7f0000000300)=ANY=[@ANYBLOB="780f6e6fbd6f6469723d000000003c", @ANYRESDEC=0x0, @ANYBLOB=',seclabel,dont_hash,\x00']) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x3, 0x3}, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') sendfile(r7, r8, 0x0, 0x80000007ffffffe) clock_getres(0x4, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4002, 0x0, 0x9, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, 0x0, 0x0, 0x4e, 0x0, "4b32b1d102c92e000ab4820f095ce3a8b428f0da72966f4b53aca0e693c33582d590533ffee3181f557ee028c29b671e626ce5d8b659e725e877d5dbc53ace1fb23785c180c5babbb904b2f80e1e468e"}, 0xd8) syz_open_procfs(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f000000d180), 0x4000000000000eb, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendfile(r9, r10, &(0x7f00000000c0)=0x10000, 0x100000001) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000380)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00E\x00'/168]) [ 202.075135] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.082863] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 202.090277] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 202.097701] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 202.105251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 202.112544] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 0000000000000008 16:33:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @null, @bpq0='bpq0\x00', 0x0, [@bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 16:33:28 executing program 3 (fault-call:2 fault-nth:9): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 202.125649] device bond1 entered promiscuous mode [ 202.130910] device gretap1 entered promiscuous mode [ 202.139187] 8021q: adding VLAN 0 to HW filter on device bond1 16:33:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x1e, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) [ 202.214322] FAULT_INJECTION: forcing a failure. [ 202.214322] name failslab, interval 1, probability 0, space 0, times 0 [ 202.234972] CPU: 0 PID: 8470 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 202.241738] syz-executor.2 (8440) used greatest stack depth: 23856 bytes left [ 202.242823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.259605] Call Trace: 16:33:28 executing program 5: ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f00000001c0)={{0x0, 0x0, @descriptor="874f81f536af3010"}}) symlinkat(0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}, 0x5}], 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x332, 0x0) [ 202.262331] dump_stack+0x142/0x197 [ 202.265987] should_fail.cold+0x10f/0x159 [ 202.270159] should_failslab+0xdb/0x130 [ 202.274159] __kmalloc+0x2f0/0x7a0 [ 202.277838] ? rate_transfer+0x250/0x250 [ 202.281922] ? snd_pcm_plugin_build+0x64/0x640 [ 202.286554] snd_pcm_plugin_build+0x64/0x640 [ 202.290987] ? snd_pcm_plug_format_plugins+0x539/0xd80 [ 202.296306] snd_pcm_plugin_build_io+0x1cd/0x550 [ 202.301227] ? io_playback_transfer+0x2d0/0x2d0 [ 202.305921] ? trace_hardirqs_on+0xd/0x10 [ 202.310090] snd_pcm_oss_change_params_locked+0x16f8/0x32f0 [ 202.315959] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 202.321786] ? __might_fault+0x110/0x1d0 [ 202.326017] snd_pcm_oss_change_params+0x63/0xb0 [ 202.330819] snd_pcm_oss_get_active_substream+0x102/0x150 [ 202.336364] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 202.340911] ? snd_pcm_oss_release+0x280/0x280 [ 202.345544] ? __might_sleep+0x93/0xb0 [ 202.349526] ? __fget+0x210/0x370 [ 202.353027] ? snd_pcm_oss_release+0x280/0x280 [ 202.357627] do_vfs_ioctl+0x7ae/0x1060 [ 202.361510] ? selinux_file_mprotect+0x5d0/0x5d0 [ 202.366254] ? lock_downgrade+0x740/0x740 [ 202.370413] ? ioctl_preallocate+0x1c0/0x1c0 [ 202.374846] ? __fget+0x237/0x370 [ 202.378536] ? security_file_ioctl+0x89/0xb0 [ 202.383103] SyS_ioctl+0x8f/0xc0 [ 202.386583] ? do_vfs_ioctl+0x1060/0x1060 [ 202.390736] do_syscall_64+0x1e8/0x640 [ 202.394620] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 202.399473] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 202.404697] RIP: 0033:0x45b349 16:33:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1a94f, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000070700"/20, @ANYRES32=0x0, @ANYBLOB="fffff00000000000140012000c0001006d6163766c616e00040002010a000500300000000000000008000a00", @ANYRES32, @ANYBLOB="239201f505ff7783913463f39e8e33ca415f8c1fcaa5dc22b86b07e3050499ac73f0371a78154d3f43a86b46d12a672dc4deacf0d9a8b72803bfbe5be546dbbaf7494a5e25232361abda96867ed7a7f072e4fe0af8475ee50b8f5667af55aa6529554187ec4ec0364340"], 0x48}}, 0x0) 16:33:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) r1 = getpid() tkill(r1, 0x9) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0xf4) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000080)={[{0x4, 0x3, 0xff, 0x1, 0x0, 0x99, 0x1, 0x1, 0x9, 0x7, 0x4, 0x7, 0x6}, {0x3ff, 0x100, 0x33, 0x0, 0x8, 0xff, 0x2, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x444, 0x0, 0x20, 0x0, 0xdf, 0x3c, 0x3, 0x81, 0x0, 0x1, 0x2, 0x7, 0x9}], 0x9}) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040), 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x8, 0x0, 0xffffffffffffff1a) [ 202.407892] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.415616] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 202.422890] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 202.430261] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 202.437526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 202.444803] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 0000000000000009 [ 202.559948] device macvlan2 entered promiscuous mode 16:33:28 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) pipe(0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001cc0), 0x1006) sendfile(r2, r2, &(0x7f0000000240), 0x2008000fffffffe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000dc) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000040)=""/44) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 16:33:28 executing program 3 (fault-call:2 fault-nth:10): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:28 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000001c0)="b899008ec0baa100ec0f20de65f30f350f080f06660f3881349a00802600666466646564ad2e0fc7aa0070", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r11, r10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup3(r14, r13, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup3(r17, r16, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup3(r20, r19, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) ioctl$KVM_RUN(r21, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) gettid() tkill(0x0, 0x0) 16:33:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getdents(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc0, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000004080)) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f00000002c0)={0x0, 0x3, 0x1, 0x2461, [], [], [], 0x34, 0x4, 0x2, 0x70, "c5da148381d1a0ebd1453ea1cbde48c3"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000040)={{0x1, 0x0, @identifier="a277cf1ded5c1b09e716c01f492260ec"}}) 16:33:28 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x680, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@ipv6={@rand_addr="7f5b570389f9c019f45188d37aa99bc1", @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'caif0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:v4l_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@ipv4={[], [], @empty}, @mcast1, [], [], 'macvlan1\x00', 'bond_slave_1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@remote}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) [ 202.662888] FAULT_INJECTION: forcing a failure. [ 202.662888] name failslab, interval 1, probability 0, space 0, times 0 [ 202.668106] device macvlan2 entered promiscuous mode [ 202.684086] CPU: 1 PID: 8496 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 202.691961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.701334] Call Trace: [ 202.703941] dump_stack+0x142/0x197 [ 202.707593] should_fail.cold+0x10f/0x159 [ 202.711769] should_failslab+0xdb/0x130 [ 202.715765] __kmalloc+0x2f0/0x7a0 [ 202.719321] ? rate_transfer+0x250/0x250 [ 202.723503] ? snd_pcm_plugin_build+0x40f/0x640 [ 202.728203] snd_pcm_plugin_build+0x40f/0x640 [ 202.732719] ? snd_pcm_plug_format_plugins+0x539/0xd80 [ 202.738031] snd_pcm_plugin_build_io+0x1cd/0x550 [ 202.742818] ? io_playback_transfer+0x2d0/0x2d0 [ 202.747519] ? trace_hardirqs_on+0xd/0x10 [ 202.751703] snd_pcm_oss_change_params_locked+0x16f8/0x32f0 [ 202.757462] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 202.763303] ? __might_fault+0x110/0x1d0 [ 202.767505] snd_pcm_oss_change_params+0x63/0xb0 [ 202.772374] snd_pcm_oss_get_active_substream+0x102/0x150 [ 202.777939] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 202.782375] ? snd_pcm_oss_release+0x280/0x280 [ 202.787068] ? __might_sleep+0x93/0xb0 [ 202.790977] ? __fget+0x210/0x370 [ 202.794471] ? snd_pcm_oss_release+0x280/0x280 [ 202.799104] do_vfs_ioctl+0x7ae/0x1060 [ 202.803130] ? selinux_file_mprotect+0x5d0/0x5d0 [ 202.807917] ? lock_downgrade+0x740/0x740 [ 202.812085] ? ioctl_preallocate+0x1c0/0x1c0 [ 202.816529] ? __fget+0x237/0x370 [ 202.820012] ? security_file_ioctl+0x89/0xb0 [ 202.824454] SyS_ioctl+0x8f/0xc0 [ 202.827854] ? do_vfs_ioctl+0x1060/0x1060 [ 202.832027] do_syscall_64+0x1e8/0x640 [ 202.835945] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 202.840818] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 202.846028] RIP: 0033:0x45b349 [ 202.849245] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:33:28 executing program 5: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x40) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20730, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xffffffff}, 0x400, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ppoll(&(0x7f0000000000), 0x7, &(0x7f0000000040), &(0x7f0000000080), 0x4) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0xb1f, 0xffffffffffffff81, &(0x7f0000000400)="fa13031b36b06be279451425c8d5ea6b4946a73613bddaf45e4c530717f0bfe064e06f62017f4d592066ecf61ff460cda032b5ae2283c2b79c33c77ecd3dd4780412bf31c49bf647123a7f5dfe2a6e17d91e2ea44a2257f407b57d06c89ddd9e649cfa3c3929bd59dbb7c723a5889bdac4efbc0de090345c213eea8c7b23b8df7223b237c319c2444810c2be03e64d58d909223e674dd7856ba0642775eaf0d2df91a09b9abc98deaeb5c33c3fddda13c44c67cc70f356538103ccaccc06f36a25b7a08c150e8036a0353ba69437a9e609ef3128262fef7a6121ce3a09e9403d7bda3651019fab24646cd69ac1a47783d8b95db03fd5a4e3c3afff2c54f19296a84d1c377b4f9d2044b3f63fb902d7fb1c7f24003b3371950d7f5732017cef2faa6066bd891b77aa6f15e06618ebfe628092192927b5fa7c2b5c7df7d2983ea25b008781f1a64fad3285b803bc9c71ffed139a1bb72807152c8352f57a091fdb0da92c2be69fd4ab7ceae024539acdf07a4769e32e9fcce4d5d4f854cc50447f72e3a17453e0d419c5060705a8cbdd2999eed94d92afaa2b504198b2100ec7536e6c8cb9697a114ffa75fb444f53ceaf5d9dff34da14655fb681d006f2b1838c4fce61cf93650f2ebf674d6cf9ad6e26ae6bd1135b21b7c74f6be9be3420c087705bc9df04401c8ed7f4e457a64df442b9810c85aa52877b010051b67def9930c426fc575128976d30b519f3b8fec1990fb4eb29d7ddd688c2e67740f9796736137ce173efa1ed7cc13b92f1ebd7241f1821266cadc585af55b07e9edfa694552ff8c4d9063a995fff0d828b5ff1a8e787d4a68e519a13b6d809cc6a588a8f6b12f12fd1cc230b815b40a81aca65756821b5df40e8c09432f7cff2f815137b32d1e9a96b637bf8ec4ac2ca18482c1de4b22791c3f81597714c8d85d4437c43e13c581f9de889f6bd66d09e97dd7f26a0729c11d6dbc16e1905787cc3e22df1324c57da395e986d40167ea5758f8d8b487b0bdc4260c8c1316da9f4c990b18ce14961a2942d1d6600d81129eda581799a91929a312ddbc6872f3b1b5941961fd4d4591ca64242303531c53c909358035e7d2bf36d4ba87c1871fc62e5f9ac68e751b0410137581477bdfe8c0b78a25f712544a408a2df1c4f9d8f769bda2b15a0fa4e73270c58eaea1c2c4b4042562a6d0f8ca904aeaa1e5d0fff3ad67df1885135a30b22ddeeba586acf48856d3085aceb37f16b053db81801b273aa97ba9520c88872695b606b0348d8360be31375fbc4eb13d1205df82448c7b99db086cf79e539a9836a47c3c9f605904170b47c31f5d773d7c5f09f2341b8c519a1fc5b344a9ec7f776af6ceb04e69ccf5eaf1d6c7ab63b08d82a7c43140fd271c5d30dfd2b1d802f2235e1873774af9c946ddb26d022ae3444d749b64171c43afc6cd5e7061d4b03ab3f2bc0fd2a7f6bad0f467d71d48df7baa7a1e7b701cb2f4216e5532cdffb87d25ad73b80bf695b9368d2175223c49d23ef2064e2a7bdc02c382ad0ccef24a948bf6ef34381e61de9cf6ece2106d41d7a93d4ebea6de2c930dc87ee940be4fa2c45184e1328f2f2d43f8b980621cce3ffb4777d3ee10f41fed4679929ccabe10cf2b9795393a35f82bcd9ad42eef5202fe110c1b4c67615b17869a5f489c4190bb9bdf832ca53188f596e564d8bc8fb1e7efe9cd2c36fe9cb00208f2225a840fad171fa63ead3907e17647cea2adeb0b80ae264baf6deb1e2d9e2ef5524219e84d116c605df271b9de2b8bf25bce17845b9a62e14bc49f219d84f187ef0c096bd3a94af86e009a1b9230c478318f427c51a59313979ee61989f4293d54c0dec8f28e8b8665d765abccd5e615f08215b4f948b44e47488f90d20491b78f4b8f1ba8af0f8760b956242a5d2bb62672052840e479d2f5fdb28b409a442273dad165fabc905b127fe7521333a041987792fa2a85e894a750eeb9f3d26dd484823043b142b357ccaed87e35e458ddecdd44ec129415609ca2e7e8b975cd4fcb515017819cb2ced0007b86cdbe578319d8d73c42a17ccf76ca0d10a18aba4fa59ada6ead9d6686b1a48dc1951ad0bc61490ad7db3e973acd7946b4a14372c055c933a11240e2a3cf102c2c558d5a6da69f542fc7df55f8ebf7dd7a26d5c9df9cf404bc009839d33a4febaa7950944eff2c786865c5ed5674cf9aa9d145756e64b0f6ad731055d17d6494c11b60bbc491154e5160b6bfcc739ce3c2dc9cb897edf384391311bc3b994111d67e946193e2729fcc90340326a3b4691cf178cd9d9ae6bcc91afcf44c8aeca8837fa861517b53468bd019381077c56408c078666e3150f4b8979e3de49b3d1a154715478000ce547f45b780edd3a8b19c00e2e127c02771d0d2f1c84d8f0e7174df9667ddad0d290954d05b699d0c93794f4ca79841597b9b8dc782af5e95f751095b0b2c5c73cad5b615715497b5b47b181ead6d872f59da0372d3d065036162724c1791bfa7dc21c21e5c3f1b306b33a2efdc9309f8301fbba75272ae2d80d3111c4a928c2cb5ec9bea65561a38ecabac7242b6a9732c257f857c1bf3add78c202914280c5fcc875b996c054f6882c26f3a561e06aafd9b72dd271dcee546c1fe689f14660587efc385f2f8002862af5b601c509febde6375eb3c71273dcffb4db5f10f1cdd530e7eae009beb61063277a8d5c6124a1c390a5b9f9de7ed7130eea68e56f04715ee015bec853d2addfc29d8dcd6db8fe9fd1e454ee1a729dcdbf92c990799d55fb2c55cc4be3b3189b20f23c8ebb87e6313b5f53b6de9846eb6acff9e301fd443a621666c39f03d5feb23772f8fae8cb77c18697d3e036023fa5f60ec8a4adc0b6c6e18e370734cec1ae84f8be2e31fcf5dce74dd3c3f96b738f1fa72f66bd12472b13876c94cbb4e225dcb5be02d668b537a0271170a980a81b68d3eb3ffa45b076406b039854a6278cf92f969f14ff0dec83e4d3b156b84d85fb9a80cad6acac56ac8c61305ac6f7d97b8383c187ab19877fd593d47ebd2dbffffbf0b8d185444395341a130b1e7a140c32455c0137ac62ec48f8df0803221a3336d76db609b8cffba28032acba05ddda74e7c5a748028ffbd9785c64ef14c809b6cbf496b4c7a31116be2960036ce54c6ba23fe56ae6abfc9a95faae3c5095a7085344eff0a332cee15a3335d9d2f2f135dcf91049ceb446f5b07771a5296f07b07305df2fc0d33a95740d6c50c24dd3088a"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000240)={0x1000, 0xdff, 0xae9, {0x77359400}, 0x6, 0x9}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000200)) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x0, 0x7fffffff, 0xfffffffffffffffe}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/60, 0x3c}, {&(0x7f0000000e00)=""/15, 0xf}, {&(0x7f0000002100)=""/28, 0x1c}], 0x3, &(0x7f00000020c0)=[{&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/195, 0xc3}], 0x3, 0x0) memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 202.856974] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 202.864367] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 202.871794] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 202.879081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 202.886370] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 000000000000000a 16:33:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0xffffffff, 0x4, 0x4, 0x100000, 0x474, {0x0, 0x2710}, {0x4, 0x0, 0xff, 0x1f, 0x3a, 0x6, "919ca94d"}, 0x7, 0x2, @userptr=0x9, 0x1, 0x0, r1}) read$snddsp(r2, &(0x7f0000000100)=""/247, 0xf7) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 16:33:28 executing program 3 (fault-call:2 fault-nth:11): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 203.125911] FAULT_INJECTION: forcing a failure. [ 203.125911] name failslab, interval 1, probability 0, space 0, times 0 [ 203.164723] CPU: 1 PID: 8514 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 203.172717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.182087] Call Trace: [ 203.184699] dump_stack+0x142/0x197 [ 203.188354] should_fail.cold+0x10f/0x159 [ 203.192532] should_failslab+0xdb/0x130 [ 203.196533] kmem_cache_alloc_node_trace+0x280/0x770 [ 203.201660] ? __lock_is_held+0xb6/0x140 [ 203.205745] ? check_preemption_disabled+0x3c/0x250 [ 203.210792] __kmalloc_node+0x3d/0x80 [ 203.210809] kvmalloc_node+0x93/0xe0 [ 203.210825] snd_pcm_plugin_alloc+0x4da/0x740 [ 203.210838] ? rate_dst_frames+0x280/0x280 [ 203.210847] snd_pcm_plug_alloc+0x13f/0x300 [ 203.210855] ? snd_pcm_plug_client_size+0x173/0x2d0 [ 203.210867] snd_pcm_oss_change_params_locked+0x1d6e/0x32f0 [ 203.210895] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 203.223091] ? __might_fault+0x110/0x1d0 [ 203.223115] snd_pcm_oss_change_params+0x63/0xb0 [ 203.223130] snd_pcm_oss_get_active_substream+0x102/0x150 [ 203.262748] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 203.267194] ? snd_pcm_oss_release+0x280/0x280 [ 203.271795] ? __might_sleep+0x93/0xb0 [ 203.275699] ? __fget+0x210/0x370 [ 203.279181] ? snd_pcm_oss_release+0x280/0x280 [ 203.283788] do_vfs_ioctl+0x7ae/0x1060 [ 203.287697] ? selinux_file_mprotect+0x5d0/0x5d0 [ 203.292471] ? lock_downgrade+0x740/0x740 [ 203.296647] ? ioctl_preallocate+0x1c0/0x1c0 [ 203.301081] ? __fget+0x237/0x370 [ 203.304560] ? security_file_ioctl+0x89/0xb0 [ 203.309031] SyS_ioctl+0x8f/0xc0 [ 203.312420] ? do_vfs_ioctl+0x1060/0x1060 [ 203.316597] do_syscall_64+0x1e8/0x640 [ 203.320635] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 203.325620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 203.330829] RIP: 0033:0x45b349 [ 203.334033] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.341761] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 203.349059] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 203.356350] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 203.363638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 16:33:29 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200)=0x6, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(r1) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="0f2cb826c1a0bb7ee4e61cb44b5aced6cf2b4e90aead004ee91f477d60e3ce05d48c841c533db52e54db2458ca87466b75dd0034845ff9279b4cb9dfc3ab7865383d56270ec9ac59cc5e5ee103bbe07ef0b06caea58c746ce9af1b671703cd045be15535dda661d6bd8578f3379590641f6f6c7eaae5a5e6e244aec99bbda26d1a662886e54b5963b109c4f6e4b77b0bed52d6210e6c3ce218bc8a1ade2aa698152558ed66afcd60", 0xa8) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x3000)=nil) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x202, 0x0) fanotify_init(0x4, 0x1000) sendto$rxrpc(r2, &(0x7f0000000140)="d8de3847ddbbe57786005efe90cb4fac626a0d828fcccd08", 0x18, 0x0, &(0x7f0000000180)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0xd0d}}, 0x24) [ 203.370925] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 000000000000000b 16:33:29 executing program 3 (fault-call:2 fault-nth:12): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:29 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}}, 0xc0000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) link(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000240)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1, 0x3, &(0x7f0000000880)=[{&(0x7f0000000600)="65fe7ddca5c33430e32c86cf2b883d9459f42536a75de8b63bd2b5341c4883a00a617cdb3a218308b428bb34af3b", 0x2e, 0x6e}, {&(0x7f0000000680)="7fbb065d9c122371d4083b7005f42e4363476e52796b673f6ade2654b010518aa1fd51f0ac52dd2466b3316828c03567604997db9d86eca7160d3f7de20d2359842d18afe9abc1fdc23c3d2494945ec423698d8abc94d3061394fb6b5efd5e03acb9508461b1aad97997cae70492da6c16dc0b43d177a7c3971199a004bf60835602c39ab032990cf26b426cf20b2da9eb26b299fb9e0da13e046dea03e026162df66f087ed1b8bce30168de3dd4eb24ad63c77839b42c20d66fc859031cd1390af6375d6b80bec4b7963a5b6f863e20fb0879b5cc2270493fefb7e6f5dab5a32391c3cf", 0xe4, 0x40}, {&(0x7f0000000800)="676a8f31010e8da96c7af934852fbf6d48421319fd5d05b64c8a044fc3cdbd211731f102fe5357d3e79a9871750d425e6cc0c31f0e21c45011bbfcc11ef587ee467bc043f1fb4d00ce39ed46e0d1af7fbfea5ab872add9f411c5862567e9ad30c555ecb0a5949b9a92bd241f77d0", 0x6e, 0x80}], 0xd3040, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c6e6f646f74732c6e6f646f00000000100000000000653d5e2c6f626a5f726f6c653d2f6465762f767382636b002c00"]) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r7, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r8, r9/1000+30000}, {0x0, 0x7530}}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 203.455342] FAULT_INJECTION: forcing a failure. [ 203.455342] name failslab, interval 1, probability 0, space 0, times 0 [ 203.486831] CPU: 1 PID: 8522 Comm: syz-executor.3 Not tainted 4.14.166-syzkaller #0 [ 203.494739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.504120] Call Trace: [ 203.506734] dump_stack+0x142/0x197 [ 203.510395] should_fail.cold+0x10f/0x159 [ 203.514583] should_failslab+0xdb/0x130 [ 203.518596] kmem_cache_alloc_node_trace+0x280/0x770 [ 203.523726] ? mark_held_locks+0xb1/0x100 [ 203.527946] ? quarantine_put+0xfa/0x1a0 [ 203.532037] __kmalloc_node+0x3d/0x80 [ 203.535871] kvmalloc_node+0x4e/0xe0 [ 203.539615] snd_pcm_oss_change_params_locked+0x205e/0x32f0 [ 203.545367] ? snd_pcm_hw_param_near.constprop.0+0x700/0x700 [ 203.551192] ? __might_fault+0x110/0x1d0 [ 203.555294] snd_pcm_oss_change_params+0x63/0xb0 [ 203.560077] snd_pcm_oss_get_active_substream+0x102/0x150 [ 203.565645] snd_pcm_oss_ioctl+0x1c77/0x2e50 [ 203.570080] ? snd_pcm_oss_release+0x280/0x280 [ 203.574689] ? __might_sleep+0x93/0xb0 [ 203.578597] ? __fget+0x210/0x370 [ 203.582127] ? snd_pcm_oss_release+0x280/0x280 [ 203.586735] do_vfs_ioctl+0x7ae/0x1060 [ 203.590653] ? selinux_file_mprotect+0x5d0/0x5d0 [ 203.595435] ? lock_downgrade+0x740/0x740 [ 203.599608] ? ioctl_preallocate+0x1c0/0x1c0 [ 203.604041] ? __fget+0x237/0x370 [ 203.607518] ? security_file_ioctl+0x89/0xb0 [ 203.611951] SyS_ioctl+0x8f/0xc0 [ 203.615365] ? do_vfs_ioctl+0x1060/0x1060 [ 203.619534] do_syscall_64+0x1e8/0x640 [ 203.623453] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 203.628325] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 203.633543] RIP: 0033:0x45b349 [ 203.636752] RSP: 002b:00007fb4c9834c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.644486] RAX: ffffffffffffffda RBX: 00007fb4c98356d4 RCX: 000000000045b349 [ 203.651776] RDX: 0000000020000000 RSI: 00000000c0045005 RDI: 0000000000000003 [ 203.659066] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 203.666351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 203.673644] R13: 00000000000004a0 R14: 00000000004c62a6 R15: 000000000000000c 16:33:29 executing program 3 (fault-call:2 fault-nth:13): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 204.120869] Unknown ioctl -1054845647 [ 204.239073] device bridge_slave_1 left promiscuous mode [ 204.250046] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.302098] device bridge_slave_0 left promiscuous mode [ 204.307916] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.376101] device veth1_macvtap left promiscuous mode [ 204.402753] device veth0_macvtap left promiscuous mode [ 204.418906] device veth1_vlan left promiscuous mode [ 204.424726] device veth0_vlan left promiscuous mode [ 204.552604] bond1 (unregistering): Released all slaves [ 204.606789] device hsr_slave_1 left promiscuous mode [ 204.664508] device hsr_slave_0 left promiscuous mode [ 204.732416] team0 (unregistering): Port device team_slave_1 removed [ 204.743687] team0 (unregistering): Port device team_slave_0 removed [ 204.753173] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 204.803564] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 204.883697] bond0 (unregistering): Released all slaves 16:33:30 executing program 1: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000680)="5846534200007ca580b57fffffff100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f8002000038c8000000000000000000000000800000f9ffffffff8000000000000000825c000001000010000000002100000000000806c034", 0x67}, {0x0, 0x0, 0x1ddfda1e}], 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000001c0)={@nfc={0x27, 0x1, 0x1, 0x4}, {&(0x7f0000000000)=""/16, 0x10}, &(0x7f0000000040)}, 0xa0) r1 = memfd_create(&(0x7f0000000080)='#GPL\x00', 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000340)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc1000400}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x34, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r9}, {0x8, 0x1, r10}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) 16:33:30 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x41, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2f1, 0x4100) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=""/114}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/841], 0x308) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000040)={0x8001005, 0x7, 0x3}) 16:33:30 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x280) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44160000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000000e060108000000000000e2ff0400430026050001e444000000098d020073797a32000000000900020073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r3 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f00000001c0)=""/141) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r4 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='?