[ 36.752532] kauditd_printk_skb: 9 callbacks suppressed [ 36.752539] audit: type=1800 audit(1555599523.036:33): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 36.780607] audit: type=1800 audit(1555599523.036:34): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 41.458404] random: sshd: uninitialized urandom read (32 bytes read) [ 41.894331] audit: type=1400 audit(1555599528.176:35): avc: denied { map } for pid=7139 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 41.947369] random: sshd: uninitialized urandom read (32 bytes read) [ 42.606338] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. [ 48.182831] random: sshd: uninitialized urandom read (32 bytes read) 2019/04/18 14:58:54 fuzzer started [ 48.393931] audit: type=1400 audit(1555599534.676:36): avc: denied { map } for pid=7148 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 50.076635] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/18 14:58:57 dialing manager at 10.128.0.105:36703 2019/04/18 14:58:57 syscalls: 2434 2019/04/18 14:58:57 code coverage: enabled 2019/04/18 14:58:57 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/04/18 14:58:57 extra coverage: extra coverage is not supported by the kernel 2019/04/18 14:58:57 setuid sandbox: enabled 2019/04/18 14:58:57 namespace sandbox: enabled 2019/04/18 14:58:57 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/18 14:58:57 fault injection: enabled 2019/04/18 14:58:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/18 14:58:57 net packet injection: enabled 2019/04/18 14:58:57 net device setup: enabled [ 52.430965] random: crng init done 15:00:56 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") flistxattr(r0, &(0x7f0000000240)=""/203, 0xfffffffffffffcb0) 15:00:56 executing program 5: r0 = socket(0x2, 0x1, 0x84) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8202cc5dc0d56c652200"], 0x1) 15:00:56 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="10"], 0x1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, 0x0, 0x8080fffffffe) 15:00:56 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x2000)=nil, 0x2000, 0x0, 0x10012, r0, 0x0) 15:00:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 15:00:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x2102005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) [ 170.614383] audit: type=1400 audit(1555599656.896:37): avc: denied { map } for pid=7148 comm="syz-fuzzer" path="/root/syzkaller-shm861262258" dev="sda1" ino=16489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 170.659341] audit: type=1400 audit(1555599656.896:38): avc: denied { map } for pid=7165 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=26 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 171.450186] IPVS: ftp: loaded support on port[0] = 21 [ 171.775106] chnl_net:caif_netlink_parms(): no params data found [ 171.784390] IPVS: ftp: loaded support on port[0] = 21 [ 171.841697] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.848109] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.855220] device bridge_slave_0 entered promiscuous mode [ 171.866841] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.873484] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.880715] device bridge_slave_1 entered promiscuous mode [ 171.899868] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.909023] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.917995] IPVS: ftp: loaded support on port[0] = 21 [ 171.953569] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.961146] team0: Port device team_slave_0 added [ 171.993532] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.000773] team0: Port device team_slave_1 added [ 172.014903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.024837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.038869] chnl_net:caif_netlink_parms(): no params data found [ 172.122168] device hsr_slave_0 entered promiscuous mode [ 172.160332] device hsr_slave_1 entered promiscuous mode [ 172.243358] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 172.257476] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 172.304324] IPVS: ftp: loaded support on port[0] = 21 [ 172.338857] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.345384] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.352345] device bridge_slave_0 entered promiscuous mode [ 172.363378] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.370007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.377096] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.383595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.396170] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.402811] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.409830] device bridge_slave_1 entered promiscuous mode [ 172.437290] chnl_net:caif_netlink_parms(): no params data found [ 172.453821] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.479184] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.511738] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.519007] team0: Port device team_slave_0 added [ 172.543020] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 172.551320] team0: Port device team_slave_1 added [ 172.568117] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 172.579240] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.586117] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.593243] device bridge_slave_0 entered promiscuous mode [ 172.601375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 172.617426] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.624089] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.631657] device bridge_slave_1 entered promiscuous mode [ 172.660260] IPVS: ftp: loaded support on port[0] = 21 [ 172.702272] device hsr_slave_0 entered promiscuous mode [ 172.770544] device hsr_slave_1 entered promiscuous mode [ 172.845619] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.852772] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.866795] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 172.889347] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 172.897458] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 172.922600] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 172.940618] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.969318] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 172.977376] team0: Port device team_slave_0 added [ 173.018737] chnl_net:caif_netlink_parms(): no params data found [ 173.028230] IPVS: ftp: loaded support on port[0] = 21 [ 173.029550] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.041777] team0: Port device team_slave_1 added [ 173.047618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.072184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.083194] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.126094] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.132898] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.140202] device bridge_slave_0 entered promiscuous mode [ 173.147569] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 173.213578] device hsr_slave_0 entered promiscuous mode [ 173.260293] device hsr_slave_1 entered promiscuous mode [ 173.323412] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 173.331557] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.338023] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.346121] device bridge_slave_1 entered promiscuous mode [ 173.365159] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 173.372757] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 173.393120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.402542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.412073] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 173.418219] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.428001] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.440482] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 173.452201] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 173.478701] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 173.488213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.496192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.504181] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.510753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.529286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.557564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.565356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.573151] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.579506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.587602] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 173.596168] team0: Port device team_slave_0 added [ 173.605097] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 173.612490] team0: Port device team_slave_1 added [ 173.658323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 173.669752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 173.688833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.697649] chnl_net:caif_netlink_parms(): no params data found [ 173.706026] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 173.717216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 173.744914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.762222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.802267] device hsr_slave_0 entered promiscuous mode [ 173.860421] device hsr_slave_1 entered promiscuous mode [ 173.902422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.911978] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.919837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.932452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.946922] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 173.954401] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 173.962833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.988531] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.995952] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.003264] device bridge_slave_0 entered promiscuous mode [ 174.015591] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.022100] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.028995] device bridge_slave_1 entered promiscuous mode [ 174.037467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.045257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.056617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 174.069018] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.083060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.091361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.145922] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.154859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 174.162600] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 174.169453] chnl_net:caif_netlink_parms(): no params data found [ 174.179805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.186983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.193984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.201585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.210377] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.222455] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 174.228507] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.240206] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 174.246247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.264821] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.300150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.309799] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.317545] team0: Port device team_slave_0 added [ 174.333495] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 174.341327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.349006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.356918] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.363321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.370365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.388177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.395414] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.403650] team0: Port device team_slave_1 added [ 174.423869] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.433308] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.440578] device bridge_slave_0 entered promiscuous mode [ 174.454363] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.463812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.472812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.480096] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.486456] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.494629] device bridge_slave_1 entered promiscuous mode [ 174.508681] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.527496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.536512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.544131] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.550538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.563141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.576759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.593549] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.602920] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.662233] device hsr_slave_0 entered promiscuous mode [ 174.700342] device hsr_slave_1 entered promiscuous mode [ 174.741372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 174.748511] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 174.755575] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 174.766875] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.775255] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 174.793934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.801724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.808777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.817919] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.830769] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 174.836861] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.845770] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 174.862751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.871326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.878173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.886832] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 174.899499] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.906773] team0: Port device team_slave_0 added [ 174.912687] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.919916] team0: Port device team_slave_1 added [ 174.928418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.936480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.944420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.956682] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.964220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 174.974048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.982434] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.989926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.005140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.013765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.021734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.030346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.037954] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.044396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.052039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.059867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.067619] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.074006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.083597] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.101031] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 175.107136] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.122770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.129945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.137729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.146894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 15:01:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7, 0xfffffffffffffffd}, 0x4) close(r0) [ 175.156913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.168336] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.177215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 175.187288] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 175.233826] device hsr_slave_0 entered promiscuous mode [ 175.271089] device hsr_slave_1 entered promiscuous mode 15:01:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x14c, 0x0, 0xffffffffffffff9f, 0x0, 0xffffff53}, 0x10000) syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x401, 0x12600) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x9, 0x101000) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x10000) openat$cgroup_int(r0, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007f6, &(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2000, 0x105084) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket$packet(0x11, 0x0, 0x300) r6 = memfd_create(&(0x7f00000000c0)='sit0\x00', 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) lseek(r2, 0x5f, 0x0) [ 175.311096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.326198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.335928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.346584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.353873] hrtimer: interrupt took 59129 ns [ 175.365277] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.372030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.379090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.389221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.398951] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.411246] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 