\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00022bbd7000fbdbdf250c00000011000700c8fd6ff2eae822a1f0a74c94f000000004000b00"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x810) 16:33:30 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x24500, 0x0) write$P9_RMKDIR(r4, &(0x7f00000000c0)={0x14, 0x49, 0x1, {0x40, 0x2, 0x3}}, 0x14) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104000) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000000380)={0x8, 0x2, 0x1, 'queue0\x00', 0x784}) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000009740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r8, 0x709}, 0x14}}, 0x0) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r8, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000010003b0e00000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000800010067726500080002000400120008001e00030000002c0012000a00010063666873690000001c00020018000400ff03000006000500060000000600060003000000"], 0x68}}, 0x40880) [ 205.113933] XFS (loop1): bad version [ 205.118052] XFS (loop1): SB validate failed with error -22. [ 205.169712] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops [ 205.192302] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops [ 205.311410] XFS (loop1): bad version [ 205.318229] XFS (loop1): SB validate failed with error -22. [ 206.960948] IPVS: ftp: loaded support on port[0] = 21 [ 207.769345] chnl_net:caif_netlink_parms(): no params data found [ 207.809036] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.815766] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.822887] device bridge_slave_0 entered promiscuous mode [ 207.829790] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.836821] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.844917] device bridge_slave_1 entered promiscuous mode [ 207.866350] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 207.875470] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.893486] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 207.901054] team0: Port device team_slave_0 added [ 207.906807] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 207.914764] team0: Port device team_slave_1 added [ 207.932697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.939100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.964660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.975734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.982205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.007786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.018320] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 208.026236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 208.092400] device hsr_slave_0 entered promiscuous mode [ 208.130381] device hsr_slave_1 entered promiscuous mode [ 208.171016] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 208.178296] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 208.241426] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.247940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.254672] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.261067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.296012] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 208.303031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.312741] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.322861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.331805] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.338574] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.348343] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 208.355060] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.363959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.371991] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.378498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.390445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.398112] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.404677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.421344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.429409] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.438720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.451648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.465307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.476348] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 208.483860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.495970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.507863] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 208.516127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.523757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.534764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.620848] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 208.632118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.671835] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 208.679155] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 208.686590] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 208.696593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.705463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.712687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.722657] device veth0_vlan entered promiscuous mode [ 208.735541] device veth1_vlan entered promiscuous mode [ 208.742111] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 208.751115] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 208.765522] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 208.772882] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 208.779984] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.787500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.797977] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 208.805673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.813665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.824164] device veth0_macvtap entered promiscuous mode [ 208.831430] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 208.840256] device veth1_macvtap entered promiscuous mode [ 208.846298] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 208.876387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 208.888038] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 208.898838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.912948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.922277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.932575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.941921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.951962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.961298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.971463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.980658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 208.990625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.001327] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 209.008324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.018906] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.027619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.037301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.045201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.054915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.064961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.074395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.084307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.094552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.104369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.113870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.125167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.134812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.144595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.155074] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 209.162383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.169951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.178128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.214161] ptrace attach of "/root/syz-executor.5"[8597] was attempted by " °ÿ àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ !    \x0a    ÿÿÿ þÿÿÿÿÿÿÿ \x0b ÿÿÿ   ÿ\x0d é\x0a ”5w  \x09 16:33:36 executing program 5: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x40) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20730, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xffffffff}, 0x400, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ppoll(&(0x7f0000000000), 0x7, &(0x7f0000000040), &(0x7f0000000080), 0x4) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0xb1f, 0xffffffffffffff81, &(0x7f0000000400)="fa13031b36b06be279451425c8d5ea6b4946a73613bddaf45e4c530717f0bfe064e06f62017f4d592066ecf61ff460cda032b5ae2283c2b79c33c77ecd3dd4780412bf31c49bf647123a7f5dfe2a6e17d91e2ea44a2257f407b57d06c89ddd9e649cfa3c3929bd59dbb7c723a5889bdac4efbc0de090345c213eea8c7b23b8df7223b237c319c2444810c2be03e64d58d909223e674dd7856ba0642775eaf0d2df91a09b9abc98deaeb5c33c3fddda13c44c67cc70f356538103ccaccc06f36a25b7a08c150e8036a0353ba69437a9e609ef3128262fef7a6121ce3a09e9403d7bda3651019fab24646cd69ac1a47783d8b95db03fd5a4e3c3afff2c54f19296a84d1c377b4f9d2044b3f63fb902d7fb1c7f24003b3371950d7f5732017cef2faa6066bd891b77aa6f15e06618ebfe628092192927b5fa7c2b5c7df7d2983ea25b008781f1a64fad3285b803bc9c71ffed139a1bb72807152c8352f57a091fdb0da92c2be69fd4ab7ceae024539acdf07a4769e32e9fcce4d5d4f854cc50447f72e3a17453e0d419c5060705a8cbdd2999eed94d92afaa2b504198b2100ec7536e6c8cb9697a114ffa75fb444f53ceaf5d9dff34da14655fb681d006f2b1838c4fce61cf93650f2ebf674d6cf9ad6e26ae6bd1135b21b7c74f6be9be3420c087705bc9df04401c8ed7f4e457a64df442b9810c85aa52877b010051b67def9930c426fc575128976d30b519f3b8fec1990fb4eb29d7ddd688c2e67740f9796736137ce173efa1ed7cc13b92f1ebd7241f1821266cadc585af55b07e9edfa694552ff8c4d9063a995fff0d828b5ff1a8e787d4a68e519a13b6d809cc6a588a8f6b12f12fd1cc230b815b40a81aca65756821b5df40e8c09432f7cff2f815137b32d1e9a96b637bf8ec4ac2ca18482c1de4b22791c3f81597714c8d85d4437c43e13c581f9de889f6bd66d09e97dd7f26a0729c11d6dbc16e1905787cc3e22df1324c57da395e986d40167ea5758f8d8b487b0bdc4260c8c1316da9f4c990b18ce14961a2942d1d6600d81129eda581799a91929a312ddbc6872f3b1b5941961fd4d4591ca64242303531c53c909358035e7d2bf36d4ba87c1871fc62e5f9ac68e751b0410137581477bdfe8c0b78a25f712544a408a2df1c4f9d8f769bda2b15a0fa4e73270c58eaea1c2c4b4042562a6d0f8ca904aeaa1e5d0fff3ad67df1885135a30b22ddeeba586acf48856d3085aceb37f16b053db81801b273aa97ba9520c88872695b606b0348d8360be31375fbc4eb13d1205df82448c7b99db086cf79e539a9836a47c3c9f605904170b47c31f5d773d7c5f09f2341b8c519a1fc5b344a9ec7f776af6ceb04e69ccf5eaf1d6c7ab63b08d82a7c43140fd271c5d30dfd2b1d802f2235e1873774af9c946ddb26d022ae3444d749b64171c43afc6cd5e7061d4b03ab3f2bc0fd2a7f6bad0f467d71d48df7baa7a1e7b701cb2f4216e5532cdffb87d25ad73b80bf695b9368d2175223c49d23ef2064e2a7bdc02c382ad0ccef24a948bf6ef34381e61de9cf6ece2106d41d7a93d4ebea6de2c930dc87ee940be4fa2c45184e1328f2f2d43f8b980621cce3ffb4777d3ee10f41fed4679929ccabe10cf2b9795393a35f82bcd9ad42eef5202fe110c1b4c67615b17869a5f489c4190bb9bdf832ca53188f596e564d8bc8fb1e7efe9cd2c36fe9cb00208f2225a840fad171fa63ead3907e17647cea2adeb0b80ae264baf6deb1e2d9e2ef5524219e84d116c605df271b9de2b8bf25bce17845b9a62e14bc49f219d84f187ef0c096bd3a94af86e009a1b9230c478318f427c51a59313979ee61989f4293d54c0dec8f28e8b8665d765abccd5e615f08215b4f948b44e47488f90d20491b78f4b8f1ba8af0f8760b956242a5d2bb62672052840e479d2f5fdb28b409a442273dad165fabc905b127fe7521333a041987792fa2a85e894a750eeb9f3d26dd484823043b142b357ccaed87e35e458ddecdd44ec129415609ca2e7e8b975cd4fcb515017819cb2ced0007b86cdbe578319d8d73c42a17ccf76ca0d10a18aba4fa59ada6ead9d6686b1a48dc1951ad0bc61490ad7db3e973acd7946b4a14372c055c933a11240e2a3cf102c2c558d5a6da69f542fc7df55f8ebf7dd7a26d5c9df9cf404bc009839d33a4febaa7950944eff2c786865c5ed5674cf9aa9d145756e64b0f6ad731055d17d6494c11b60bbc491154e5160b6bfcc739ce3c2dc9cb897edf384391311bc3b994111d67e946193e2729fcc90340326a3b4691cf178cd9d9ae6bcc91afcf44c8aeca8837fa861517b53468bd019381077c56408c078666e3150f4b8979e3de49b3d1a154715478000ce547f45b780edd3a8b19c00e2e127c02771d0d2f1c84d8f0e7174df9667ddad0d290954d05b699d0c93794f4ca79841597b9b8dc782af5e95f751095b0b2c5c73cad5b615715497b5b47b181ead6d872f59da0372d3d065036162724c1791bfa7dc21c21e5c3f1b306b33a2efdc9309f8301fbba75272ae2d80d3111c4a928c2cb5ec9bea65561a38ecabac7242b6a9732c257f857c1bf3add78c202914280c5fcc875b996c054f6882c26f3a561e06aafd9b72dd271dcee546c1fe689f14660587efc385f2f8002862af5b601c509febde6375eb3c71273dcffb4db5f10f1cdd530e7eae009beb61063277a8d5c6124a1c390a5b9f9de7ed7130eea68e56f04715ee015bec853d2addfc29d8dcd6db8fe9fd1e454ee1a729dcdbf92c990799d55fb2c55cc4be3b3189b20f23c8ebb87e6313b5f53b6de9846eb6acff9e301fd443a621666c39f03d5feb23772f8fae8cb77c18697d3e036023fa5f60ec8a4adc0b6c6e18e370734cec1ae84f8be2e31fcf5dce74dd3c3f96b738f1fa72f66bd12472b13876c94cbb4e225dcb5be02d668b537a0271170a980a81b68d3eb3ffa45b076406b039854a6278cf92f969f14ff0dec83e4d3b156b84d85fb9a80cad6acac56ac8c61305ac6f7d97b8383c187ab19877fd593d47ebd2dbffffbf0b8d185444395341a130b1e7a140c32455c0137ac62ec48f8df0803221a3336d76db609b8cffba28032acba05ddda74e7c5a748028ffbd9785c64ef14c809b6cbf496b4c7a31116be2960036ce54c6ba23fe56ae6abfc9a95faae3c5095a7085344eff0a332cee15a3335d9d2f2f135dcf91049ceb446f5b07771a5296f07b07305df2fc0d33a95740d6c50c24dd3088a"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000240)={0x1000, 