175.417286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.427138] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 175.430639] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 175.473122] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 2, id = 0 [ 175.474186] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.489898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.497785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.505112] audit: type=1400 audit(1555599661.766:39): avc: denied { create } for pid=7206 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 175.530702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.538730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.546866] audit: type=1400 audit(1555599661.786:40): avc: denied { write } for pid=7206 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 175.574394] audit: type=1400 audit(1555599661.786:41): avc: denied { read } for pid=7206 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 175.575035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.606780] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.613153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.627125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.647756] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 175.664029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.673031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.683928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.698997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 175.707720] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 175.715613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.732147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.739712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.747998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.756001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.770864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 15:01:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x14c, 0x0, 0xffffffffffffff9f, 0x0, 0xffffff53}, 0x10000) syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x401, 0x12600) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x9, 0x101000) r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x10000) openat$cgroup_int(r0, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007f6, &(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2000, 0x105084) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) socket$packet(0x11, 0x0, 0x300) r6 = memfd_create(&(0x7f00000000c0)='sit0\x00', 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) lseek(r2, 0x5f, 0x0) [ 175.779337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.795916] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 175.807710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.827581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.840780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.848895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.857278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.868307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.892637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 175.899831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.909296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.921449] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 175.941912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.951182] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 175.960894] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.967866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.988526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.006793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 176.017793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.035703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 15:01:02 executing program 0: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@nogrpid='nogrpid'}]}) [ 176.053862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.061738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.077094] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 176.086088] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 176.121701] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 176.135812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.144820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.155571] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 176.168694] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 176.176214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.183624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.195908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.205063] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 176.218510] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 176.226216] XFS (loop0): Invalid superblock magic number [ 176.230255] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.241994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.248876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.260498] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 176.268255] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.308164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 176.329219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.338791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.353588] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.359962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.364750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 15:01:02 executing program 3: [ 176.380455] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 176.401267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 15:01:02 executing program 0: [ 176.408310] audit: type=1400 audit(1555599662.686:42): avc: denied { map } for pid=7243 comm="syz-executor.3" path="/dev/ashmem" dev="devtmpfs" ino=787 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 176.433757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.441297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.449842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.457778] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.464216] bridge0: port 1(bridge_slave_0) entered forwarding state 15:01:02 executing program 3: [ 176.480319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.488121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.495889] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.502270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.509876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.526488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.535118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 176.573852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.596259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.625855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.644542] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.650964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.659682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.669943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.684379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.692702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.709227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.723154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.738558] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.746188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.755014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.763030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.776925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.798030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.808987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.819367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.827514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.835487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.843960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.855795] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.864879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.873782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.885511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.895392] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 176.904680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 176.918765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.927748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.946228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.966954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.981216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 176.989448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.007085] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 177.013830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.028530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 177.037369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.050932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.058489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.072117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.102350] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 177.108403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.158855] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 177.183938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.198051] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 177.237886] 8021q: adding VLAN 0 to HW filter on device batadv0 15:01:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000440), 0x20) sendfile(r0, r0, &(0x7f0000000100), 0x7f8) 15:01:04 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000002b40)=ANY=[@ANYBLOB="5000000090780000"], 0x0) 15:01:04 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 15:01:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f0000000140), 0x23c) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) 15:01:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f0000000140), 0x23c) r2 = open(0x0, 0x240400, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000140)) 15:01:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 15:01:04 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 15:01:04 executing program 4: getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000000300)=0x28) 15:01:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 15:01:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190a20ffff7f0000000002113b850e1de0974881000000fe58a2bc4a03049164643e6b000200de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) 15:01:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000d4164dab827d472fdb53082d5701bebf830c90f6603be2eb1d069f4645e1e1c8461640985acd29b5c1e249ca72ec5dea0000008077e2cdf2ca3a82ad34e7621d1384ec"], 0x4a) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 15:01:04 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 178.667713] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 178.678420] FAT-fs (loop0): Filesystem has been set read-only [ 178.702451] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF 15:01:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r0) 15:01:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = msgget$private(0x0, 0x10) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) msgget(0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1000000003c) 15:01:05 executing program 2: clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x2b) tkill(r0, 0x29) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) 15:01:05 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 15:01:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 15:01:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f0000000140), 0x23c) open(0x0, 0x240400, 0x0) 15:01:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000000000020"]}) 15:01:05 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) write$vnet(0xffffffffffffffff, 0x0, 0x0) 15:01:05 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x8000000000000085, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="04", 0x1}], 0x1) 15:01:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:05 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={0xc, 0x1, 0x2}], 0xc}, 0x0) 15:01:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0d000000000000000000002000000000016a4b10eeed0991135813605fb1a8e32bb2141776ce1c0f0ec4c45297fd097aca"]}) 15:01:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0700000000000000000000200000000001"]}) 15:01:05 executing program 5: r0 = socket$unix(0x1, 0x801, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 15:01:05 executing program 2: gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) 15:01:05 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) write$vnet(0xffffffffffffffff, 0x0, 0x0) 15:01:05 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000140)={0x0, 0x4}) 15:01:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7c, 0x600000000000000, [0x40000084], [0xc2]}) 15:01:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:05 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000001c0)=""/215) 15:01:06 executing program 2: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r0) 15:01:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000140)={0x0, 0x4}) 15:01:06 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040)={{0x0, @dev, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0x2d}, {@rand_addr, 0x4e24, 0x0, 0xffffffff00000000, 0x81, 0x6}}, 0x44) openat(r0, 0x0, 0x1400, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000380)=""/71, 0x47) socketpair$unix(0x1, 0x0, 0x0, 0x0) semget$private(0x0, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) write$vnet(0xffffffffffffffff, 0x0, 0x0) 15:01:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1200000000000000000000200000000001"]}) 15:01:06 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = dup(r0) ioctl$PPPIOCGIDLE(r1, 0x8008743f, 0x0) 15:01:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000080)=ANY=[]}) 15:01:06 executing program 3: gettid() r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(r0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) write$vnet(0xffffffffffffffff, 0x0, 0x0) 15:01:06 executing program 2: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = add_key(&(0x7f0000000380)='dns_resolver\x00', 0x0, &(0x7f0000000400)="d4bd5c952c65a08c17f81f666f1fc60e4e8406bebb9cd1c0e329ceefb64504ac6d37a8150500f13513eeffede6ad2f631848379bc61fb24c68897767b5d29370de", 0x41, 0xfffffffffffffffb) keyctl$get_security(0x11, r0, 0x0, 0xfffffffffffffdce) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa0002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r1, 0x0, 0x0) 15:01:06 executing program 4: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$RTC_IRQP_READ(r2, 0x8004700b, 0x0) 15:01:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:06 executing program 0: gettid() r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(r0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) write$vnet(0xffffffffffffffff, 0x0, 0x0) [ 179.980907] audit: type=1400 audit(1555599666.266:43): avc: denied { create } for pid=7475 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 15:01:06 executing program 5: gettid() ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r0) 15:01:06 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8000000000000085, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000140)="04", 0x1}], 0x1) 15:01:06 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) 15:01:06 executing program 4: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) [ 180.070987] audit: type=1400 audit(1555599666.306:44): avc: denied { ioctl } for pid=7475 comm="syz-executor.2" path="socket:[27481]" dev="sockfs" ino=27481 ioctlcmd=0x0 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 15:01:06 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) sendto$inet6(r3, &(0x7f00000000c0)="eabad7e5a8ae99c355b89ddf6e3815615c61f92896cd0366749bffc06245e6fdca38c3335b39ec08fb92c1f3d10b21bf905f6fb044cc509676fafb35b53295b4ae45cedd346e7308529af5372865dfccc97c4d211b13feac375138520671f81b936eb554a61506f9f37603e85d20fd4a7c42a91630bde123d75155501873962e62147cc77de6b688677fd311363c2c08ef6429f3a9fc3163165e2e31e84bc12def47c29c549f8811b7461abdf19c92f7e456d838105438f4b17d8f15bbb0a7ab2c0f027b32b98acc4b730d639d85b56faf86de797f6450764eb50461bfeedf60f940704f48d1d655a65b83bb19045824609ab833f4909d2a07", 0xf9, 0x40, 0x0, 0x0) 15:01:06 executing program 2: clone(0x20007ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 15:01:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) 15:01:06 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @empty, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 15:01:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x1100, 'lblc\x00'}, 0x2c) 15:01:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x641, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000015001}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000008000000000000006034409200180000fe8000000000000087965342dfb2171b35be8a5ddec80000000000000000ff0200000000000000000000000000010000907800000000fe800000000000000000000000000000e76ab9cc0f56820c26facf7a7649760e32a2aa816148b3b8ebc112af9b5cdae3e1b8128c6c5cb0f8ca20106493040e6d707bdd7ad2c513"], 0x1) 15:01:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:06 executing program 0: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/if_inet6\x00') sendfile(r0, r1, 0x0, 0x2) 15:01:06 executing program 3: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) quotactl(0x0, 0x0, 0x0, &(0x7f0000000080)="89d8d6c567ff25ecb5df1136355ee75e4c39c946c4f891916d8454d14518be903f66755b108b897a94293321d4350d712bdad43e7310857d2e637d32e05cc48227ea6e65cf57848dd803c494ad7fff5a7194af594b99c7fbbb5512934c05") 15:01:06 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) [ 180.612887] audit: type=1400 audit(1555599666.896:45): avc: denied { map } for pid=7548 comm="syz-executor.