0xdff, 0xae9, {0x77359400}, 0x6, 0x9}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f0000000200), 0x4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000200)) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0x0, 0x7fffffff, 0xfffffffffffffffe}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r2, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/60, 0x3c}, {&(0x7f0000000e00)=""/15, 0xf}, {&(0x7f0000002100)=""/28, 0x1c}], 0x3, &(0x7f00000020c0)=[{&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/195, 0xc3}], 0x3, 0x0) memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) 16:33:36 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x311100) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000080)={0x0, 0x7, 0xfff, 0x5, 0x5, 0xe3, 0x1, 0x6, 0x28, 0x40, 0x2, 0x4}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=""/54, 0x36}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/185, 0xb9}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {0xffff, 0x7}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0xff, 0xcc}}, @TCA_RATE={0x6, 0x5, {0x5, 0xec}}, @TCA_RATE={0x6, 0x5, {0x40}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80005}, 0x20048800) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10, 0x0, 0xa}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x163103, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000100)={0x18, 0x0, 0x7, {0xb00b}}, 0x18) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000004100)) r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r10, r9, 0x0) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000040)) write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f) 16:33:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000002a250000b002000077890100000000000000000000000000000000000000000000000000000000000000b55ae92f00000000000000000092861fa8d20000000000000000000000000000009dda734e590d8cd00000000000000000000000000000000000001000000000000000923248e7401d936a395f557700000000000000000000000000000000000000000108000000000000010000800000000000000000000000000000f05c000000000000000000000000000000000000000000000000dbb4fc03cd9df1e303520ba49f8834605301e6ce71e2174eadeec7c3dbff0e62e1d1f2a69323e0d4027c9e0d2766bf6c570d6c721807669c0bb59557c88c098ee33b8a9448d5c16ad098c803ba298be45d411d8c1eef2ff4c2042cfd42b979983126792d94468bbbb200647c00b12ea7c95593fc3041a68a3c56e183066f2e7fb8c0d27cb1dd45caf7d36ee1d728f468b14c4dd6fe5835ae101f462ae6be11a7f3699bddef3bedc7c56f8c0df9ad3f740edebb64346f34f7631738ef7637899dab2d51553e1151a5d5b577d790"]) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000480)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) write$P9_RGETATTR(r4, &(0x7f0000000640)={0xa0, 0x19, 0x1, {0x801, {0x4, 0x3, 0x8}, 0x0, r8, r9, 0x4, 0x5, 0x9, 0xe8, 0x1, 0x0, 0x80000001, 0x80000001, 0x4, 0x1, 0x7af5, 0xffffffffffff7fff, 0x1, 0x2, 0x2}}, 0xa0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x8, 0x9, 0x3f, 0x9, 0x0, 0x1, 0x20, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5af, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x21040, 0x80, 0x401, 0x0, 0x5, 0x80b0, 0xffff}, 0xffffffffffffffff, 0x8, r1, 0x5) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/enforce\x00', 0x200002, 0x0) getsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f0000000400), 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000007c0)=0x0) perf_event_open(&(0x7f0000000740)={0x3, 0x70, 0xb2, 0x1f, 0x9, 0x20, 0x0, 0x400, 0x92000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000700), 0x5}, 0x20c, 0xe7cf, 0x1, 0x9, 0x200, 0x6, 0x4}, r11, 0x7, 0xffffffffffffffff, 0x9) setsockopt(0xffffffffffffffff, 0x9, 0xffffff81, &(0x7f0000000040)="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", 0xfb) 16:33:36 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/dsp\x00', 0x822602, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_NAME(0xf, &(0x7f00000007c0)='TIPCv2\x00') ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r3 = dup3(r2, r1, 0x0) syz_mount_image$bfs(&(0x7f0000000380)='bfs\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0x4, &(0x7f0000000640)=[{&(0x7f0000000400)="beb5a9", 0x1d, 0x4}, {&(0x7f0000000440)="ddfa007e8fc059e2d1e2ce80d053462329ff6f5f346f1d79d50620ac22b147ff126193d2b2ba519d3c29107d27be4f3afa5c1773d1ae04f1e415753268179841df37e277ece6274131d5a43c1107f6f59d66d60f7c2ac7b673849a2ccb641d873bcb157e47d27a6d23e6bd258e52c60a0c543a61802504fde6993afee7a5831b7d5b3ccb606b4c1397cfae3dbd0a69d28bac7e860eed18e7b7e3effbb2c45bc50368bab6057fe3fb300410ce18c30374a05ceedbfbe9899efef8de1d757f1cce0f208c6a16094d54934bbef3f5f462a21b7eba", 0xd3, 0xce2}, {&(0x7f0000000540)="a577e4f4c38d67faf30136a6530fd516718487d36bf97285120f73ccb4d5fb41093d10fb1fd710a1459dd0e3fc8a57b9ff50e431e407b8f992072a4572a2aab8c1621e8f03207edfa797c6a48194e5f3c5b8dd6b99644621a816f3474df9c353998d9370f7c9aaa33b666180e7b9bae764ace713", 0x74, 0x2}, {&(0x7f00000005c0)="a4c98904d2ce069b0006d16c8f1b90dd2843ebce4c9b0455ee0c3aaa68d444985dedf9c583a8d4a66cca3fe41ed62f1fef5ee69d16d6a9cd15a8c13b05f697a81ed35877b41ceaee237dacf10d1c187df1945f4d8f11", 0x56, 0x100000080}], 0x203000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000e0ff00001c0012000c000100626f6e64000000000c00020008000100060000006b7e198ce2e0eafd12712725216c5de3fd38c2080000000000000000046aa106df20e457e8344673460d34d5837a7a5b83a7b440a66fdb53c657a59e2ae7c0c3fc9b35ab643f48200df5ce87f074602a02b575ad5a32c1bbcead140e44c398b3eae621d257390839ca7170c78692c5aedbe296d638d2cb4e6eb874a1f005aacfb82e152db0714287efec2a8a94502ca9c06df4273f4afc3744ff4902a9b65657aaa665bb7646404a3217f1f155e640ed7a5f158950bc1138d9821e763624695f96e6026df01bb2af11fceec3409da2cedb"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r8}]]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)={0x13, 0x0, 0x4, 0x80000000, 0x1, 0xffffffffffffffff, 0x7, [], r8, r11, 0x1, 0x1}, 0x3c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000740)={&(0x7f00000006c0)='./file0\x00', r12}, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x144, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xadb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x828b, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf013}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x48d0}, 0x4000011) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000001b40)) lsetxattr$security_selinux(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x1) get_thread_area(&(0x7f0000000000)={0x1, 0x100000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x1}) 16:33:36 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) truncate(&(0x7f0000000040)='./file0\x00', 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xfff, 0x80) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open$dir(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000140)={0x7, 0x0, 0x8, 0xfffffffb, 0x3, 0x40}) sendfile(r4, r7, 0x0, 0x1) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000100)={0x10000, 0xffff, 0xfffffffffffffffa}) [ 210.315001] ptrace attach of "/root/syz-executor.5"[8597] was attempted by " °ÿ àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ !    \x0a    ÿÿÿ þÿÿÿÿÿÿÿ \x0b ÿÿÿ   ÿ\x0d é\x0a ”5w  \x09 16:33:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, 0x0, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0x208000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000000000008000500ac1414a103d5b944d7aa01155d0a1c5c9e0008008fc30349120294ba1b9bfe3dbe55755156f8dc2c00dd2f837f34af77b7a0842046dfeb09c08562b37e5e075b3b4290447c854d170c407d3cb88657eb28108d6d26c8e4a75b0d61296b3eec4eee", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10050410}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080028bd7000fddbdf250200000008000400e0000001080000080008000100000008000500ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000200)={0x0, 'ip6tnl0\x00', {}, 0x4}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f00000001c0)={0x6, 'bond0\x00', {0x1ff}, 0x7f}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = creat(&(0x7f0000000300)='./file0\x00', 0xf8) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@multicast2}}, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "33b2963a90c91311fd878129ae00"}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 16:33:36 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7ff, 0xf0000000}, 0xc) r7 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000000000)={0x147, 0x0, &(0x7f0000000340)="4f18b78ca82579a7bf3f74f6b6eac4d0774b1129a60f3b5d0947a7f3ccde97ee09c7221d4d8cf693db70e61d03c7a662a00571aa0a34d2b5cfa80ecb52622db51b4f2fde9a3f91309501554ecc433b2339f5e20f0c04e83ee8b9e67d839bc560ca880ed5cc4a7e9a6c7ed2f2b8f1630d1ae831b0ce229985107076d43dde1c6901e0a60e6771290554c238a1b0af7b2b87b52fcfcc6fa25977883c2dc8985bddd9c8549e720953317f05539452da5dada562d7fca20aef057fb79c7a5ceb34cecaee0062796a8cc74c839220e13f1d9dc3c24ce79f2f7595dcf09a66e41da30b4a5bd72c0220bcb5df5edae59162f7f5cd0a2ccf8c8608cb7404f6d8abf3edb1bc2e29b66598b870f5081da1d9dd078bd09bebba6ffe450ac0ed08cbc5a699ac1524235a4243891e86c789b16bdf2147f4ae986f567e67e6b4bdbe81014bcdb2c7e2cd1c41fde4ca17f0789a3e7a8ec09c7070d3d56cc417ea104a741d1f461182cd469d14ed5df596b6f8e6d6fd5d92d8d93949bf129e5d846763ea3bb372725a645ef6ba9556b0aa33690300197f1346b2aacb18efe58c3c14e410ae37b53d948a176276cae6692526bb1f7d345ed56bcb8f6d150c18fe53eeaeea2362c118f4f3acf412e21c7a1ea863cd757d46b6fc90d827849846a6fa29309c64d9f6018369c9862907582e52bf7b7f942eeedefd7904d35cedad3c266b4a708dbb145afad91fbd53deb7319402c270d3021c36268aa4b4e95c4b4d91adbb3329c08db080a6efb8d9307f1e001aeb1da087c3d737c71096e0a8f31c21a306ba48cbbc7c04e667655effb34f8907e075b4de90c32d7f7e95de6db4fa1c2d3907504df7ddd853fd19f94e1483565f06005ee2efbd5d93f7edad504b663c3da9c4c46eec6659faf686d6b6a67acd6a8566b2e1151277cc0f682a8d4a2658b8febc652dcf9b637691440aaa1f7a8e9162b053e95bee32769924665f09ce230ca43eba4295295d79a15bb794a6857c25e167dc8670dc0125a37a17ac672ceb957ca1ab91e74897a39f4098ad9e9b6932cae14ce0057db7b23995f6cb61cfb68eed4418ef0bc7a6521776dcb01e2c4279009c4beb69babdd1d5c2c842e436e8317d1e5b08d1e62526ec1d1f752398d024cd9d73475e5173cd8d8ee84fc65b0f9a81d03b43930d330ff312b79c5dd27bfb88981c3fc08a8630b6f4ec66cb27547fe08b69a18f4df15636e42e96ddaa0239ce13e557d9c878c30e6d183e59d4715e2acba7f88e05e181ee3931376ed22dc6ef15a4e5b5e014f26a4d053d9c5b388cec87b27f94ddf445e950660e586216d1523d36f4ee6b0bd34966b1cfc1098bd90580d09afbddbb7914ae12c354a0851bf27a3c17d56d0296c3616e55f12aece0101c1a4ef8cb405f1b5e106d5c125f54997cba2aa52dfb416fb72f7d3adaaf4d437918011d99"}) [ 210.559971] ptrace attach of "/root/syz-executor.5"[8597] was attempted by " °ÿ àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ !    \x0a    ÿÿÿ þÿÿÿÿÿÿÿ \x0b ÿÿÿ   ÿ\x0d é\x0a ”5w  \x09 [ 210.737497] kauditd_printk_skb: 3 callbacks suppressed [ 210.737507] audit: type=1400 audit(1579624416.585:65): avc: denied { relabelto } for pid=8633 comm="TIPCv2" name="file0" dev="sda1" ino=16708 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mouse_device_t:s0 tclass=dir permissive=1 [ 210.826766] bond2: making interface gretap2 the new active one 16:33:36 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="000e003f0000007e5bc5795eca05", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 210.974283] bond2: Enslaving gretap2 as an active interface with an up link 16:33:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000500)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x1, 0x0, 0x401, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:33:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r2 = getpid() tkill(r2, 0x9) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="04006b808d0095802ecad44ce7b1a087a1c035c00fde168e0c4361b80506ef26ba3af29f3949df190bafff71adc00a8767acb1251065af96df9032a4828865d189bfb349575acdce90a9d6847a70310d9f6530e30acd96298c6ec8ee5f8cade013b9857fd8d1a8bb09e7774b27314d69b1d0a4a5fc35d704eee6e475ddad34933c85f8a4cc3ced1a5e06203c8e1469a14100000004005080"], 0x180}, 0x1, 0x0, 0x0, 0x200000c0}, 0x11) 16:33:37 executing program 5: socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000ad5ab218bb02000000000000000000cb4b5b1c1fa08a718724211542795cd6412dabdfb785ce334789cbf76b25851d29c858"]}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = syz_open_dev$audion(&(0x7f0000000580)='/dev/audio#\x00', 0x1000, 0x8100) bind$rxrpc(r2, &(0x7f00000005c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x100, @loopback, 0x5}}, 0x24) r3 = open(&(0x7f0000000080)='./file0\x00', 0x1c000, 0x0) getsockopt$packet_int(r3, 0x107, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 16:33:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001a40)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x10000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000240)={[0x0, 0x80000000, 0x6, 0x9, 0x0, 0x2bab555e, 0x7, 0x8, 0x3, 0x5, 0x80000001, 0x2, 0x6, 0x8, 0x1ff, 0x9, 0xffff, 0x81, 0xfffffffa, 0x10, 0x4, 0x20, 0x7, 0x2, 0x3, 0x0, 0x43c7, 0x972, 0x80, 0x7, 0x1, 0x800, 0x2072da1f, 0x3e1, 0x8, 0x7ff, 0x7fffffff, 0x80, 0x7, 0x3, 0x5, 0x101, 0x4, 0x40, 0x9, 0x97, 0x7, 0x1b, 0x3, 0x6, 0x0, 0x2, 0x4, 0x1, 0x6, 0xfff, 0xfffffffb, 0x5, 0x7, 0xff, 0x7, 0x3, 0x3, 0x3, 0x4, 0x1, 0x2, 0xb95f, 0xf530, 0xffffff01, 0x70f0eb61, 0x800, 0x6, 0x8, 0x200000, 0xfffffffd, 0xf45, 0x8001, 0x200, 0x8, 0x0, 0x400, 0x3ff, 0x4, 0x2, 0x1ff, 0x0, 0x2, 0x4, 0x8, 0x1, 0x1f, 0x9, 0x0, 0xfffffffd, 0xffffffc0, 0x1f, 0x400, 0xff, 0x5, 0x1, 0x0, 0x6, 0x0, 0x7, 0x3, 0x200, 0x7, 0x4, 0x3, 0x8001, 0x56, 0x1, 0x0, 0x1c58370b, 0x1ff, 0x8d, 0x9, 0x0, 0x7, 0xfffffffd, 0x3ff, 0x6, 0xbc, 0x100, 0x80, 0x0, 0x80000001, 0x4, 0x800, 0x9, 0x7, 0x1, 0xffff, 0x854b, 0x7, 0x3e7f, 0xfff, 0xfffffff7, 0xfffff001, 0xc3b, 0x8, 0x6, 0x2, 0x7, 0xa6e, 0xfffeffff, 0xfffffff8, 0x1ad78291, 0x2, 0x9, 0x8001, 0x3c, 0x800, 0x40, 0x7, 0x6, 0x400, 0xff, 0x4, 0x3, 0x9ce, 0xffffffff, 0x9, 0x2, 0x4, 0x3, 0x800, 0x2, 0x6, 0x2, 0x2, 0x283, 0x765, 0x6, 0x6, 0x614, 0x5, 0x5, 0x7ff, 0x3, 0x1000, 0x61ee, 0x7, 0x1ff, 0x0, 0x6, 0x0, 0x0, 0x8, 0xfffffffe, 0x1ff, 0x54, 0x8, 0x81, 0x5, 0x3, 0x3, 0x0, 0x6, 0x9, 0x3, 0x9, 0x5, 0x6, 0x2, 0x8, 0x7, 0xfff, 0x2b96e2cb, 0x1, 0x10000, 0x6, 0x5, 0x7f, 0x4, 0x0, 0xffffffff, 0x971e, 0x8000, 0x9, 0x7, 0xe4, 0xff, 0xa7, 0xbe7, 0x8000, 0xc36, 0x5, 0x0, 0x30, 0x7fff, 0x6, 0x63f7, 0x1ee, 0x7, 0x5, 0x1, 0x642, 0x1, 0x4, 0x63, 0x7, 0x10001, 0xc7, 0x1ff, 0x6, 0x1262, 0x9, 0xfffffffe, 0x9, 0xffffffff, 0x1c58, 0x4, 0x6, 0xb9, 0x80, 0x8a28, 0xbb91, 0x4, 0x2, 0x0, 0x2, 0x77, 0x10001, 0x7, 0x9, 0x7, 0x5, 0x401, 0x7ff, 0x3, 0x17, 0x1ffc000, 0x6ea8, 0x9, 0xfffffbff, 0x3, 0x0, 0x7, 0x4080000, 0xffff, 0x7, 0x9, 0x5, 0x4, 0x7, 0x3ff, 0x6, 0x5, 0x7fff, 0x5, 0x9, 0xfff, 0xfffffffb, 0x7f, 0x2, 0x3f, 0x4, 0x70d, 0xfffff000, 0x7ff, 0x1, 0x460f, 0x3f, 0x20, 0x80000001, 0x0, 0x3, 0x0, 0x5, 0x99a, 0x2, 0x6, 0x0, 0x2, 0x7, 0x4, 0x2, 0x0, 0x9, 0x9, 0x7, 0x5, 0x3f, 0x9, 0x4, 0x9599, 0x3, 0x7, 0x81, 0x1, 0x4, 0x4, 0x1000, 0x0, 0x8, 0x2, 0xae, 0x5, 0x4301, 0x112b, 0xf5, 0x2, 0xd23, 0x2, 0x1755, 0xfffff000, 0x800, 0x0, 0x2, 0x2, 0x5, 0x1, 0x2, 0x8, 0x5, 0x9, 0xb611, 0x1e, 0x7, 0x0, 0x80000000, 0x5, 0x3, 0x8, 0x21, 0x3, 0x8, 0x81, 0x4, 0x0, 0x1, 0x8, 0x8, 0x5b6e, 0x7, 0x80000000, 0x7fffffff, 0x5, 0x3, 0x1c2400, 0x1000, 0x2, 0xec335a4, 0x800, 0x226, 0x9, 0x401, 0x8, 0x1, 0x2, 0x0, 0x4, 0x8, 0x0, 0x1000, 0x80000000, 0x2eae, 0x2, 0x5c0e, 0x3ff, 0x8, 0x0, 0x0, 0xaffc, 0x5, 0xd8c0, 0x653, 0x200, 0x60a, 0xdeaa, 0x80ff, 0xff, 0x80000001, 0x7f, 0x10001, 0x4, 0x6, 0x9, 0x1, 0x4, 0x0, 0x3, 0x0, 0x3f, 0x2, 0x6, 0x3ff, 0x4, 0x86c1, 0x100, 0x0, 0x70f, 0x1, 0x80000000, 0x2, 0x40, 0x6, 0x9, 0x2, 0x8, 0x7fff, 0x3, 0x2, 0x0, 0x2, 0x7, 0x921, 0xffffffff, 0x7, 0x1ff, 0x7, 0x7, 0x4, 0x9, 0x401, 0x4, 0x9, 0x6, 0x25bb3c6d, 0xffffffff, 0x1, 0x1, 0x0, 0x3, 0x6, 0x80000000, 0x0, 0x101, 0x6, 0xd3, 0x5, 0x7fffffff, 0x2, 0x1, 0x3, 0xffffffff, 0xffff, 0x7ff, 0xa9, 0x1, 0x1, 0x7, 0x4, 0x4, 0x1ff, 0xffffffff, 0x1, 0x7fffffff, 0x8, 0xfff, 0x8, 0x9, 0x6, 0xffffffc0, 0xffffff00, 0x9, 0x20, 0x1ff, 0x0, 0x2, 0x6, 0xffffffff, 0x5, 0xffff, 0x73, 0x81, 0x6, 0x1368, 0x7fff, 0x8001, 0xe2, 0x2, 0x7744, 0x4, 0x1, 0x400, 0x1000, 0x2, 0xffffffff, 0x6, 0xea, 0x4, 0x1, 0x4, 0x1ff, 0x7fffffff, 0x65c, 0x10001, 0x3, 0x0, 0xfd, 0x8, 0x9, 0x8, 0x7, 0xda2, 0x5, 0x80000000, 0x4, 0x200, 0x85b, 0x5f25, 0x6, 0x9, 0xc3, 0x18a, 0xfffffffb, 0x8, 0x7, 0x4, 0x6, 0x6, 0x1, 0x6, 0x6, 0x8001, 0x0, 0x1, 0x80000000, 0x10000, 0x8, 0xfe, 0x5, 0x2, 0x2, 0x2d3b, 0x5, 0x8, 0x8, 0x0, 0x3ff, 0x7ff000, 0x6, 0x43ce, 0xffffffff, 0x4, 0x9, 0x7bd, 0x10001, 0x40, 0x589d6cb7, 0x2, 0x4, 0x4, 0xfff, 0x3, 0x0, 0x3, 0x1f, 0x1, 0x7, 0x0, 0xffffff98, 0x24, 0x3, 0xfffffff7, 0x3, 0x6a, 0x5, 0xfffff000, 0xe269, 0x8000, 0x6, 0x400, 0x81, 0x5, 0xffff, 0xff, 0x80, 0xfffffffb, 0x3, 0x1f, 0x131d, 0x0, 0x7, 0x15ce22ad, 0x4, 0x5, 0x1000, 0xf6, 0xc7f, 0x3c7b, 0x9, 0xffffffea, 0x101, 0x200, 0x469c, 0xd08, 0x10000, 0x400, 0xc07b, 0xea6, 0x9, 0x400, 0x5, 0xf7a4, 0x400, 0x8, 0x6, 0x9, 0x3, 0x4, 0x8, 0x9, 0x0, 0x8, 0x4, 0xe0af, 0x40, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3, 0xb6, 0xe6, 0x0, 0x10000, 0x3, 0x401, 0xcf, 0x6, 0x8, 0x8, 0x800, 0x100, 0x5, 0xffff8001, 0x200, 0x1, 0x40b8, 0x8, 0xaeb, 0x3ff, 0x805, 0x5, 0x6, 0x5, 0x6, 0xfff, 0x2dfe, 0xffffffff, 0x9, 0xd9d, 0xc28, 0x80000001, 0x3, 0x1, 0xb5, 0x7fff, 0x7, 0x1, 0xfffff800, 0x9, 0x60c, 0x2, 0x8, 0xe000000, 0x4, 0x5b, 0x7, 0x8b1d, 0x3, 0x7ff, 0xe059, 0x100, 0x0, 0x1f, 0x80000001, 0x774, 0x9, 0x5, 0x7fff, 0x5, 0x5, 0x9, 0x41, 0x5, 0xc0b2, 0x1, 0x51, 0x7, 0x5d, 0xfff, 0x4, 0xffffffff, 0x80000000, 0x6, 0x8, 0x0, 0x2, 0x10001, 0x400, 0x401, 0x47e0, 0xf3e, 0xffff0000, 0x0, 0x3, 0x2, 0xffff, 0xa38, 0x6, 0x6, 0x6, 0x81, 0x7, 0x1, 0x1, 0x1f, 0xbcc173e7, 0x6, 0x1, 0x7e42, 0x80000001, 0x3016, 0x1, 0xffff, 0x3, 0x3, 0x2, 0x7, 0x0, 0x0, 0x8, 0x9, 0x7fffffff, 0x7, 0x3, 0x6f0b, 0xf0000000, 0x5, 0x3f, 0x80000001, 0x2c, 0x0, 0x0, 0x9, 0x800, 0x4, 0x9, 0xd1, 0xfffffffb, 0x1, 0x9, 0x3f, 0xfffff3d4, 0xfffffff8, 0x401, 0x80000001, 0x1, 0x7, 0x35b, 0x7ff, 0x3, 0x2, 0x5, 0x3, 0x1, 0x4, 0x1ff, 0x8, 0x0, 0x4, 0x80, 0x3, 0x401, 0xfffff608, 0x2, 0xbe05, 0x9, 0x5, 0x5, 0x20, 0x7, 0x4, 0x3, 0xe7ab, 0x2, 0x1fe, 0xb23, 0xe515, 0x99, 0xb155, 0x3f, 0x8, 0x3f80000, 0x0, 0x3ff, 0x6, 0x1, 0x3, 0x4, 0x7ff, 0x207, 0x8, 0xfff, 0x9, 0xe3, 0x20, 0xff, 0x0, 0x0, 0xd00, 0x7, 0x0, 0x7, 0xffffffa7, 0x7, 0x6, 0x3, 0x1, 0x4, 0xfffffff9, 0x4, 0x3, 0x4, 0x2d5, 0x3ff, 0x0, 0x80, 0x10000, 0x6, 0x0, 0x2, 0x6, 0x200, 0xfff, 0x84c2, 0x3, 0x100, 0xce67, 0x8, 0x4, 0xfff, 0x5d4, 0x7, 0x55, 0x5, 0x4, 0x9, 0xffffffff, 0x7, 0xffffff63, 0x40, 0x20, 0x7fffffff, 0x5e3bef3d, 0x6, 0x3ff, 0x5, 0x2, 0x4, 0x3, 0x6, 0xf10, 0x6, 0x81, 0x1cf5b1c8, 0x80, 0x80000001, 0x4158, 0x40, 0x9, 0x400, 0x0, 0xe2ff, 0x400, 0x401, 0xff, 0x6, 0x80000000, 0x4, 0x7f, 0x5, 0x6, 0x7f, 0x6, 0x9, 0x4, 0xbf6, 0x6, 0xfffffffc, 0x2, 0x8c00000, 0x0, 0xffffffff, 0x7, 0x7, 0x7, 0x9, 0x0, 0xffffff81, 0xe5, 0x4, 0x64e, 0x80000000, 0x29f, 0x1, 0x1800, 0xfffffffd, 0x10000, 0x2, 0x5, 0x6, 0x1, 0x382, 0x6, 0x51, 0x7f, 0x589, 0x10001, 0x6, 0x5, 0x6, 0x7ff, 0x5, 0x8, 0x9, 0x9, 0x66de, 0x1647, 0x2, 0xff, 0x1ff, 0x1, 0x2, 0x80000000, 0x3, 0x800, 0x5, 0x673d447c, 0x40, 0x8, 0x8001, 0x4, 0x5, 0x9, 0x20, 0x6, 0x1, 0x9, 0x80000001, 0x9, 0x2d3a, 0xd03, 0x81, 0x7fff, 0x8001, 0x9, 0x3ff, 0xc674, 0x8, 0x3f, 0x5, 0x6, 0x6, 0x0, 0x8, 0x1, 0x1, 0x2, 0xffffff01, 0x8, 0xdbff, 0xfe9, 0xfffffffa, 0x35007edd, 0x8001, 0x3, 0x100, 0xd1, 0x40, 0x100, 0x5, 0x8, 0xffffff81, 0xfffffffe, 0x7f, 0x4fe3, 0x3ff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:33:37 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x200, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x401, 0x3000000, 0x9, 0x216, 0x1, 0xfffffffd, [], r7, 0xffffffffffffffff, 0x2, 0x3}, 0x3c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) r11 = openat$cgroup_ro(r4, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r11, 0x4b33, &(0x7f00000001c0)) r12 = dup3(r1, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(r12, 0x4004ae8b, &(0x7f0000000340)={0x1000, "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"}) ioctl$VIDIOC_S_MODULATOR(r10, 0x40445637, &(0x7f0000000080)={0x80000001, "0095976016f5b16ff7257551e463f7ba102743a722d841dccfc80963f798fb98", 0x0, 0x9, 0x6, 0x8, 0x2}) 16:33:37 executing program 0: r0 = socket$inet6(0x10, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5500000019007faf37c0f2b2a4a280930a000010000243dc9005236939000900100000000100000008f5050000000000080000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 16:33:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9800000001020102000000000000000000000000080008000000000014000a000800010000000000080001000000000108000800000000020800040000000004060007000000000014000afa9bd0f40300080001000000000008000100000000000e0006006674702d323030303000000024000a0008000100000000010800010000000001080001000000000008000100000000010800050000000005"], 0x98}}, 0x0) [ 211.469245] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 16:33:37 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x200) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@rand_addr="11e008285c1835deeeccc69a306c9e5b", 0x7, 0x2, 0xff, 0x8, 0xfff, 0x7}, 0x20) 16:33:37 executing program 4: mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getuid() setreuid(0xee00, r5) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) close(r6) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000180)={0x0, r6}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="000000000100000008000000", @ANYRES32=r9, @ANYBLOB='\b\x00\x00', @ANYRES32=r9, @ANYBLOB="100006000000000020000000000000"], 0x5, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x9, 0x36d, &(0x7f0000000500)="71efcdecb27891d26b5888616fb953edc1e3c44f1ed46e6fe08fc1c62b72fc2067f56e1f64b75d2c1aee0f9e854cf9ac6ac8be2dcde770464f82d2ec11500519f0215baa57eea9823e9cf8151ff13f6f5e64ccb01314b93b8bfd4d50b4707d060ae7efd71e9440dd4cc611ff43bcd705f6139b1d31d10150acb6a6cea35f3f07772fdcaa8b6a2998f55fd1b1c9dfb124a7ef79ff343e236f676e5724c1e20286be7ed7674a2f5fd6afc4eb5124d0b067115db07730db0d9352ac63fcc4fcee751f69d2ef1d3a92a871f0c647853a002f", &(0x7f0000000600)="1b5374886c7c079ac3d2e036b37e28ee8fa489083f77918a4dcb1acbc9a0075dbcf63bdc1d834d06aeb95d19642d2669be48aacc705848ef8126476e93b402b5c536470912bd84130c982e0bbecafb03c3078e89c957d7767cc8d9d0d04cd65a63f77d9a1d72b06369", 0xd0, 0x69}) r10 = getegid() lstat(&(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket(0x10, 0x2, 0x1) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='9p\x00', 0x8000, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@posixacl='posixacl'}, {@rq={'rq', 0x3d, 0x1}}], [{@context={'context', 0x3d, 'staff_u'}}, {@dont_appraise='dont_appraise'}, {@dont_appraise='dont_appraise'}]}}) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080000", @ANYRES32, @ANYBLOB, @ANYRES32=r13, @ANYBLOB="100006000000000020000000000008165a0d714cbc8d2f480d6073e5c9d0f8b8ac0d168fe6d5073b25d746b1f813519e38e7252b76a7c3d8b0e315c2b8e73b89847ca2c6099e62f75ee9403532d75ced9d1b31b6ec67f66d6d357ef2a7a50a535aa6b58585a0"], 0x5, 0x0) r14 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fsetxattr$system_posix_acl(r6, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [{0x2, 0x4, r7}], {0x4, 0x6}, [{0x8, 0x7, r9}, {0x8, 0x2, r10}, {0x8, 0x4, r11}, {0x8, 0x2}, {0x8, 0x3, r13}, {0x8, 0x1, r15}], {0x10, 0x1}, {0x20, 0x2}}, 0x5c, 0x3) write$FUSE_ATTR(r4, &(0x7f0000000040)={0x78, 0xffffffffffffffda, 0x6, {0x4, 0x9, 0x0, {0x0, 0xadbc, 0x8, 0x100000001, 0x8, 0x7, 0x80000001, 0x7, 0x48628a25, 0x6, 0x9700, r5, r15, 0x6, 0x8}}}, 0x78) tkill(r0, 0x16) creat(&(0x7f0000000100)='./file0\x00', 0x0) 16:33:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, 0x0, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0x208000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000000000008000500ac1414a103d5b944d7aa01155d0a1c5c9e0008008fc30349120294ba1b9bfe3dbe55755156f8dc2c00dd2f837f34af77b7a0842046dfeb09c08562b37e5e075b3b4290447c854d170c407d3cb88657eb28108d6d26c8e4a75b0d61296b3eec4eee", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10050410}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080028bd7000fddbdf250200000008000400e0000001080000080008000100000008000500ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000200)={0x0, 'ip6tnl0\x00', {}, 0x4}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f00000001c0)={0x6, 'bond0\x00', {0x1ff}, 0x7f}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = creat(&(0x7f0000000300)='./file0\x00', 0xf8) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@multicast2}}, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "33b2963a90c91311fd878129ae00"}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 16:33:37 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0x108, 0x108, 0x108, 0x108, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={[], [], @local}, [], [], 'veth1_to_bridge\x00', 'rose0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev, [], 0x0, 0x0, 0x0, 0x0, 0xdfa, 0x0, 0x0, 0x8000}}}, {{@ipv6={@empty, @empty, [], [], 'tunl0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSCTTY(r5, 0x540e, 0x80000000) r6 = dup3(r2, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) [ 211.662804] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 211.695934] xt_HMARK: spi-mask and port-mask can't be combined 16:33:37 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x6200, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0x10, 0xe4, {0x52, 0x3, 0xaed9, {0x17f5, 0xff}, {0x8000, 0x6d7}, @ramp={0x7fff, 0x8, {0x7, 0x6, 0xf6a, 0x7ff}}}, {0x56, 0x2, 0x7c5, {0x4, 0x8}, {0x2, 0xff01}, @rumble={0x1000, 0x1}}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:37 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000040)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) r3 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x0, 0x3f}, 0xc) pipe(0x0) pipe2(&(0x7f0000000140), 0x100800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000100), 0x4) 16:33:37 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="002c05dbe8ddd2f32a001e7bd2c70a9eebcb45af6cb9d9f659306b5ab519a4c5bf3de57f7e5f219eb126386530ac12da1c815c792a81f9835f69e202a91f66444988d51d2f64fa3c5c029ea522fc2e", @ANYRES16=r4, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x34000014) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'veth1_vlan\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="3bfcffff10000000ff7f000000"]}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x1cb) r8 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000180)={0x3, 'gretap0\x00', {0x80000001}, 0x6}) sendmmsg$inet(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="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", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)="ab", 0x1}, {&(0x7f00000001c0)='M', 0x1}, {&(0x7f0000000700)="e3", 0x1}, {&(0x7f00000007c0)=';', 0x1}, {&(0x7f0000000840)="18", 0x1}, {&(0x7f0000000940)="8a", 0xfffffcba}, {&(0x7f0000000a40)="c4", 0x1}, {&(0x7f0000000b00)='N'}], 0x8}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000dc0)='*', 0x1}, {&(0x7f0000000ec0)='S', 0xffffffaa}, {&(0x7f0000000fc0)="daa79130390e7b39afdd08b706bb8a2be69cd8eb31e2e8e337d920eb2f5701673ea5609e574f2f7646316c504ce424dfcea99b0e8e01e73d06b8c73c6d7fcb4a87", 0x41}, {&(0x7f0000001fc0)="ef21c26180b12d771ec692cc2caec4cc724962e151143326c268956f11f81c7b347cf218398858c4d21514c411ad8c1d8f8e91e66f09af088ccf2cc135893505e8", 0x41}, {&(0x7f0000002080)="8e", 0x1}, {&(0x7f0000002100)="e1", 0x1}, {&(0x7f0000002180)="da", 0x1}, {&(0x7f0000002240)="11", 0x1}], 0x8}}], 0x3, 0x4000000) tkill(r0, 0x1002000000016) [ 211.842836] xt_HMARK: spi-mask and port-mask can't be combined 16:33:37 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x418b01, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40) 16:33:37 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x5cb2410691e7f64f, 0x0, 0x0, {}, [{0x64, 0x1, @m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x60}, {}, {}, {}, {0x6}]}]}, {0x4}}}}]}, 0x78}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r8, 0x430, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28040891}, 0x80) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 16:33:37 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006101800000000000000000180000000095f3ff0000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x400}, 0x10}, 0x78) [ 212.005631] syz-executor.5 (8739) used greatest stack depth: 23024 bytes left 16:33:37 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0xffffffff) 16:33:38 executing program 5: syz_open_dev$dri(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) dup(0xffffffffffffffff) chdir(&(0x7f0000000100)='./file0\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x8, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_KEEPCAPS(0x7) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000300)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) 16:33:38 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x113) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c653020f0"], 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 212.217086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8769 comm=syz-executor.0 [ 212.269166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8769 comm=syz-executor.0 [ 212.326916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8769 comm=syz-executor.0 [ 212.341640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8769 comm=syz-executor.0 [ 212.357693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8769 comm=syz-executor.0 [ 212.377858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8769 comm=syz-executor.0 [ 212.390538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8769 comm=syz-executor.0 [ 212.405726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8769 comm=syz-executor.0 16:33:38 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000040)={0x4, 0x7, [{0x3, 0x0, 0x9}, {0x5, 0x0, 0x1}, {0x4}, {0x1f, 0x0, 0xaa95}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x48, r5, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc}, @GTPA_FLOW={0x8}, @GTPA_LINK={0x8}]}, 0x48}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xd0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) 16:33:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, 0x0, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0x208000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000000000008000500ac1414a103d5b944d7aa01155d0a1c5c9e0008008fc30349120294ba1b9bfe3dbe55755156f8dc2c00dd2f837f34af77b7a0842046dfeb09c08562b37e5e075b3b4290447c854d170c407d3cb88657eb28108d6d26c8e4a75b0d61296b3eec4eee", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x0) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10050410}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080028bd7000fddbdf250200000008000400e0000001080000080008000100000008000500ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4) fcntl$dupfd(r6, 0x0, r6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000200)={0x0, 'ip6tnl0\x00', {}, 0x4}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f00000001c0)={0x6, 'bond0\x00', {0x1ff}, 0x7f}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = creat(&(0x7f0000000300)='./file0\x00', 0xf8) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in=@multicast2}}, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "33b2963a90c91311fd878129ae00"}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 16:33:38 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x4000, 0x2) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 212.436025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8769 comm=syz-executor.0 [ 212.464200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8769 comm=syz-executor.0 16:33:38 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x404080, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000300)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x202000, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f00000002c0)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000300)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d050300000076657273696f6e3d3970323030302c64666c747569643d", @ANYRESHEX=r5, @ANYBLOB=',permit_directio,subj_role=/selinux/commit_pending_bools\x00,\x00']) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)) 16:33:38 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000040)={0x4, 0x7, [{0x3, 0x0, 0x9}, {0x5, 0x0, 0x1}, {0x4}, {0x1f, 0x0, 0xaa95}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x48, r5, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc}, @GTPA_FLOW={0x8}, @GTPA_LINK={0x8}]}, 0x48}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xd0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) 16:33:38 executing program 3: clock_getres(0x3, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:38 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'filter\x00', 0x2, [{}, {}]}, 0x48) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, 0x0, 0x100) 16:33:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0xa2) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f00000000c0)={0x6, 0x1, 0x8}) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$IMSETDEVNAME(r7, 0x80184947, &(0x7f0000000100)={0x19c6, 'syz0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x10) 16:33:38 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000040)={0x4, 0x7, [{0x3, 0x0, 0x9}, {0x5, 0x0, 0x1}, {0x4}, {0x1f, 0x0, 0xaa95}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x48, r5, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc}, @GTPA_FLOW={0x8}, @GTPA_LINK={0x8}]}, 0x48}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xd0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) 16:33:38 executing program 3: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x800, 0x5, 0x4, 0x10, 0x7, {0x77359400}, {0x2, 0x0, 0x2, 0x0, 0x8, 0x5, "6670824a"}, 0xfffff801, 0x0, @userptr=0x6, 0x2, 0x0, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x10) [ 213.524395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.537130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.555012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.569780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.588344] device bridge_slave_1 left promiscuous mode [ 213.600958] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.660900] device bridge_slave_0 left promiscuous mode [ 213.666634] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.724287] device veth1_macvtap left promiscuous mode [ 213.733772] device veth0_macvtap left promiscuous mode [ 213.743583] device veth1_vlan left promiscuous mode [ 213.748796] device veth0_vlan left promiscuous mode [ 213.955380] device hsr_slave_1 left promiscuous mode [ 214.012688] device hsr_slave_0 left promiscuous mode [ 214.079977] team0 (unregistering): Port device team_slave_1 removed [ 214.090432] team0 (unregistering): Port device team_slave_0 removed [ 214.099763] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 214.135095] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 214.194283] bond0 (unregistering): Released all slaves 16:33:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYPTR64], 0x1}, 0x1, 0xfdffffff00000000}, 0x804) 16:33:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000002c18d7560000f73973bd00001c00120009000100626f6e64000000000c00020008001200"], 0x3c}}, 0x0) [ 215.269836] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.081435] IPVS: ftp: loaded support on port[0] = 21 [ 216.897636] chnl_net:caif_netlink_parms(): no params