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27565 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 15:01:07 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x6, 0x4, 0x0, 0x0) 15:01:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x1) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 15:01:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r1, 0x0, 0x2000424, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write(r1, &(0x7f0000002000)='/', 0x1) sendfile(r1, r1, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f0000000080)) 15:01:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070") socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000006c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0xa1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0xd9) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000300)=""/40, 0x28}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000005c0)=""/44, 0x2c}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x9, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r2, &(0x7f0000000700)="f4", 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 15:01:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001c008104e00f80ecdb4cb90402c804a012000000020090fb120001000e00da1b40d819a9060015ffffff", 0x2e}], 0x1}, 0x0) 15:01:07 executing program 4: r0 = socket$inet6(0xa, 0x200000006, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) sendto(r2, &(0x7f00000000c0)="5bda613838079cd915772a6818823c075c414a5c6fe7a4b2df80f73bcf5f45e09a8f48bb0198b3bd3fa8726a2dad17a1da1d90e13058e1c998a21c0baf269df32a8739eed82603f58a3428394756fd06a00657492cdfbce05be7fc4c8ed671c89f08976df48860f7e6", 0x69, 0x44, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0xfffffffffffffff6, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(r3, &(0x7f00000002c0)='threaded\x00', 0x9) syz_genetlink_get_family_id$tipc(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x8000) getsockname$tipc(r4, 0x0, &(0x7f0000000240)) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x1a2f5dc5, 0x0) sendmmsg(r2, 0x0, 0x354, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{&(0x7f0000000700)=@isdn, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/178, 0xb2}, {&(0x7f0000001a00)=""/107, 0x6b}], 0x3}}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/224, 0xe0}, {&(0x7f0000003140)=""/151, 0x97}, {&(0x7f0000004200)=""/203, 0xcb}], 0x4, &(0x7f0000004380)=""/238, 0xee}}], 0x2, 0x2000, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) write(r1, &(0x7f0000004540)="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", 0x147) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x28, &(0x7f0000000040)}, 0x10) [ 181.028403] audit: type=1400 audit(1555599667.306:46): avc: denied { map } for pid=7574 comm="syz-executor.2" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=27614 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 15:01:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x3, 0x37, 0x7fff}) r1 = accept(r0, 0x0, &(0x7f0000000140)) accept$unix(r1, &(0x7f0000000180), &(0x7f0000000200)=0x6e) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000380)) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x5c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x220180, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 15:01:07 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x800, 0x1}, 0x20) 15:01:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070") socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000006c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0xa1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0xd9) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000300)=""/40, 0x28}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000005c0)=""/44, 0x2c}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x9, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r2, &(0x7f0000000700)="f4", 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 181.142286] audit: type=1400 audit(1555599667.426:47): avc: denied { name_bind } for pid=7590 comm="syz-executor.4" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 181.208311] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 181.246732] audit: type=1400 audit(1555599667.426:48): avc: denied { node_bind } for pid=7590 comm="syz-executor.4" src=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 181.302585] audit: type=1400 audit(1555599667.426:49): avc: denied { name_connect } for pid=7590 comm="syz-executor.4" dest=20003 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 15:01:07 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/68, 0x44) 15:01:07 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x800, 0x1}, 0x20) 15:01:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070") socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000006c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0xa1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0xd9) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000300)=""/40, 0x28}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000005c0)=""/44, 0x2c}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x9, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r2, &(0x7f0000000700)="f4", 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 15:01:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070") socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000006c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0xa1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0xd9) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000300)=""/40, 0x28}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000005c0)=""/44, 0x2c}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x9, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r2, &(0x7f0000000700)="f4", 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 15:01:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/68, 0x44) 15:01:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070") socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000006c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000140)) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0xa1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0xd9) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000300)=""/40, 0x28}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f00000005c0)=""/44, 0x2c}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x9, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r2, &(0x7f0000000700)="f4", 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 15:01:07 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x2}}, 0x10, 0x0}, 0x0) 15:01:08 executing program 4: r0 = open(&(0x7f0000000240)='./file0\x00', 0xfffffffffffffffd, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) r1 = gettid() prctl$PR_MCE_KILL(0x21, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write$P9_RSYMLINK(r0, 0x0, 0xfffffffffffffd1d) tkill(r1, 0x1000000000016) 15:01:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adcf8123c129a319bd070") poll(&(0x7f0000000200)=[{r2, 0x2000}, {r1}], 0x2, 0x20) 15:01:08 executing program 5: r0 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) setsockopt$inet_buf(r2, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000200000000a00000000000000ab25899de34ca79c823d924c68c25f2f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f52d84373fa2700"/134], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000013) 15:01:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/68, 0x44) [ 181.916021] dccp_close: ABORT with 105 bytes unread 15:01:08 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:08 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:08 executing program 4: syz_execute_func(&(0x7f0000000440)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) clone(0x1fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180), 0xfe0c) sendmmsg$unix(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x20000885) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote}, 0x1c) 15:01:08 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x280, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x7, &(0x7f0000000140), 0xa0}}], 0xa0cbcb, 0x0) 15:01:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 15:01:08 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) openat$full(0xffffffffffffff9c, &(0x7f0000000940)='/dev/full\x00', 0x80, 0x0) 15:01:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0xff, 0x0, 0xfc}, 0x21) 15:01:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='./cgroup.cpu/syz0\x00') r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) 15:01:08 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adcf8123c129a319bd070") ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f00000001c0)=[{0x4000006}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 15:01:08 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:09 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adcf8123c129a319bd070") poll(&(0x7f0000000200)=[{r1, 0x2000}, {r0, 0x40}, {r0}], 0x3, 0x20) 15:01:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f, 0x8}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0}}], 0x118, 0x0) 15:01:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='./cgroup.cpu/syz0\x00') r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) 15:01:09 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:09 executing program 2: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) sync_file_range(0xffffffffffffffff, 0xfffffffffffffff8, 0x4, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000580)={0x5, 0x2, 0x0, 0x80000000, 0x12, 0x1ff, 0x641, 0x400, 0x10000, 0x20}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000740), 0x8) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x4f9, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 15:01:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f, 0xffffa888}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0}}], 0x118, 0x0) 15:01:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x400, 0x0, 0x0, 0x300}, 0x98) r1 = dup(r0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xb2, 0x101000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x40104593, 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r4) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) nanosleep(&(0x7f0000000140), &(0x7f0000000380)) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sync_file_range(r1, 0xfffffffffffffff8, 0x4, 0x4) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000004c0)={0x0, @bt={0x6, 0x5, 0x1, 0x3, 0x1f, 0x1, 0x6, 0x5, 0x5, 0x287, 0x7, 0x5, 0xfffffffffffffffb, 0x0, 0x4, 0x4}}) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x0, @loopback}], 0x10) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000002c0)=0x80) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000740), 0x8) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x4f9, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 15:01:09 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0xff, 0x100000000000001}, 0x20) dup2(r0, r1) 15:01:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@fat=@umask={'dmask'}}]}) 15:01:09 executing program 2: getrandom(&(0x7f00000000c0)=""/28, 0x17, 0x2) [ 183.559908] FAT-fs (loop4): bogus number of reserved sectors [ 183.581385] FAT-fs (loop4): Can't find a valid FAT filesystem [ 183.658668] FAT-fs (loop4): bogus number of reserved sectors [ 183.675617] FAT-fs (loop4): Can't find a valid FAT filesystem 15:01:10 executing program 0: futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x2000, 0x1c4) ioctl$TCXONC(r2, 0x540a, 0x7ff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44ff}) getsockopt$inet6_buf(r1, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/204, 0xcc}], 0x6, 0x0) r4 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000001c0)) signalfd4(r3, &(0x7f0000000140)={0x6}, 0x8, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000280)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0xfffffffffffffe8e, 0x20000006, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) 15:01:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f, 0x6488}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0}}], 0x118, 0x0) 15:01:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f, 0x5865}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0}}], 0x118, 0x0) 15:01:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000780)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 15:01:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$mice(0x0, 0x0, 0x0) getsockopt$bt_hci(r1, 0x65, 0x6, &(0x7f0000cbc000)=""/244, &(0x7f0000000340)=0xaf) 15:01:10 executing program 0: futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) [ 184.149150] audit: type=1400 audit(1555599670.426:50): avc: denied { relabelto } for pid=7797 comm="syz-executor.5" name="UDP-Lite" dev="sockfs" ino=28389 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:inetd_log_t:s0 tclass=rawip_socket permissive=1 15:01:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x5c832, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000200)="b0001ed4a34f498b3a8bcca78709ce7d", 0x10) ioctl(r1, 0x9, &(0x7f0000000280)) r3 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0x0) unshare(0x40000000) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00000007c0), 0xff5d) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 15:01:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071010000100feffffff0800000000000000", 0x24) 15:01:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") munlock(&(0x7f0000ff6000/0xa000)=nil, 0xa000) 15:01:10 executing program 0: futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) [ 184.849992] audit: type=1804 audit(1555599671.126:51): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir051384303/syzkaller.EdS98g/19/bus" dev="sda1" ino=16606 res=1 15:01:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x2000, 0x1c4) ioctl$TCXONC(r2, 0x540a, 0x7ff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44ff}) getsockopt$inet6_buf(r1, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/204, 0xcc}], 0x6, 0x0) r4 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000001c0)) signalfd4(r3, &(0x7f0000000140)={0x6}, 0x8, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000280)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0xfffffffffffffe8e, 0x20000006, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) 15:01:11 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x4, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x280, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x1ff, &(0x7f0000000140), 0xa0}}], 0xa0cbcb, 0x0) 15:01:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x27) fcntl$setstatus(r0, 0x4, 0x42801) 15:01:11 executing program 0: futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 184.882136] audit: type=1804 audit(1555599671.126:52): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir051384303/syzkaller.EdS98g/19/bus" dev="sda1" ino=16606 res=1 15:01:11 executing program 0: futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:11 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', 0x0) 15:01:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x2000, 0x1c4) ioctl$TCXONC(r2, 0x540a, 0x7ff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44ff}) getsockopt$inet6_buf(r1, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/204, 0xcc}], 0x6, 0x0) r4 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000001c0)) signalfd4(r3, &(0x7f0000000140)={0x6}, 0x8, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000280)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0xfffffffffffffe8e, 0x20000006, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) [ 185.015496] IPVS: ftp: loaded support on port[0] = 21 15:01:11 executing program 3: pipe(0x0) syz_read_part_table(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 15:01:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:11 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$sock_proto_private(r0, 0x89e0, 0x0) 15:01:11 executing program 0: futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x2000, 0x1c4) ioctl$TCXONC(r2, 0x540a, 0x7ff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44ff}) getsockopt$inet6_buf(r1, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/204, 0xcc}], 0x6, 0x0) r4 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000001c0)) signalfd4(r3, &(0x7f0000000140)={0x6}, 0x8, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000280)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0xfffffffffffffe8e, 0x20000006, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) 15:01:11 executing program 2: seccomp(0x1, 0x0, &(0x7f0000001140)={0x2, &(0x7f0000000100)=[{0x2, 0x0, 0x0, 0x8}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 185.408801] FAT-fs (loop1): bogus number of reserved sectors [ 185.434280] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 15:01:14 executing program 0: futex(&(0x7f000000cffc), 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:14 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_proto_private(r0, 0x89e0, 0x0) 15:01:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x40, &(0x7f00000000c0), 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x10000042806) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x4) 15:01:14 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 15:01:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x86, @rand_addr="0eb34da11a3049f9a99b472b8ccf6507"}, 