data found [ 216.935911] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.942523] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.949735] device bridge_slave_0 entered promiscuous mode [ 216.956863] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.963607] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.970918] device bridge_slave_1 entered promiscuous mode [ 216.989094] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.998612] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.016509] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 217.024023] team0: Port device team_slave_0 added [ 217.029642] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 217.037013] team0: Port device team_slave_1 added [ 217.054710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.061178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.086855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.097954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.104365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.130387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.141433] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 217.148945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.203910] device hsr_slave_0 entered promiscuous mode [ 217.240388] device hsr_slave_1 entered promiscuous mode [ 217.310991] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 217.318223] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 217.382181] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.388791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.395614] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.402026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.437272] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 217.443653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.453123] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.462708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.469867] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.477053] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.487381] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 217.494958] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.504814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.513960] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.520374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.529747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.538185] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.544683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.561196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.569738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.587172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.597258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.608248] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 217.614786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.622653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.630790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.638344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.653573] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 217.661963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.669030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.682630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.753237] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 217.764772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.807969] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 217.815873] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 217.825503] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 217.835096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.842798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.849689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.859624] device veth0_vlan entered promiscuous mode [ 217.869636] device veth1_vlan entered promiscuous mode [ 217.875883] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 217.886403] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 217.893580] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 217.902156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.909397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.925431] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 217.936203] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 217.943509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.951664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.963393] device veth0_macvtap entered promiscuous mode [ 217.969735] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 217.979307] device veth1_macvtap entered promiscuous mode [ 217.985999] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 217.995356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 218.006298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 218.015496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.025432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.034796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.044784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.054199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.064256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.073558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.084433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.093740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 218.103937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.114299] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 218.121657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.131009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.138241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.145595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.153639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.164972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.175027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.184525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.195133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.204360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.214692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.224270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.234049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.244014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 218.254190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.264235] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 218.271292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.278938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.287238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 16:33:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$packet(0x11, 0x0, 0x300) bind$packet(r4, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) fcntl$dupfd(r6, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 16:33:45 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)=0x1) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0xa, 0x5, {0x57, 0x1, 0x7ff, {0x0, 0x4}, {0xeac, 0x8}, @period={0x5b, 0xc6, 0x6, 0x4, 0x2, {0x3d38, 0x100, 0x4, 0x8001}, 0x5, &(0x7f0000000080)=[0x8, 0x9, 0x8, 0xc98, 0xfff7]}}, {0x56, 0x3, 0x9, {0xe18, 0x9}, {0xf000, 0x8}, @period={0x5c, 0x9, 0x2, 0xbc, 0xe2e, {0x9, 0x9, 0x5, 0xe785}, 0x3, &(0x7f00000000c0)=[0x8, 0x3f, 0x6]}}}) 16:33:45 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r1) r2 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r1) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) keyctl$chown(0x4, r2, 0x0, r4) keyctl$describe(0x6, r2, &(0x7f0000000280)=""/214, 0xd6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_procfs(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0x3f, 0x0, 0x1, 0x3, 0x5, 0x5, 0x31d, 0x40, 0x120, 0x7f, 0x1, 0x38, 0x1, 0x4, 0x1000, 0x200}, [{0x7, 0x10000, 0x0, 0x5, 0x9, 0x5, 0xfffffffffffffff8}, {0x70000000, 0x7ff, 0xa12d, 0x3, 0xf12, 0xfff, 0x5, 0x2}], "032e06f9b3c27498ea4d49a660bb603640dee529cbaf1cb9967f3921d3016cfeacf4ed8d3505962df8714299e2b273748c3d33af1f1e44a0ba3a98d6a53ed78e3deaf324c41d767483cdf86f7ef76b9ecf1e03043feb16fc8766f1bbccedc05449aa509253739fc33dde7e926777616a99c12e9747a4d1b31390695d6e2127e1d04bace24fcc513b3f9c8b727db69c66120813280ef083455b"}, 0x149) preadv(r7, &(0x7f00000017c0), 0x33c, 0xf0ffff) fsetxattr$trusted_overlay_origin(r7, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000140)) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 16:33:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) fcntl$setstatus(r3, 0x4, 0x40400) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000140)=0x26, 0x4) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x2, 0x7}) ioctl$GIO_FONTX(r0, 0x4b40, &(0x7f0000000400)={0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmmsg(r7, &(0x7f0000000d00), 0x400004e, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012dbd7000fbdbdf25070000001400860072ef736530000000000000000000050000000002050001000100000008000500ac5f9bf10196710713032bc36ecc4037fb1e01010500010001dd00006ce5b6cd0d72f14b9ebe23e8d588bef15a094f7fd37b5d163a3fd4bfaa98e9"], 0x48}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r8, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_log_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008040}, 0x24040054) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r8, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 16:33:45 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60952a0000088800fe880000000000100000000000000001fe8000000000000000000000000000aa0000000000089078"], 0x0) 16:33:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000040)=0x40100060, 0x4000400000000000) write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x4, 0x2, 0x2}}, 0xffffffffffffff45) 16:33:45 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000080)={0x6e4cf4f3, 0x7ff, 0x7, 0x1, 0x94f, 0x2}) 16:33:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x1441fe, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x28004084}, 0x40000) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x2343a726) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x49f) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) [ 220.016115] audit: type=1400 audit(1579624425.865:66): avc: denied { map } for pid=8870 comm="syz-executor.0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35280 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 16:33:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="000000000100000000000000000000000500080001006962000008000100657468001c00020008000100000000000800020000000000030000000000000000000c00040000000000000000001c0006000000020004000200040002000800010000000040180007000c0004000000000000000000000000000500090008000100000000190c00090008000100000000001000060004000200080001000000180006000400020004000200080001000000000004000200090000000c00e6ff08000100000000001c0002"], 0x2}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x1000, 0x8000}) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02010500000001000000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 16:33:46 executing program 1: syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="02015400000001000000ff07000000ffffffa60008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x10000, 0x0) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000180)={{0x8, 0x2, 0x5, 0x6, '\x00', 0x5}, 0x1, 0x2, 0x6, r1, 0x1, 0x8, 'syz0\x00', &(0x7f0000000140)=['/dev/nvme-fabrics\x00'], 0x12, [], [0x7, 0x40, 0x1, 0x9]}) 16:33:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r1) r2 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, r1) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) keyctl$chown(0x4, r2, 0x0, r4) keyctl$describe(0x6, r2, &(0x7f0000000280)=""/214, 0xd6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_procfs(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0x3f, 0x0, 0x1, 0x3, 0x5, 0x5, 0x31d, 0x40, 0x120, 0x7f, 0x1, 0x38, 0x1, 0x4, 0x1000, 0x200}, [{0x7, 0x10000, 0x0, 0x5, 0x9, 0x5, 0xfffffffffffffff8}, {0x70000000, 0x7ff, 0xa12d, 0x3, 0xf12, 0xfff, 0x5, 0x2}], "032e06f9b3c27498ea4d49a660bb603640dee529cbaf1cb9967f3921d3016cfeacf4ed8d3505962df8714299e2b273748c3d33af1f1e44a0ba3a98d6a53ed78e3deaf324c41d767483cdf86f7ef76b9ecf1e03043feb16fc8766f1bbccedc05449aa509253739fc33dde7e926777616a99c12e9747a4d1b31390695d6e2127e1d04bace24fcc513b3f9c8b727db69c66120813280ef083455b"}, 