0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2]}, 0x5c) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:01:14 executing program 0: futex(&(0x7f000000cffc), 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) [ 187.984805] FAT-fs (loop1): bogus number of reserved sectors 15:01:14 executing program 3: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa0002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 15:01:14 executing program 4: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000180)={0x0, 0x7, 0x10001, 0x2}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa0002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 188.035742] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:14 executing program 0: futex(&(0x7f000000cffc), 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 188.160812] bond0: Releasing backup interface bond_slave_1 [ 188.162084] kvm: emulating exchange as write 15:01:14 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) [ 188.203088] FAT-fs (loop1): bogus number of reserved sectors [ 188.224496] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.242596] FAT-fs (loop1): Can't find a valid FAT filesystem [ 188.256020] bond0: Releasing backup interface bond_slave_1 15:01:14 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 188.334452] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.362242] bond0: Releasing backup interface bond_slave_1 [ 188.384952] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.406004] bond0: Releasing backup interface bond_slave_1 [ 188.449746] FAT-fs (loop1): bogus number of reserved sectors [ 188.468717] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:14 executing program 2: r0 = memfd_create(&(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\xc6\x94\xd8\":\x16\xf5\xd4Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Z\x91\"\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16M\x00\x80\x00\x00\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00&m=E\xa2\x95\xbc\xbfI\x0fU\x7fj\xac', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x3) 15:01:14 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:14 executing program 3: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa0002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 188.740616] bond0: Releasing backup interface bond_slave_1 [ 188.798158] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:01:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, &(0x7f0000000400), 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 15:01:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r1, &(0x7f0000000080), 0x1c) shutdown(r1, 0x1) close(r1) 15:01:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000340)='./control\x00', 0x0) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x0) write$nbd(r1, &(0x7f0000000440), 0x10) r2 = open(&(0x7f0000000200)='./control\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000280)=""/80, 0x50) unlinkat(r2, &(0x7f0000000400)='./file0\x00', 0x0) close(r1) 15:01:15 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x0, 0x1}, 0x20) 15:01:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'\x00', {0x2, 0x4e21, @dev}}) [ 188.909861] FAT-fs (loop1): bogus number of reserved sectors [ 188.927438] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:15 executing program 2: 15:01:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:15 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000013c0)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x323) 15:01:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, &(0x7f0000000340)='\x1a\xa86\x8a\x9b\xf8]\xc5\x06c\x9a\x11e!\xad?\x9ate\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f^\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc68*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00l\x00W\xe6XT\\l\xd6J\xf2\x12\xc4\x9e\xd4\xbe8<\v\x868%l0\xa1%\xb3\x1b,g\x8d\xfa\x8dq&\xc4\xc0\x81\x9a\x91\x9e\xe3\xe6\xa6\xd8\xb80\xe4NW=\x10\x8d\xcc\xcbU\x1dg\xd9\xc5\xb1\x94\x95\x10\xe3\xe8\xa8\xbfW\x00\x16\x90o=\x80`\xe2\xd1\xb2\xac\x92\x95F\xc0\xb5$\xe3\x1f7T\xe7\xd6A\x8b\x11Qx\xa0\xa4\xa2_h\xcc\xe0\nXpo\x9f=\xa4\xff\xaf\xb4\x02P\xaa\r46X\x8b\xfb\xc7/\x8b\xa5\x06\x11\xc9\x0fl') wait4(0x0, 0x0, 0x0, 0x0) 15:01:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x0, 0x0, 0xff, 0x100000000000001}, 0x20) dup2(r0, r1) 15:01:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f, 0xffffca88}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0}}], 0x118, 0x0) 15:01:15 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000900)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9205, 0x0) [ 189.088629] ecryptfs_parse_options: eCryptfs: unrecognized option [¨6Š›ø]Åcše!­?šteéòcÎZ%š] [ 189.113759] ecryptfs_parse_options: eCryptfs: unrecognized option [¨6Š›ø]Åcše!­?šteéòcÎZ%š] [ 189.129223] FAT-fs (loop1): bogus number of reserved sectors 15:01:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x8000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c88") [ 189.144718] FAT-fs (loop1): Can't find a valid FAT filesystem [ 189.153348] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 189.173520] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README 15:01:15 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000001c0)='/delo\xff\a\x00\x00\x00\x00', 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 189.205931] Error parsing options; rc = [-22] [ 189.214022] Error parsing options; rc = [-22] 15:01:15 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00@\x00', 0x101}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x3cc6f8db}) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x100, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000180)=0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000400)={0x5, &(0x7f00000001c0)=[{0x8, 0x80}, {0x9, 0x7fffffff}, {0x7fff}, {0x2, 0xffffffffffffffdb}, {0x7fff, 0x9}]}) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) chroot(&(0x7f0000000240)='./file0\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @rand_addr, 0x3ff}, 0x1c) 15:01:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000d4164dab827d472fdb53082d5701bebf830c90f6603be2eb1d069f4645e1e1c8461640985acd29b5c1e249ca72ec5dea0000008077e2cdf2ca3a82ad34e7621d1384"], 0x49) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 15:01:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f0000000140), 0x23c) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) 15:01:15 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x400000050000}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 15:01:16 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) sendto$inet6(r2, &(0x7f00000000c0)="eabad7e5a8ae99c355b89ddf6e3815615c61f92896cd0366749bffc06245e6fdca38c3335b39ec08fb92c1f3d10b21bf905f6fb044cc509676fafb35b53295b4ae45cedd346e7308529af5372865dfccc97c4d211b13feac375138520671f81b936eb554a61506f9f37603e85d20fd4a7c42a91630bde123d75155501873962e62147cc77de6b688677fd311363c2c08ef6429f3a9fc3163165e2e31e84bc12def47c29c549f8811b7461abdf19c92f7e456d838105438f4b17d8f15bbb0a7ab2c0f027b32b98acc4b730d639d85b56faf86de797f6450764eb50461bfeedf60f940704f48d1d655a65b83bb19045824609ab833f4909d2a07", 0xf9, 0x40, 0x0, 0x0) [ 189.739192] device lo entered promiscuous mode [ 189.805255] FAT-fs (loop1): bogus number of reserved sectors [ 189.834867] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:16 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f0000000140), 0x23c) open(0x0, 0x240400, 0x0) 15:01:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00@\x00', 0x101}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x3cc6f8db}) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x100, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000180)=0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000400)={0x5, &(0x7f00000001c0)=[{0x8, 0x80}, {0x9, 0x7fffffff}, {0x7fff}, {0x2, 0xffffffffffffffdb}, {0x7fff, 0x9}]}) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) chroot(&(0x7f0000000240)='./file0\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @rand_addr, 0x3ff}, 0x1c) [ 189.991041] FAT-fs (loop1): bogus number of reserved sectors [ 190.005086] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) 15:01:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001480)={{0x2, 0x0, @local}, {0x0, @local}, 0x18, {0x2, 0x0, @remote}, 'ip6gre0\x00'}) 15:01:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000000000000000020"]}) [ 190.031576] FAT-fs (loop1): Can't find a valid FAT filesystem [ 190.054228] FAT-fs (loop3): Filesystem has been set read-only [ 190.103250] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 15:01:16 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00@\x00', 0x101}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x3cc6f8db}) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x100, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000180)=0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000400)={0x5, &(0x7f00000001c0)=[{0x8, 0x80}, {0x9, 0x7fffffff}, {0x7fff}, {0x2, 0xffffffffffffffdb}, {0x7fff, 0x9}]}) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) chroot(&(0x7f0000000240)='./file0\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @rand_addr, 0x3ff}, 0x1c) 15:01:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x4101) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x20810, r0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x800, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0xffffffffffff0d59, @ipv4={[], [], @loopback}, 0x9}, {0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x3, [0xfffffffffffffff7, 0x7, 0x11d, 0x0, 0x0, 0x9, 0x2, 0xf67]}, 0x5c) listen(r2, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 15:01:16 executing program 2: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r0) 15:01:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:16 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002bc0)=ANY=[@ANYBLOB="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"], 0x0) 15:01:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00@\x00', 0x101}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x3cc6f8db}) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x100, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000180)=0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000400)={0x5, &(0x7f00000001c0)=[{0x8, 0x80}, {0x9, 0x7fffffff}, {0x7fff}, {0x2, 0xffffffffffffffdb}, {0x7fff, 0x9}]}) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) chroot(&(0x7f0000000240)='./file0\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @rand_addr, 0x3ff}, 0x1c) [ 190.636479] FAT-fs (loop1): bogus number of reserved sectors [ 190.644129] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x98) 15:01:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:17 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000380)={0x7f}, &(0x7f0000000400)={0x0, 0x1c9c380}, 0x0) 15:01:17 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454d1, &(0x7f0000000080)) 15:01:17 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0x2, 0x0) [ 190.819371] FAT-fs (loop1): bogus number of reserved sectors [ 190.859134] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:17 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:17 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0) 15:01:17 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r0, &(0x7f0000000140)={0x1, {0x0, 0x0, 0x0}}, 0x68) 15:01:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:17 executing program 4: gettid() r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(r0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) write$vnet(0xffffffffffffffff, 0x0, 0x0) 15:01:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x0, 0x8}}) 15:01:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@remote, r1}, 0x14) 15:01:17 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 15:01:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) [ 191.576943] FAT-fs (loop1): bogus number of reserved sectors [ 191.586962] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:17 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x3, 0x0) 15:01:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:17 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x300}) [ 191.734382] FAT-fs (loop1): bogus number of reserved sectors [ 191.741191] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:18 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x4101) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x20810, r0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x800, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0xffffffffffff0d59, @ipv4={[], [], @loopback}, 0x9}, {0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x3, [0xfffffffffffffff7, 0x7, 0x11d, 0x0, 0x0, 0x9, 0x2, 0xf67]}, 0x5c) listen(r2, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 15:01:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local, 0x200}, {0xa, 0x4e22, 0x86, @rand_addr="0eb34da11a3049f9a99b472b8ccf6507", 0x10001}, 0x0, [0x6, 0x2, 0x0, 0x2, 0x200, 0x9, 0x1, 0x2]}, 0x5c) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:01:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'nr0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\r']}) 15:01:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10011, r0, 0x0) 15:01:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 192.314998] FAT-fs (loop1): bogus number of reserved sectors [ 192.326810] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:18 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141048, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 15:01:18 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 15:01:18 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000180)={0x0, 0x7, 0x10001, 0x2}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa0002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 15:01:18 executing program 4: msgget$private(0x0, 0x0) gettid() r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x3fa, 0x0) getsockname$netlink(r0, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x2, 0x2, 0x5, 0x3}, 0x800, 0xffffffffffffff7a}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f00000017c0), 0x1be, 0x0) [ 192.478112] FAT-fs (loop1): bogus number of reserved sectors [ 192.490167] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 192.567851] bond0: Releasing backup interface bond_slave_1 [ 192.654163] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 192.665608] FAT-fs (loop1): bogus number of reserved sectors [ 192.692295] bond0: Releasing backup interface bond_slave_1 [ 192.702829] FAT-fs (loop1): Can't find a valid FAT filesystem [ 192.739177] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:01:19 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:01:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x415, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 15:01:19 executing program 4: syz_open_procfs(0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:01:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x86, @rand_addr="0eb34da11a3049f9a99b472b8ccf6507"}, 0x0, [0x0, 0x2]}, 0x5c) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:01:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x86, @rand_addr="0eb34da11a3049f9a99b472b8ccf6507"}}, 0x5c) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:01:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x86, @rand_addr="0eb34da11a3049f9a99b472b8ccf6507"}, 0x0, [0x0, 0x2]}, 0x5c) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 193.234695] FAT-fs (loop1): bogus number of reserved sectors [ 193.260827] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x415, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_DUMPABLE(0x15) 15:01:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 193.424881] FAT-fs (loop1): bogus number of reserved sectors [ 193.445872] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) r2 = eventfd(0x0) unshare(0x2000400) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2}) 15:01:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x415, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r1) [ 193.674907] FAT-fs (loop1): bogus number of reserved sectors [ 193.698246] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:20 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) 15:01:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:20 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) [ 194.008873] FAT-fs (loop1): invalid media value (0x00) [ 194.039449] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080), 0x1c) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) 15:01:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local, 0x200}, {0xa, 0x4e22, 0x86, @rand_addr="0eb34da11a3049f9a99b472b8ccf6507", 0x10001}, 0x7ff, [0x0, 0x0, 0x8, 0x0, 0x200, 0x9, 0x0, 0x2]}, 0x5c) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:01:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x86, @rand_addr="0eb34da11a3049f9a99b472b8ccf6507"}, 0x0, [0x0, 0x2]}, 0x5c) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:01:20 executing program 5: creat(&(0x7f0000000180)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000180)=""/11, 0xa) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc6f") ioctl$sock_SIOCADDDLCI(r1, 0x8980, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r5, r6) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EVIOCGLED(r4, 0x80404519, 0x0) [ 194.252112] FAT-fs (loop1): invalid media value (0x00) [ 194.257640] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 194.411135] FAT-fs (loop1): invalid media value (0x00) [ 194.434011] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 194.628847] FAT-fs (loop1): invalid media value (0x00) [ 194.654095] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:21 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 194.806923] FAT-fs (loop1): invalid media value (0x00) [ 194.870185] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 195.065293] FAT-fs (loop1): invalid media value (0x00) 15:01:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x86, @rand_addr="0eb34da11a3049f9a99b472b8ccf6507"}, 0x0, [0x0, 0x2]}, 0x5c) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:01:21 executing program 4: clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x1, 0x154, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, 0x1cc) [ 195.109165] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23}, 0x10) 15:01:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:21 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 15:01:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x86, @rand_addr="0eb34da11a3049f9a99b472b8ccf6507", 0x10001}, 0x0, [0x6, 0x2, 0x8, 0x2, 0x0, 0x9, 0x1, 0x2]}, 0x5c) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 195.340782] FAT-fs (loop1): invalid media value (0x00) 15:01:21 executing program 2: gettid() ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x420100, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r1 = eventfd2(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x9}}, 0x0) write$binfmt_aout(r1, 0x0, 0xfffffffffffffef4) [ 195.379292] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:21 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = getuid() lchown(0x0, r0, 0x0) 15:01:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:21 executing program 2: r0 = gettid() listen(0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RXATTRWALK(r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) pause() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) tkill(r0, 0x1000000000016) [ 195.597152] FAT-fs (loop1): invalid media value (0x00) 15:01:21 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, 0x0, 0x0) [ 195.624348] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 195.796578] FAT-fs (loop1): invalid media value (0x00) [ 195.815073] FAT-fs (loop1): Can't find a valid FAT filesystem 15:01:22 executing program 5: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x1043, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) r2 = fcntl$dupfd(r1, 0x0, r1) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) ioctl$TCSETX(r2, 0x5433, 0x0) msgctl$IPC_RMID(r0, 0x0) 15:01:22 executing program 3: openat$dsp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000180)) add_key$user(0x0, &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000140)="739070ca48d2f8728b23ce439d436557bea5718d80", 0x15, 0xfffffffffffffffd) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f00000001c0)={0x0, 0x7fff, 0x80}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) connect$pppoe(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, {0x0, @remote, 'bond0\x00'}}, 0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0xf}}, 0x20) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000400)={'lo\x00', 0x80000001, 0x1ff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) r4 = open(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000002c0)=0x6f, 0x4) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0x0) rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) tkill(0x0, 0x21) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2321202e2f66696c6531206c6f00201c6f6e640000000026202e6465762f736e617073686f74000a1ee14f375ad945fb7a66fc25dc25cc725bbaebb337e7fdd811db606d83e42d229a118086f9282429dd9400c99b12fc042f7c3bb6b3161d5451611707d95ee77e62cf17"], 0x6b) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 15:01:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TCSETXW(r1, 0x5435, 0x0) 15:01:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='./cgroup.cpu/syz0\x00') r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) 15:01:22 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/253, 0xfd}], 0x1) 15:01:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x5, &(0x7f0000cbc000)=""/244, &(0x7f0000000340)=0xaf) 15:01:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adcf8123c129a319bd070") ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f00000001c0)=[{0x4000006}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 15:01:22 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @empty, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 15:01:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x3c) 15:01:25 executing program 2: syz_open_dev$midi(0x0, 0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc7547570ec523ca67775c5418889206e112d5c9dfb01009136a3d0d056b0a644ef730000000000000000271c0900000000000061c9ffff"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:01:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:25 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adcf8123c129a319bd070") poll(&(0x7f0000000200)=[{r0}], 0x1, 0x20) 15:01:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000001940)=0x1) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f030e80276e29e800557e2662cdf2343ac18c54ff9e44541ecdb9176ee0"], 0x1e) 15:01:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffffd, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 15:01:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x501e}) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f030e80276e29e800557e2662cdf2343ac18c54ff9e44541ecdb9176ee0"], 0x1e) 15:01:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x20202) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$P9_ROPEN(r1, &(0x7f00000001c0)={0x18}, 0x18) 15:01:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(0x0, 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186, 0x3a00, 0x2}]}) 15:01:25 executing program 0: ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffffd, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) 15:01:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x400, 0x0, 0x0, 0x300}, 0x98) r1 = dup(r0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xb2, 0x101000) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x55d80000000, 0x4000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x40104593, &(0x7f0000000000)={0x8f1ff5e4864311ce, 0x0, 0x0}) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r4) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) nanosleep(&(0x7f0000000140), &(0x7f0000000380)) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sync_file_range(r1, 0xfffffffffffffff8, 0x4, 0x4) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000004c0)={0x0, @bt={0x6, 0x5, 0x1, 0x3, 0x1f, 0x1, 0x6, 0x5, 0x5, 0x287, 0x7, 0x5, 0xfffffffffffffffb, 0x0, 0x4, 0x4}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x0, @loopback}], 0x10) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000002c0)=0x80) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000580)={0x5, 0x2, 0x0, 0x80000000, 0x12, 0x1ff, 0x641, 0x400, 0x10000, 0x20}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000740), 0x8) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r6, 0x800, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x4f9, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000300)={0x7, 0x8}) [ 199.569829] kvm [8581]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x2 15:01:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") seccomp(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000004fe8)=[{0x8000000010006, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$tipc2(0x0) 15:01:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f, 0x543}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0}}], 0x118, 0x0) 15:01:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(0x0, 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) 15:01:28 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x2}}, 0x10, 0x0}, 0x0) 15:01:28 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x400, 0x0, 0x0, 0x300}, 0x98) r1 = dup(r0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xb2, 0x101000) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x55d80000000, 0x4000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x40104593, &(0x7f0000000000)={0x8f1ff5e4864311ce, 0x0, 0x0}) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r4) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) nanosleep(&(0x7f0000000140), &(0x7f0000000380)) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sync_file_range(r1, 0xfffffffffffffff8, 0x4, 0x4) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000004c0)={0x0, @bt={0x6, 0x5, 0x1, 0x3, 0x1f, 0x1, 0x6, 0x5, 0x5, 0x287, 0x7, 0x5, 0xfffffffffffffffb, 0x0, 0x4, 0x4}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x0, @loopback}], 0x10) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000002c0)=0x80) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000580)={0x5, 0x2, 0x0, 0x80000000, 0x12, 0x1ff, 0x641, 0x400, 0x10000, 0x20}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000740), 0x8) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r6, 0x800, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x4f9, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000300)={0x7, 0x8}) 15:01:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(0x0, 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:28 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000100)=[{0x4}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) socket$inet_udplite(0x2, 0x2, 0x88) 15:01:28 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 202.184971] audit: type=1326 audit(1555599688.466:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8610 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x50000 15:01:28 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) r1 = epoll_create(0x6683) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) [ 202.268200] audit: type=1326 audit(1555599688.506:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8610 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 15:01:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 15:01:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 202.434504] audit: type=1326 audit(1555599688.506:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8610 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 [ 202.475889] audit: type=1326 audit(1555599688.506:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8610 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 [ 202.502633] audit: type=1326 audit(1555599688.506:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8610 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 [ 202.536595] audit: type=1326 audit(1555599688.506:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8610 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 [ 202.561083] audit: type=1326 audit(1555599688.506:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8610 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 [ 202.585859] audit: type=1326 audit(1555599688.506:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8610 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 15:01:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f00000000c0), 0x0) 15:01:28 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000080)=""/246) 15:01:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x100101) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14}, 0xfffffe8d) lseek(r2, 0x0, 0x4) 15:01:28 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, 0x0) 15:01:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000961a6fc000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 202.610387] audit: type=1326 audit(1555599688.506:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8610 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 [ 202.610407] audit: type=1326 audit(1555599688.516:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8610 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x458c29 code=0x50000 15:01:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x1d5) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x800000022) fcntl$setstatus(r2, 0x4, 0x142803) 15:01:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") seccomp(0x1, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000004fe8)=[{0x8000000010006, 0x0, 0x0, 0x50000}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:01:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) 15:01:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="82c700003c123d319bd070") accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x0, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="240000001e0007121dff18946f610500020000001f0000000000080008000a000400ff7e280000001100ffffd716a0aa1c0900000000000012000000000000eff24d8238cfa50223f7efbf76", 0x4c}], 0x1}, 0x0) 15:01:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)) 15:01:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/68, 0x44) [ 202.902069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:01:29 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3f00000000000000, 0x80, &(0x7f0000000200)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x180, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1, 0x0, 0x0, 'rose0\x00', 'ip6gre0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [], @link_local, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20}]}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1f8) [ 203.055106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 15:01:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/68, 0x44) [ 203.099540] ebt_limit: overflow, try lower: 0/0 15:01:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000ba6b6e00020000000000000000000000000000000c0010000100000000000000"], 0x1}}, 0x0) 15:01:29 executing program 5: 15:01:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1203}], 0x1}, 0x0) 15:01:29 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080), 0x0) 15:01:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x101}) 15:01:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/68, 0x44) 15:01:32 executing program 5: 15:01:32 executing program 3: 15:01:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'rose0\x00', 'ip_vti0\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @broadcast, [], 0xf0, 0xf0, 0x128, [@m802_3={'802_3\x00', 0x8}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x230) 15:01:32 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:01:32 executing program 5: 15:01:32 executing program 3: [ 205.812853] device lo entered promiscuous mode 15:01:32 executing program 5: 15:01:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/68, 0x44) 15:01:32 executing program 2: 15:01:32 executing program 3: [ 205.840385] xt_nfacct: accounting object with name `syz1' does not exists [ 205.866215] device lo left promiscuous mode 15:01:32 executing program 0: 15:01:32 executing program 2: 15:01:32 executing program 5: 15:01:32 executing program 3: 15:01:32 executing program 4: 15:01:32 executing program 4: 15:01:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, 0x0, 0x0) 15:01:32 executing program 0: 15:01:32 executing program 5: 15:01:32 executing program 3: 15:01:32 executing program 4: 15:01:32 executing program 2: 15:01:32 executing program 3: 15:01:32 executing program 5: 15:01:32 executing program 0: 15:01:32 executing program 4: 15:01:32 executing program 2: 15:01:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, 0x0, 0x0) 15:01:32 executing program 3: 15:01:32 executing program 0: 15:01:32 executing program 2: 15:01:32 executing program 4: 15:01:32 executing program 5: 15:01:32 executing program 3: 15:01:32 executing program 2: 15:01:32 executing program 4: 15:01:32 executing program 5: 15:01:32 executing program 0: 15:01:32 executing program 3: 15:01:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) getdents64(r0, 0x0, 0x0) 15:01:32 executing program 2: 15:01:32 executing program 4: 15:01:32 executing program 5: 15:01:32 executing program 3: 15:01:32 executing program 0: 15:01:32 executing program 2: 15:01:32 executing program 5: 15:01:33 executing program 4: 15:01:33 executing program 0: 15:01:33 executing program 3: 15:01:33 executing program 2: 15:01:33 executing program 5: 15:01:33 executing program 1: 15:01:33 executing program 4: 15:01:33 executing program 2: 15:01:33 executing program 3: 15:01:33 executing program 5: 15:01:33 executing program 0: 15:01:33 executing program 5: 15:01:33 executing program 4: 15:01:33 executing program 2: 15:01:33 executing program 1: 15:01:33 executing program 0: 15:01:33 executing program 3: 15:01:33 executing program 4: 15:01:33 executing program 5: 15:01:33 executing program 2: 15:01:33 executing program 0: 15:01:33 executing program 3: 15:01:33 executing program 1: 15:01:33 executing program 2: 15:01:33 executing program 5: 15:01:33 executing program 4: 15:01:33 executing program 0: 15:01:33 executing program 3: 15:01:33 executing program 2: 15:01:33 executing program 5: 15:01:33 executing program 1: 15:01:33 executing program 0: 15:01:33 executing program 4: 15:01:33 executing program 3: 15:01:33 executing program 5: 15:01:33 executing program 2: 15:01:33 executing program 1: 15:01:33 executing program 3: 15:01:33 executing program 0: 15:01:33 executing program 4: 15:01:33 executing program 5: 15:01:33 executing program 2: 15:01:33 executing program 0: 15:01:33 executing program 3: 15:01:33 executing program 4: 15:01:33 executing program 1: 15:01:33 executing program 2: 15:01:33 executing program 4: 15:01:33 executing program 5: 15:01:33 executing program 3: 15:01:33 executing program 0: 15:01:33 executing program 1: 15:01:33 executing program 3: 15:01:33 executing program 5: 15:01:33 executing program 0: 15:01:33 executing program 2: 15:01:33 executing program 4: 15:01:33 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) 15:01:34 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmget(0x1, 