0x149) preadv(r7, &(0x7f00000017c0), 0x33c, 0xf0ffff) fsetxattr$trusted_overlay_origin(r7, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000140)) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 220.237815] audit: type=1800 audit(1579624426.085:67): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16751 res=0 16:33:46 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x480540, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x14) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) [ 220.312129] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 220.330465] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 220.376342] loop4: p4 size 32768 extends beyond EOD, truncated [ 220.401135] loop4: p5 size 1073741824 extends beyond EOD, truncated 16:33:46 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x1, 0x8, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) [ 220.433358] loop4: p6 size 32768 extends beyond EOD, truncated [ 220.602388] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 220.617068] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 220.680591] loop4: p4 size 32768 extends beyond EOD, truncated [ 220.725210] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 220.762451] loop4: p6 size 32768 extends beyond EOD, truncated 16:33:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) fcntl$setstatus(r3, 0x4, 0x40400) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000140)=0x26, 0x4) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000080)={0x2, 0x7}) ioctl$GIO_FONTX(r0, 0x4b40, &(0x7f0000000400)={0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmmsg(r7, &(0x7f0000000d00), 0x400004e, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012dbd7000fbdbdf25070000001400860072ef736530000000000000000000050000000002050001000100000008000500ac5f9bf10196710713032bc36ecc4037fb1e01010500010001dd00006ce5b6cd0d72f14b9ebe23e8d588bef15a094f7fd37b5d163a3fd4bfaa98e9"], 0x48}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r8, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:fuse_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_log_t:s0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008040}, 0x24040054) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r8, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 16:33:46 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x444, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pipe(0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000004c0)=""/141, 0x3) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x40) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3}]) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/840], 0x308) r6 = fcntl$dupfd(r5, 0x406, r0) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0) sendfile(r0, r0, 0x0, 0x1000000) bind$inet6(0xffffffffffffffff, &(0x7f0000009400)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x10001, 0x4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 16:33:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0xc0002, 0x0) bind$unix(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000001c0)=0x1) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x6, 0x1800, 0x1, 0x4, 0x8, 0x0, 0x401, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x7b05, 0xfffffff7, 0x0, 0x7, 0x40}}, &(0x7f00000003c0)=0xb0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1f8) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="100006000000000020000000000000"], 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000800)={0x0, 0x888d, 0x0, 0x0, [], [], [], 0x8ed, 0x2, 0x1, 0x1b, "13cc6a7a45751f58c3e11dc3da0213a7"}) socket$isdn_base(0x22, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r10, r9, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$MON_IOCX_GET(r11, 0x40189206, &(0x7f00000005c0)={&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000540)=""/113, 0x71}) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000240)=[{{0x4}, {0x3, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x1}}], 0x18) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') 16:33:46 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x4402, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x10) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000280)=""/46) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0xd8, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa59}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}}, 0x4004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup3(r6, r5, 0x0) rt_sigreturn() ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_ENCODER_CMD(r7, 0xc028564d, &(0x7f0000000100)={0x2, 0x0, [0xfff, 0x200, 0x6, 0x6, 0xfffffff9, 0x3ff, 0x8, 0x5]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup3(r9, r8, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000580)={0x7fffffff, 0x18, [0xffffffff, 0x1ff, 0x5, 0x2, 0x0, 0x24]}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_dccp_int(r10, 0x21, 0x1f, &(0x7f0000000040), &(0x7f00000002c0)=0x4) [ 221.257533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.289472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.336541] Unknown ioctl -1054845647 [ 221.362075] ================================================================== [ 221.369677] BUG: KASAN: use-after-free in batadv_iv_ogm_schedule+0xdc4/0xe20 [ 221.376977] Write of size 2 at addr ffff8880518bcc16 by task kworker/u4:3/276 [ 221.384259] [ 221.385896] CPU: 0 PID: 276 Comm: kworker/u4:3 Not tainted 4.14.166-syzkaller #0 [ 221.393539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.403016] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 221.410228] Call Trace: [ 221.412821] dump_stack+0x142/0x197 [ 221.416449] ? batadv_iv_ogm_schedule+0xdc4/0xe20 [ 221.421308] print_address_description.cold+0x7c/0x1dc [ 221.426610] ? batadv_iv_ogm_schedule+0xdc4/0xe20 [ 221.431582] kasan_report.cold+0xa9/0x2af [ 221.435761] __asan_report_store2_noabort+0x17/0x20 [ 221.441020] batadv_iv_ogm_schedule+0xdc4/0xe20 [ 221.446220] ? save_trace+0x290/0x290 [ 221.450023] ? perf_trace_lock+0x500/0x500 [ 221.454263] ? process_one_work+0x787/0x1600 [ 221.458697] batadv_iv_send_outstanding_bat_ogm_packet+0x4a1/0x680 [ 221.465024] process_one_work+0x863/0x1600 [ 221.469367] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 221.474072] worker_thread+0x5d9/0x1050 [ 221.478045] kthread+0x319/0x430 [ 221.481399] ? process_one_work+0x1600/0x1600 [ 221.485897] ? kthread_create_on_node+0xd0/0xd0 [ 221.490567] ret_from_fork+0x24/0x30 [ 221.494275] [ 221.495899] Allocated by task 276: [ 221.499439] save_stack_trace+0x16/0x20 [ 221.503402] save_stack+0x45/0xd0 [ 221.506840] kasan_kmalloc+0xce/0xf0 [ 221.510550] __kmalloc+0x15d/0x7a0 [ 221.514090] batadv_tvlv_container_ogm_append+0x12b/0x480 [ 221.519639] batadv_iv_ogm_schedule+0xba0/0xe20 [ 221.524303] batadv_iv_send_outstanding_bat_ogm_packet+0x4a1/0x680 [ 221.530628] process_one_work+0x863/0x1600 [ 221.534875] worker_thread+0x5d9/0x1050 [ 221.538841] kthread+0x319/0x430 [ 221.542299] ret_from_fork+0x24/0x30 [ 221.546095] [ 221.547712] Freed by task 5: [ 221.550732] save_stack_trace+0x16/0x20 [ 221.554718] save_stack+0x45/0xd0 [ 221.558161] kasan_slab_free+0x75/0xc0 [ 221.562052] kfree+0xcc/0x270 [ 221.565158] batadv_iv_ogm_iface_disable+0x39/0x80 [ 221.570080] batadv_hardif_disable_interface.cold+0x605/0x840 [ 221.575996] batadv_softif_destroy_netlink+0xad/0x140 [ 221.581270] default_device_exit_batch+0x22c/0x3d0 [ 221.586473] ops_exit_list.isra.0+0xfc/0x150 [ 221.590898] cleanup_net+0x3ba/0x870 [ 221.594609] process_one_work+0x863/0x1600 [ 221.598833] worker_thread+0x5d9/0x1050 [ 221.602803] kthread+0x319/0x430 [ 221.606175] ret_from_fork+0x24/0x30 [ 221.609889] [ 221.611507] The buggy address belongs to the object at ffff8880518bcc00 [ 221.611507] which belongs to the cache kmalloc-192 of size 192 [ 221.624166] The buggy address is located 22 bytes inside of [ 221.624166] 192-byte region [ffff8880518bcc00, ffff8880518bccc0) [ 221.635968] The buggy address belongs to the page: [ 221.640904] page:ffffea0001462f00 count:1 mapcount:0 mapping:ffff8880518bc000 index:0x0 [ 221.649058] flags: 0xfffe0000000100(slab) [ 221.653216] raw: 00fffe0000000100 ffff8880518bc000 0000000000000000 0000000100000010 [ 221.661119] raw: ffffea000147d9a0 ffffea00029ec2a0 ffff8880aa800040 0000000000000000 [ 221.669112] page dumped because: kasan: bad access detected [ 221.674822] [ 221.676441] Memory state around the buggy address: [ 221.681372] ffff8880518bcb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.688881] ffff8880518bcb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 221.696254] >ffff8880518bcc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.703729] ^ 16:33:47 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @multicast2, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)={0x3, 0x0, 0x2, 0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000680)={0x81, 0x0, 0x2, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000540)=0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000780)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x4, 0x400000000000000]}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000500)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCSETS(r8, 0x5402, &(0x7f00000006c0)={0x80, 0x401, 0x7fffffff, 0xff9a, 0x10, "97080aa7a6dbce45b95cf48e7fa26afba76de5"}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 221.707625] ffff8880518bcc80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 221.715197] ffff8880518bcd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.722567] ================================================================== [ 221.729911] Disabling lock debugging due to kernel taint 16:33:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0xfffffffffffffecb, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="971a1334a038bb4855fe636b08ff3d6b", 0x10}, {&(0x7f0000000140)="cedbddea5b67f4290aa7fd7c0cc7e2e613891a59fd3dc2e8a3c6e7c9fa96", 0x1e}, {&(0x7f0000001640)="e4bc7c957b83ba155e000000000000002056ac3fe8a5de5ccfba604ac6b0d4a0fd42804843143a32d703bd21baddda61ba1cb78758f519c19a06193e8bfc0d1f1fad3be6885359773264bd153a2bf50591662cca307c7a22f8a9e70629a1beac22b823bfee7fec832958c20007e0b8707c6ac0e8b1539a1a37e634034731fe8a6a4253eaa6a7945a6d7510808e380f0fe6fa8d10ab4ea12200c38e", 0x9b}], 0x3) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) shutdown(r0, 0x1) 16:33:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000000)={'geneve0\x00', {0x2, 0x4e21, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000040)="b1bb98b1e5a79f9506e9597e4c5c402f2e66e304fa453440430f9a50afcdce95df1540a166251ebcc401eb4fb799597fafd2d67d28dbac8b4be90b5a74a4a0b33202b7588abf150afb05b9140137fb22445bc6922fef8a9d8f2c6bf26401b93b02614787457840bf5dec7f2837427c7ddb") accept4(r0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) sendto$inet6(r7, &(0x7f000087dffe), 0x147, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x100000073) [ 221.912026] overlayfs: filesystem on './file0' not supported as upperdir [ 221.944912] Unknown ioctl -1054845647 [ 222.180639] Kernel panic - not syncing: panic_on_warn set ... [ 222.180639] [ 222.188062] CPU: 1 PID: 276 Comm: kworker/u4:3 Tainted: G B 4.14.166-syzkaller #0 [ 222.196929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.206310] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 222.213424] Call Trace: [ 222.216022] dump_stack+0x142/0x197 [ 222.219807] ? batadv_iv_ogm_schedule+0xdc4/0xe20 [ 222.224681] panic+0x1f9/0x42d [ 222.227880] ? add_taint.cold+0x16/0x16 [ 222.232017] ? ___preempt_schedule+0x16/0x18 [ 222.236422] kasan_end_report+0x47/0x4f [ 222.240385] kasan_report.cold+0x130/0x2af [ 222.244618] __asan_report_store2_noabort+0x17/0x20 [ 222.249634] batadv_iv_ogm_schedule+0xdc4/0xe20 [ 222.254441] ? save_trace+0x290/0x290 [ 222.258231] ? perf_trace_lock+0x500/0x500 [ 222.262456] ? process_one_work+0x787/0x1600 [ 222.266866] batadv_iv_send_outstanding_bat_ogm_packet+0x4a1/0x680 [ 222.273279] process_one_work+0x863/0x1600 [ 222.277682] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 222.282355] worker_thread+0x5d9/0x1050 [ 222.286358] kthread+0x319/0x430 [ 222.289723] ? process_one_work+0x1600/0x1600 [ 222.294215] ? kthread_create_on_node+0xd0/0xd0 [ 222.298888] ret_from_fork+0x24/0x30 [ 222.304463] Kernel Offset: disabled [ 222.308235] Rebooting in 86400 seconds..