0x2000, 0x0, &(0x7f0000ff7000/0x2000)=nil) r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, 0x0, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x58}, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 15:01:34 executing program 2: 15:01:34 executing program 3: 15:01:34 executing program 0: 15:01:34 executing program 4: 15:01:34 executing program 3: 15:01:34 executing program 2: 15:01:34 executing program 0: 15:01:34 executing program 1: [ 207.793309] atomic_op ffff8880895e2640 conn xmit_atomic (null) [ 207.815593] atomic_op ffff8880a89c5cc0 conn xmit_atomic (null) 15:01:34 executing program 1: clock_gettime(0x0, &(0x7f0000000640)) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 15:01:34 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20005f) write$binfmt_elf32(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c46c2000000000000000000000002003e0000000000000000001d00000000000000000000000000200002000000000000000000000002000000000000000000000000000000db020000000000000700000000000000000000000000000000000000000000080000000000bace75"], 0x70) uselib(&(0x7f00000000c0)='./file0\x00') 15:01:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 15:01:34 executing program 5: 15:01:34 executing program 4: 15:01:34 executing program 0: 15:01:34 executing program 0: 15:01:34 executing program 4: 15:01:34 executing program 3: 15:01:34 executing program 2: 15:01:34 executing program 5: 15:01:34 executing program 4: 15:01:35 executing program 1: 15:01:35 executing program 0: 15:01:35 executing program 2: 15:01:35 executing program 5: 15:01:35 executing program 3: 15:01:35 executing program 4: 15:01:35 executing program 0: 15:01:35 executing program 1: 15:01:35 executing program 5: 15:01:35 executing program 4: 15:01:35 executing program 2: 15:01:35 executing program 3: 15:01:35 executing program 0: 15:01:35 executing program 5: 15:01:35 executing program 4: 15:01:35 executing program 1: 15:01:35 executing program 3: 15:01:35 executing program 2: 15:01:35 executing program 0: 15:01:35 executing program 5: 15:01:35 executing program 1: 15:01:35 executing program 4: 15:01:35 executing program 2: 15:01:35 executing program 4: 15:01:35 executing program 3: 15:01:35 executing program 0: 15:01:35 executing program 5: 15:01:35 executing program 1: 15:01:35 executing program 2: 15:01:35 executing program 3: 15:01:35 executing program 0: 15:01:35 executing program 5: 15:01:35 executing program 2: 15:01:35 executing program 1: 15:01:35 executing program 4: 15:01:35 executing program 0: 15:01:35 executing program 3: 15:01:35 executing program 2: 15:01:35 executing program 5: 15:01:35 executing program 1: 15:01:35 executing program 4: 15:01:35 executing program 0: 15:01:35 executing program 2: 15:01:35 executing program 1: 15:01:35 executing program 5: 15:01:35 executing program 4: 15:01:35 executing program 3: 15:01:35 executing program 0: 15:01:35 executing program 2: 15:01:35 executing program 5: 15:01:35 executing program 4: 15:01:35 executing program 1: 15:01:35 executing program 3: 15:01:35 executing program 4: 15:01:35 executing program 2: 15:01:36 executing program 5: 15:01:36 executing program 0: 15:01:36 executing program 3: 15:01:36 executing program 1: 15:01:36 executing program 2: 15:01:36 executing program 5: 15:01:36 executing program 0: 15:01:36 executing program 4: 15:01:36 executing program 1: 15:01:36 executing program 3: 15:01:36 executing program 0: 15:01:36 executing program 5: 15:01:36 executing program 2: 15:01:36 executing program 4: 15:01:36 executing program 1: 15:01:36 executing program 3: 15:01:36 executing program 0: 15:01:36 executing program 5: 15:01:36 executing program 3: 15:01:36 executing program 1: 15:01:36 executing program 2: 15:01:36 executing program 4: 15:01:36 executing program 0: 15:01:36 executing program 5: 15:01:36 executing program 3: 15:01:36 executing program 1: 15:01:36 executing program 4: 15:01:36 executing program 2: 15:01:36 executing program 3: 15:01:36 executing program 0: 15:01:36 executing program 1: 15:01:36 executing program 5: socket$bt_cmtp(0x1f, 0x3, 0x5) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') 15:01:36 executing program 4: r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, 0x0}, 0x0) close(r1) 15:01:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a19000/0x400000)=nil, 0x400000, 0x2, 0x8012, r0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 15:01:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/.pc\x00') 15:01:36 executing program 0: 15:01:36 executing program 1: 15:01:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write(r0, 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) dup2(r1, r0) 15:01:36 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/93, 0x5d) r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @empty, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 15:01:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x12, 0x1) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0xffffffffffffff5b) [ 210.384970] kauditd_printk_skb: 173 callbacks suppressed [ 210.384979] audit: type=1400 audit(1555599696.656:236): avc: denied { map } for pid=9160 comm="syz-executor.3" path="/dev/usbmon0" dev="devtmpfs" ino=14957 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usbmon_device_t:s0 tclass=chr_file permissive=1 15:01:36 executing program 1: getpid() r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xfffffef6) utime(&(0x7f0000000000)='./file1\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 15:01:36 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e", 0x23}], 0x1}, 0x0) 15:01:36 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8001) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x440000000002011, r0, 0x0) 15:01:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f0000000140), 0x23c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x240400, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, 0x0) 15:01:37 executing program 4: r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, 0x0}, 0x0) close(r1) 15:01:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x12, 0x1) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0xffffffffffffff5b) 15:01:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x12, 0x1) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0xffffffffffffff5b) 15:01:37 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8000000000000085, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) 15:01:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001580)) 15:01:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\r']}) 15:01:37 executing program 1: r0 = socket$unix(0x1, 0x801, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) fcntl$getownex(r1, 0x10, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 15:01:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x541b, 0x0) 15:01:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x12, 0x1) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0xffffffffffffff5b) 15:01:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0xaf02, 0x0) 15:01:37 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x180, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1, 0x0, 0x0, 'rose0\x00', 'ip6gre0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [], @link_local, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20}]}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1f8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 15:01:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r0, &(0x7f0000000200)={0x3260358b}, 0xfffffe23) fallocate(r0, 0x0, 0x0, 0x110001) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) [ 211.356369] ebt_limit: overflow, try lower: 0/0 15:01:38 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)=0x4) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x7f) 15:01:38 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000140)) 15:01:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, 0x0, 0x10) getsockname$llc(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41f00, 0x1, [], 0x0, 0x8, 0xffffffffffffff9c, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x8, 0x7973, 0xfff, 0xfb5}, 0x10}, 0x70) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000680), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') pipe(0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000280)={0x77359400}, 0x10) accept4$tipc(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0) socketpair(0x0, 0x0, 0x7fffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000340)=@assoc_value, &(0x7f0000000380)=0x8) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can={0x1d, 0x0, 0x3f00000000000000}, 0x200056d0, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x16f, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) 15:01:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x12, 0x1) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0xffffffffffffff5b) 15:01:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000001c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x69e}}], 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}, {0x0}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000480)=""/13, 0xd}, {&(0x7f0000000940)=""/71, 0x47}], 0x8, 0x0) 15:01:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:38 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x4) r1 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0xe30d3) 15:01:38 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}}], 0x1, 0x2, 0x0) 15:01:38 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f0000000140), 0x23c) 15:01:38 executing program 0: mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) syz_genetlink_get_family_id$ipvs(0x0) fcntl$setstatus(r0, 0x4, 0x2000) 15:01:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x207fffffff, 0xc}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:38 executing program 1: syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @empty, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 15:01:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) 15:01:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x2000, 0x1c4) ioctl$TCXONC(r2, 0x540a, 0x7ff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44ff}) getsockopt$inet6_buf(r1, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/204, 0xcc}], 0x6, 0x0) r4 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000001c0)) signalfd4(r3, &(0x7f0000000140)={0x6}, 0x8, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000280)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0xfffffffffffffe8e, 0x20000006, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) sendfile(r6, r7, 0x0, 0x8000fffffffe) 15:01:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x1, 0x180, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, 0x0, &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1, 0x0, 0x0, 'rose0\x00', 'ip6gre0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [], @link_local, [], 0xb8, 0xb8, 0xf0, [@limit={'limit\x00', 0x20}]}}, @arpreply={'arpreply\x00', 0x10}}]}]}, 0x1f8) 15:01:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x14c, 0x0, 0xffffffffffffff9f, 0x0, 0xffffff53}, 0x10000) syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x401, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x9, 0x101000) syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x10000) r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f6, &(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2000, 0x105084) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'ip6tnl0\x00', 0x2}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) lseek(r1, 0x0, 0x0) 15:01:39 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x00\x00\x00\x00H') r1 = openat$cgroup_ro(r0, &(0x7f0000001340)='mem\x00\x06\x00\x00\x00waS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bY\xaa\xf0>\x18\xed\xb0\r.8\xc9\xcb\x03t\xa7\xd0D\x04\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcfC\x91|\x05\x1aO\xb4\xf0_\xbd>\xf3[\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba}\x0e$\x16\xbcw\xff&DRYp\xb8I\xda\xa8\xee\x03\x19\xe8\xd9\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbc\xf3\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x0f\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/', 0x0, 0x0) read$rfkill(r1, 0x0, 0x11a) 15:01:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xfffffffffff3ffb3, &(0x7f0000000040)) 15:01:39 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000f33fc0), 0x0, &(0x7f0000086000), &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 15:01:39 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000100)) [ 212.958251] ebt_limit: overflow, try lower: 0/0 15:01:39 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) readv(r0, &(0x7f0000002600)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) 15:01:39 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={0xc}], 0xc}, 0x0) 15:01:39 executing program 5: 15:01:39 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='wlan0eth1{\x00') [ 213.084896] audit: type=1400 audit(1555599699.366:237): avc: denied { ioctl } for pid=9323 comm="syz-executor.4" path="socket:[35040]" dev="sockfs" ino=35040 ioctlcmd=0xffb3 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:01:39 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, 0x0) [ 213.418048] audit: type=1804 audit(1555599699.696:238): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir356418955/syzkaller.dc7f9m/97/bus" dev="sda1" ino=16792 res=1 15:01:39 executing program 2: 15:01:39 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000080)="94", 0x1, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 15:01:39 executing program 3: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={0x10, 0x1, 0x1, [r0]}], 0x10}, 0x0) 15:01:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x12, 0x1) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0xffffffffffffff5b) 15:01:39 executing program 1: 15:01:39 executing program 0: [ 213.445158] audit: type=1804 audit(1555599699.716:239): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir356418955/syzkaller.dc7f9m/97/bus" dev="sda1" ino=16792 res=1 [ 213.471773] audit: type=1804 audit(1555599699.716:240): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir356418955/syzkaller.dc7f9m/97/bus" dev="sda1" ino=16792 res=1 15:01:39 executing program 0: 15:01:39 executing program 2: 15:01:39 executing program 4: 15:01:39 executing program 1: 15:01:39 executing program 3: 15:01:39 executing program 5: 15:01:39 executing program 4: 15:01:40 executing program 2: 15:01:40 executing program 1: 15:01:40 executing program 0: 15:01:40 executing program 3: 15:01:40 executing program 4: 15:01:40 executing program 1: 15:01:40 executing program 3: 15:01:40 executing program 0: 15:01:40 executing program 2: 15:01:40 executing program 5: 15:01:40 executing program 4: 15:01:40 executing program 1: 15:01:40 executing program 0: 15:01:40 executing program 3: 15:01:40 executing program 2: 15:01:40 executing program 5: 15:01:40 executing program 4: 15:01:40 executing program 1: 15:01:40 executing program 0: 15:01:40 executing program 5: 15:01:40 executing program 3: 15:01:40 executing program 4: 15:01:40 executing program 2: 15:01:40 executing program 1: 15:01:40 executing program 0: 15:01:40 executing program 5: 15:01:40 executing program 4: 15:01:40 executing program 2: 15:01:40 executing program 3: 15:01:40 executing program 1: 15:01:40 executing program 4: 15:01:40 executing program 5: 15:01:40 executing program 0: 15:01:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000380)="cd8074fcb0b06969ef69dc00d9c4017d50ee8adcd0d011920008804164c9e380d6d300d300b5d90008087c2a0f0fccc4e3a95fd965eae23c650fb49269f1caa5408064797f41dfdf400f01ef2a9e9d7d2f2f1c0a1a63460fc4c161fccddfde9f") 15:01:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7c, 0x600000000000000, [0x40000100], [0xc2]}) 15:01:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f00000000c0)="240000001e0025eaa87865f51e86041b0004000200bf8f6fa77f8d3551b5c086ffacad6b", 0x24) 15:01:40 executing program 4: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000240)=@abs={0x1}, 0x6e) 15:01:40 executing program 0: 15:01:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 15:01:40 executing program 0: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6000, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) [ 214.415475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.438399] binder: 9464:9467 transaction failed 29189/-22, size 0-0 line 2802 15:01:40 executing program 4: r0 = socket(0x10, 0x803, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(r0, &(0x7f0000000640)={0x1f, 0x0, {0x1, 0x401, 0x0, 0x0, 0x2}}, 0xe) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xc56e452d8fc767a5, 0x0, 0x0) 15:01:40 executing program 5: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000000140)=0x90) [ 214.473822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.482579] binder: undelivered TRANSACTION_ERROR: 29189 15:01:40 executing program 0: r0 = memfd_create(&(0x7f0000000100)='#e\xa7\x82w$\x00', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="324332f5"], 0x4) sendfile(r0, r0, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) 15:01:40 executing program 3: r0 = socket(0x0, 0x803, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(r0, &(0x7f0000000640)={0x1f, 0x0, {0x1, 0x401, 0x6, 0x997700000, 0x2, 0x78}, 0x0, 0x8}, 0xe) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f00000000c0)=""/77, 0x4d}, {0x0}], 0x4, &(0x7f0000002400)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 214.577980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.613930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:01:40 executing program 1: ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000640)={0x1f, 0x0, {0x0, 0x401, 0x6, 0x0, 0x0, 0x78}}, 0xe) sched_setaffinity(0x0, 0xfffffffffffffffd, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:01:41 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x208204) r2 = open(&(0x7f0000000140)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000006000010000040000100000000000000ca0000000000000008030cec223223a008bbbfab422654167a1670383186023bba522db2638d47c98488ea0fdbd93c67993710b8d1617e74273d93d93ea401af2b1e482ffd2d9c1c"]) 15:01:41 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="280000000000000029000000020000002b07df2fd0846bc0964f4f52839844f14969f02926f1cbc4"], 0x28}}], 0x1, 0x0) 15:01:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) read$FUSE(r0, &(0x7f0000000480), 0x1000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 15:01:41 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') sendfile(r0, r1, 0x0, 0x80000008000000b) 15:01:41 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80605414, &(0x7f0000000040)) 15:01:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 215.267548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29231 sclass=netlink_route_socket pig=9509 comm=syz-executor.3 15:01:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 15:01:41 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) ioctl$sock_proto_private(r0, 0x89e0, 0x0) [ 215.314759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29231 sclass=netlink_route_socket pig=9515 comm=syz-executor.3 [ 215.327272] audit: type=1400 audit(1555599701.606:241): avc: denied { bind } for pid=9514 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 15:01:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x800) ftruncate(r1, 0x208204) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = open(&(0x7f0000000140)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r2, 0x0) ftruncate(r2, 0x4) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000006000010000040000100000000000000ca0000000000000008030cec223223a008bbbfab422654167a1670383186023bba522db2638d47c98488ea0fdbd93c67993710b8d1617e74273d93d93ea401af2b1e482ffd2d9c1c"]) 15:01:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28000000000000000000000007000000fd170f03008cbf36c4553e89a8e365b9cbd97f58f874a2b4"], 0x28}, 0x0) 15:01:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000380)="cd8074fcb0b06969ef69dc00d9c4017d50ee8adcd0d011920008804164c9e380d6d300d300b5d90008087c2a0f0fccc4e3a95fd965eae23c650fb49269f1caa5408064797f41dfdf400f01ef2a9e9d7d2f2f1c0a1a63460fc4c161fccddfde9f") 15:01:41 executing program 3: 15:01:41 executing program 2: 15:01:41 executing program 1: 15:01:42 executing program 4: 15:01:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7c, 0x600000000000000, [0x4b564d04], [0xc2]}) 15:01:42 executing program 3: 15:01:42 executing program 0: syz_execute_func(&(0x7f0000000100)="98cd8080000cf2450fad87000000218aa069d00fd1b02db5d9000022840568ea0000c483356f1d0a000000098e723b3b46ddcb0bdc8f69289bd19d670f381d6a2f251e0505483bd1d963465776c161616536400f2ff788a07a980000c4a1fae6ae34f896dce1b1ac45e22c892a8f00d8490d") 15:01:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(r0, &(0x7f0000000640)={0x1f, 0x0, {0x1, 0x401, 0x6, 0x997700000, 0x2, 0x78}, 0x0, 0x8}, 0xe) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xc56e452d8fc767a5, 0x0, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x20, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0xc4}, {&(0x7f0000000140)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 15:01:42 executing program 3: 15:01:42 executing program 0: 15:01:42 executing program 3: 15:01:42 executing program 5: 15:01:42 executing program 0: 15:01:42 executing program 4: 15:01:42 executing program 2: 15:01:42 executing program 3: 15:01:42 executing program 1: 15:01:42 executing program 4: 15:01:42 executing program 0: 15:01:42 executing program 3: 15:01:42 executing program 1: 15:01:42 executing program 2: 15:01:42 executing program 5: 15:01:42 executing program 1: 15:01:42 executing program 4: 15:01:42 executing program 2: 15:01:42 executing program 0: 15:01:42 executing program 3: 15:01:42 executing program 5: 15:01:43 executing program 2: 15:01:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet_group_source_req(r1, 0x0, 0x0, 0x0, 0x0) 15:01:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000040)="410f01f964ff0941c3c4a2c997583e46d8731266420fe2e346dc64c0e83e0f1110c442019dcc6f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r2, 0x0, 0xffffffffffffffd6, 0x20003ffc, &(0x7f0000000000)=@abs={0x1}, 0x6e) ioctl$TCSETXW(r0, 0x5435, 0x0) 15:01:43 executing program 4: 15:01:43 executing program 3: 15:01:43 executing program 5: 15:01:43 executing program 2: 15:01:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x14c, 0x0, 0xffffffffffffff9f, 0x0, 0xffffff53}, 0x10000) syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x0, 0x12600) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x101000) r0 = syz_open_dev$dspn(0x0, 0x8, 0x10000) openat$cgroup_int(r0, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007f6, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2000, 0x105084) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x2}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = memfd_create(&(0x7f00000000c0)='sit0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) lseek(r2, 0x0, 0x0) 15:01:43 executing program 4: setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x55d80000000, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) sync_file_range(0xffffffffffffffff, 0xfffffffffffffff8, 0x4, 0x4) 15:01:43 executing program 5: 15:01:43 executing program 2: 15:01:43 executing program 5: 15:01:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) syz_execute_func(&(0x7f0000000040)="410f01f9c4e1f573d50664ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110d4b842419dcccc") clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000440)={0x10, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1}}}}, 0x108) [ 216.998566] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 2, id = 0 15:01:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7c, 0x600000000000000, [0x40000021], [0xc2]}) 15:01:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xdf1b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3e8, 0x0, 0x1000000000054}, 0x98) 15:01:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7f}, 0x10) write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071010000100feffffff0800000000000000", 0x24) 15:01:43 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141048, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 15:01:43 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) poll(&(0x7f0000001240)=[{r0}], 0x1, 0x0) 15:01:43 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f000005a000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) 15:01:43 executing program 1: socket$bt_cmtp(0x1f, 0x3, 0x5) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000180)={0x0, 0x7, 0x0, 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 15:01:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0xff, 0x0, 0xfc}, 0x21) 15:01:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x3c) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fff8, 0x0, 0x820004, 0x0}, 0x2c) 15:01:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x3c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000040)='\x00') r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x20000, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fff8, 0x0, 0x820004, 0x0}, 0x2c) [ 217.757849] bond0: Releasing backup interface bond_slave_1 15:01:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f318fd070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x18}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 217.828549] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.863113] bond0: Releasing backup interface bond_slave_1 15:01:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7c, 0x600000000000000, [0x40000084], [0xc2]}) 15:01:44 executing program 1: socket$bt_cmtp(0x1f, 0x3, 0x5) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000180)={0x0, 0x7, 0x0, 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 218.032476] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:01:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x100002000, 0x0) dup2(r0, r1) 15:01:44 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) setxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) 15:01:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x3c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000040)='\x00') r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x20000, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fff8, 0x0, 0x820004, 0x0}, 0x2c) 15:01:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x4101) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x20810, r0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x800, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0xffffffffffff0d59, @ipv4={[], [], @loopback}, 0x9}, {0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x3, [0xfffffffffffffff7, 0x7, 0x11d, 0x0, 0x0, 0x9, 0x2, 0xf67]}, 0x5c) listen(r2, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r5 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 15:01:44 executing program 1: socket$bt_cmtp(0x1f, 0x3, 0x5) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000180)={0x0, 0x7, 0x0, 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 15:01:44 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 15:01:44 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 15:01:44 executing program 4: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340), 0x0) [ 218.635729] bond0: Releasing backup interface bond_slave_1 15:01:45 executing program 5: 15:01:45 executing program 0: [ 218.712614] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:01:45 executing program 3: 15:01:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7c, 0x600000000000000, [0x40000080], [0xc2]}) 15:01:45 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x4000) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) nanosleep(&(0x7f0000000140), &(0x7f0000000380)) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f00000003c0)) 15:01:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2}, 0x21) 15:01:45 executing program 5: 15:01:45 executing program 2: 15:01:45 executing program 5: 15:01:45 executing program 1: 15:01:45 executing program 0: 15:01:45 executing program 4: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340), 0x0) 15:01:45 executing program 3: 15:01:45 executing program 0: 15:01:45 executing program 1: 15:01:45 executing program 5: 15:01:45 executing program 2: 15:01:45 executing program 1: 15:01:45 executing program 3: 15:01:45 executing program 0: 15:01:45 executing program 5: 15:01:46 executing program 2: 15:01:46 executing program 0: 15:01:46 executing program 4: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340), 0x0) 15:01:46 executing program 1: 15:01:46 executing program 5: 15:01:46 executing program 3: 15:01:46 executing program 2: 15:01:46 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000380)={0x7f}, &(0x7f0000000400)={0x0, 0x1c9c380}, 0x0) 15:01:46 executing program 1: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000380)={0x7f}, &(0x7f0000000400)={0x0, 0x1c9c380}, 0x0) 15:01:46 executing program 5: 15:01:46 executing program 3: 15:01:46 executing program 2: socketpair$unix(0x1, 0xfffffffffffffffc, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sendmsg$kcm(r0, 0x0, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x629) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) perf_event_open(&(0x7f0000000940)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x200, 0x0, @perf_config_ext={0x55}, 0x10000, 0x7ff, 0x0, 0x0, 0x0, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000dff7b87d75cc9f86388e3be7348000008c173ae227d058bc3df8f590110da3fb21e47b3098a0ebef6659c4ddd900000000c6000000"], 0x39) openat$cgroup_type(r0, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) 15:01:46 executing program 4: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff81"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000340), 0x0) 15:01:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x1000041, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x103}) r3 = dup3(r2, r1, 0x0) read(r3, &(0x7f00000000c0)=""/19, 0x6a) 15:01:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x7fffffff}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:46 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000380)={0x7f}, &(0x7f0000000400)={0x0, 0x1c9c380}, 0x0) 15:01:46 executing program 4: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 15:01:46 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0xf401) 15:01:46 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x00\x00\x00\x00H') r1 = openat$cgroup_ro(r0, &(0x7f0000001340)='mem\x00\x06\x00\x00\x00waS.cur\x89\xc9B\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x857Y\xab[d\xfa\x83\xdf\xc6\xf3\xb5\xab\xbb\x98y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%Y\x1d\x90\xf3\xc8\x89\x9a.\x7fm5\xaa\b\xceo\t\xcc\x98\xb7\x18\x90\x1cM\x91\x0fzb\x85\xb5$\x86\xe4\xd9\x1bY\xaa\xf0>\x18\xed\xb0\r.8\xc9\xcb\x03t\xa7\xd0D\x04\x1d\x04$\xecAb\b\xcf\xd40\xe8qg\xc5\x18\xd1\x8f\xe6D\xa8\x00\xf6H|y\xa1\x0f\xde\xe3\xbb\'\xb1\x02\x00\xc8p\xbfQh\"\n=\x90\xf9vUo9\x85\xb3\xa9\xec\xda\xc2\x99\xbe8\x9f[*\x80\xb7%\x9d33\xb9\xc3\xf0\x11!\x11\xc3\xa5$<\xcfC\x91|\x05\x1aO\xb4\xf0_\xbd>\xf3[\xbb[\x058\x01\xf4\xca\xf4(\xab8\x87R\xc8\xe0l\xce\x930\xec\xf5\x8f\xb0%I\xb7\x7f[\\i\xfb\x96d\xa1aA\x97j\xc3\xef\xb65\xc0e\xb2%\x1f\xba}\x0e$\x16\xbcw\xff&DRYp\xb8I\xda\xa8\xee\x03\x19\xe8\xd9\x18i\xffHw\xea\x9d\x86\x0e\bl5\x945\xab\xd3\xef\x11\xbd\"\xbc\xf3\x8b\xf2.:\x8c\xe2\xb2\a\xac\x8b\x19\x80\x8b\xa3&\x19\x16\x80\xa1\x88\xbe\xc3\x0f\xf3\xb7V]\x89e\xf2D\xf6T\xc0\xb8/\xa5\x11\x15\x8cqV/', 0x0, 0x0) read$rfkill(r1, 0x0, 0x0) 15:01:46 executing program 3: syz_open_dev$audion(0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\n\x00L\xff\xff\xff\xc3`\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000003c0)={0x7, 0x7b, 0x1}, 0x7) 15:01:46 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000380)={0x7f}, &(0x7f0000000400)={0x0, 0x1c9c380}, 0x0) 15:01:46 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000000000000005071000000000001"]}) 15:01:46 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0, 0x0) 15:01:46 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1203}], 0x1}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") 15:01:47 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x4101) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x20810, r0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x800, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0xffffffffffff0d59, @ipv4={[], [], @loopback}, 0x9}, {0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x3, [0xfffffffffffffff7, 0x7, 0x11d, 0x0, 0x0, 0x9, 0x2, 0xf67]}, 0x5c) listen(r2, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 15:01:47 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 15:01:47 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b702000000001f00bfa30000000000006502000000feffff7a0af0fff8ffefff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001ffffffd404000020000000b7050000230000006a0a00fe000000008500000036000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="f8b04c6546405be394ee0da24c58", 0x0, 0x502}, 0x28) 15:01:47 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:47 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000000b7, 0x3) 15:01:47 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:47 executing program 0: r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 15:01:47 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40000, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000180)={0x0, 0x7, 0x10001, 0x2}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa0002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) 15:01:47 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/i/c\x00') 15:01:47 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@mpls_getroute={0x1b, 0x1a, 0x1}, 0x1c}}, 0x0) 15:01:47 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x2000000}, 0x2c) [ 221.093251] bond0: Releasing backup interface bond_slave_1 15:01:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) writev(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)="fa", 0x1}], 0x1) 15:01:48 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40000, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000180)={0x0, 0x7, 0x10001, 0x2}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa0002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) 15:01:48 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:48 executing program 5: recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f0000000140), 0x23c) 15:01:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:01:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) 15:01:48 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:48 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:48 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40000, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000180)={0x0, 0x7, 0x10001, 0x2}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa0002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) 15:01:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x40605414, 0x0) 15:01:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e05411, 0x0) 15:01:48 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x207fffffff}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:48 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:48 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:48 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40000, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000180)={0x0, 0x7, 0x10001, 0x2}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa0002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) 15:01:48 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:48 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) 15:01:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a19000/0x400000)=nil, 0x400000, 0x2, 0x8012, r1, 0x0) 15:01:48 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:48 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a19000/0x400000)=nil, 0x400000, 0x2, 0x8012, r0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000001180)={0x800, 0x5}) [ 222.247055] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. 15:01:48 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) 15:01:48 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 222.301360] veth1_to_bridge: FDB only supports static addresses 15:01:48 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/.pc\x00') 15:01:48 executing program 0: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 15:01:48 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:48 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000040)) 15:01:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000200)=@ethtool_cmd={0x3}}) 15:01:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a19000/0x400000)=nil, 0x400000, 0x2, 0x8012, r0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000001180)={0x800, 0x5}) 15:01:48 executing program 0: 15:01:48 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) recvmsg$kcm(r1, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:48 executing program 3: removexattr(&(0x7f0000000000)='.\x00', &(0x7f0000000040)=@known='security.apparmor\x00') 15:01:48 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f}, 0x1c}}, 0x0) 15:01:48 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 15:01:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x2000, 0x1c4) ioctl$TCXONC(r2, 0x540a, 0x7ff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44ff}) getsockopt$inet6_buf(r1, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/204, 0xcc}], 0x6, 0x0) r4 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000001c0)) signalfd4(r3, &(0x7f0000000140)={0x6}, 0x8, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000280)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0xfffffffffffffe8e, 0x20000006, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) dup3(r5, r0, 0x80000) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, 0x0, 0x8000fffffffe) 15:01:49 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:49 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') 15:01:49 executing program 2: 15:01:49 executing program 0: 15:01:49 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:49 executing program 5: 15:01:49 executing program 2: 15:01:49 executing program 0: 15:01:49 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) recvmsg$kcm(r1, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:49 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:49 executing program 5: [ 223.494610] audit: type=1804 audit(1555599709.776:242): pid=10068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir521445742/syzkaller.PWKpOh/142/bus" dev="sda1" ino=16906 res=1 15:01:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x2000, 0x1c4) ioctl$TCXONC(r2, 0x540a, 0x7ff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44ff}) getsockopt$inet6_buf(r1, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/204, 0xcc}], 0x6, 0x0) r4 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000001c0)) signalfd4(r3, &(0x7f0000000140)={0x6}, 0x8, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000280)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0xfffffffffffffe8e, 0x20000006, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) dup3(r5, r0, 0x80000) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, 0x0, 0x8000fffffffe) 15:01:49 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x4004510d, &(0x7f0000000080)={{}, {0x4}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:49 executing program 2: 15:01:49 executing program 0: 15:01:49 executing program 5: [ 223.535918] audit: type=1804 audit(1555599709.816:243): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir521445742/syzkaller.PWKpOh/142/bus" dev="sda1" ino=16906 res=1 15:01:49 executing program 0: 15:01:49 executing program 5: 15:01:49 executing program 2: 15:01:49 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, 0x0) 15:01:50 executing program 0: 15:01:50 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) recvmsg$kcm(r1, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:50 executing program 5: 15:01:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x2000, 0x1c4) ioctl$TCXONC(r2, 0x540a, 0x7ff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44ff}) getsockopt$inet6_buf(r1, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/204, 0xcc}], 0x6, 0x0) r4 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000001c0)) signalfd4(r3, &(0x7f0000000140)={0x6}, 0x8, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000280)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0xfffffffffffffe8e, 0x20000006, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) dup3(r5, r0, 0x80000) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r7, r8, 0x0, 0x8000fffffffe) 15:01:50 executing program 2: 15:01:50 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, 0x0) 15:01:50 executing program 0: 15:01:50 executing program 5: 15:01:50 executing program 2: 15:01:50 executing program 0: 15:01:50 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, 0x0) 15:01:50 executing program 5: 15:01:50 executing program 0: 15:01:51 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:51 executing program 2: 15:01:51 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:51 executing program 5: 15:01:51 executing program 0: 15:01:51 executing program 3: 15:01:51 executing program 2: 15:01:51 executing program 0: 15:01:51 executing program 5: 15:01:51 executing program 3: 15:01:51 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:51 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:51 executing program 2: 15:01:51 executing program 5: 15:01:51 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510d, &(0x7f0000000080)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 15:01:51 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:51 executing program 2: 15:01:51 executing program 0: 15:01:51 executing program 3: 15:01:51 executing program 5: 15:01:51 executing program 3: 15:01:51 executing program 4: migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x1) 15:01:51 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:51 executing program 2: shmget(0x3, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) 15:01:51 executing program 0: 15:01:51 executing program 5: 15:01:51 executing program 3: 15:01:51 executing program 2: 15:01:51 executing program 0: ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xdf1b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3e8, 0x0, 0x1000000000054}, 0x98) 15:01:51 executing program 1: socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:51 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b"], 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) 15:01:51 executing program 4: syz_execute_func(&(0x7f0000000340)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc66440fd480010000006f") clone(0x800083102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/11, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r1 = dup(r0) ioctl$EVIOCSFF(r1, 0x40304580, 0x0) 15:01:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f318fd070") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf}, 0x48) 15:01:51 executing program 2: r0 = socket$kcm(0x10, 0x1000000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="250000001d008100e00f80ecdb4cb9d91f63190408005b00000000fb120001000300000040", 0x25}], 0x1}, 0x0) 15:01:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000000)={0x7c, 0x600000000000000, [0x4000007c], [0xc2]}) 15:01:52 executing program 3: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000), 0xffd7) 15:01:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adcf8123c129a319bd070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x100002000, 0x0) dup2(r0, r1) 15:01:52 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000070007f0000000006003679"], 0x10) [ 225.908713] kvm [10241]: vcpu0, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x4000007c 15:01:52 executing program 0: r0 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="562b14e572ed4cf656f78975888661cbb22b075dd1a3342d4c7df442ce2848ba8172229dda2bd986dd59d5151f35755de648c629f90d85c40cfe504032272584ced43e4b2dd19df53959b54613615cf76027e4c2efadad5e58b9fa8bf4cee5708f6c745d2947078e115b13c50161eaa8b81a515621495d0271cbad0ae6c2e0c6e88fe5e2466e083702cca2278658040ff6ff71bdf53ea9658c0a58f60c37fab2a191075d26b9c61d68407e7074d93e07a129bb32f47661269e324e1231d4a8e15f920764e2058809213ffa122c0d5769", 0xd0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000001c0)='\x13vmnet0.\\&securitymd5sumkeyringmd5sum[\x00', &(0x7f0000000200)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0xfffffffffffffffa, 0x4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000800)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) r4 = syz_open_dev$mice(0x0, 0x0, 0x50a01) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4309(ccm(aes)))\x00'}, 0xfffffffffffffd8f) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00'}, 0x2c) r6 = semget$private(0x0, 0x3, 0x8) semctl$GETPID(r6, 0x0, 0xb, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) r8 = msgget(0x1, 0x664) getgroups(0x1, &(0x7f0000000340)=[0xffffffffffffffff]) geteuid() lstat(&(0x7f0000000540)='./file0\x00', 0x0) getpgid(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) msgctl$IPC_STAT(r8, 0x2, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}], 0x1, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0x0, 0xff}}) 15:01:52 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2d, &(0x7f00000000c0), 0x8c) 15:01:52 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adcf8123c129a319bd070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) dup2(r0, r1) 15:01:52 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) dup3(r0, r1, 0x0) 15:01:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) 15:01:52 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:52 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b"], 0x1, 0x0) msgctl$IPC_RMID(r0, 0x0) 15:01:52 executing program 4: request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz'}, 0x0, 0xfffffffffffffffe) 15:01:52 executing program 5: io_setup(0x1ff, &(0x7f00000000c0)) [ 226.537892] encrypted_key: master key parameter '!?ú, Wi' is invalid [ 226.574914] rtc_cmos 00:00: Alarms can be up to one day in the future 15:01:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0xff}, 0x21) 15:01:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) [ 226.651461] encrypted_key: master key parameter '!?ú, Wi' is invalid [ 226.696651] rtc_cmos 00:00: Alarms can be up to one day in the future 15:01:53 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r0, r1) 15:01:53 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x100) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @empty, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 15:01:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r1 = socket(0x420000000000010, 0x2, 0x0) write(r1, &(0x7f0000000100)="240000001a0099f0003be90000ed190e020808160000000000ba0080080001007f196be0", 0x24) 15:01:53 executing program 5: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x38000, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0xffd7) 15:01:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)=',!\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(r0, 0x4, 0x0) sendfile(r0, r1, 0x0, 0x80004) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:01:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0x321, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 15:01:53 executing program 0: 15:01:53 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xdf1b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3e8, 0x0, 0x1000000000054}, 0x98) 15:01:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x2000000}, 0x2c) 15:01:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000001600)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 15:01:53 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') 15:01:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 15:01:53 executing program 2: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) 15:01:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4003ff) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4006, 0x0) sendfile(r2, r2, 0x0, 0x8800000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 15:01:53 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xdf1b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3e8, 0x0, 0x1000000000054}, 0x98) 15:01:53 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40000, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000180)={0x0, 0x7, 0x10001, 0x2}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0xa0002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 227.570207] audit: type=1800 audit(1555599713.846:244): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16929 res=0 15:01:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e000000000000000000", 0x2c}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:53 executing program 3: io_setup(0x101, &(0x7f00000006c0)) 15:01:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000000000000000000200000000001"]}) 15:01:54 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) [ 227.725723] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 227.778974] bond0: Releasing backup interface bond_slave_1 [ 227.837922] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:01:54 executing program 0: r0 = gettid() listen(0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) pause() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 15:01:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x800, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1}, 0x3c) 15:01:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000100), 0x0}, 0x20) 15:01:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) accept4(r2, &(0x7f0000b17000)=@generic, 0x0, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 228.015411] audit: type=1800 audit(1555599714.296:245): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16929 res=0 15:01:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) dup2(r0, r1) 15:01:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x3c) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fff8, 0x0, 0x820004, 0x0}, 0x2c) 15:01:54 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xdf1b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3e8, 0x0, 0x1000000000054}, 0x98) 15:01:54 executing program 3: migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000040)=0x1) 15:01:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:54 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00') ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x2, 0x100, 0x1, 0x22a}, {0xa8, 0x2, 0x1, 0x8c}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='pids.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/sy\x9az1\xc9\x0f\x16\xc7|\xda$M\xc1n\x98\xa3\xa9^\xd6\x86\xc6a\xd7I\xe6\xd7d?\xc9\xb5\xf4t\x05u]1\xd7\aB\x99\xafV\xfb\xcb\xff\xb4U\x14\xe7]\xd2\xae\xe4\xac:3\x01\x91\xdd:\xce\x1bl', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 15:01:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x16, &(0x7f0000000000)) 15:01:54 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) pselect6(0x65e, &(0x7f0000f33fc0)={0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000768000)={0x8}, &(0x7f0000086000), &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 15:01:55 executing program 0: 15:01:55 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000840)='/dev/full\x00', 0x82009, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x29413db5) r1 = gettid() ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 15:01:55 executing program 4: io_setup(0x5, &(0x7f0000000040)) 15:01:55 executing program 2: 15:01:55 executing program 3: 15:01:55 executing program 3: 15:01:55 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) getgroups(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x12, 0x0, 0xff}}) 15:01:55 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000840)='/dev/full\x00', 0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000000)=0x3, 0x4) tkill(r1, 0x1000000000016) [ 228.946937] rtc_cmos 00:00: Alarms can be up to one day in the future [ 228.962507] rtc_cmos 00:00: Alarms can be up to one day in the future 15:01:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 15:01:55 executing program 0: 15:01:55 executing program 4: 15:01:55 executing program 3: 15:01:55 executing program 2: 15:01:55 executing program 0: 15:01:55 executing program 4: 15:01:55 executing program 2: 15:01:55 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") write(r0, &(0x7f0000000200)="2400000021002551075c0165ff0ffc020200000000100f0007e1000c0800100003000000", 0x24) 15:01:55 executing program 0: 15:01:55 executing program 5: 15:01:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:56 executing program 4: 15:01:56 executing program 0: 15:01:56 executing program 2: 15:01:56 executing program 3: 15:01:56 executing program 5: 15:01:56 executing program 4: 15:01:56 executing program 3: 15:01:56 executing program 5: 15:01:56 executing program 4: 15:01:56 executing program 2: 15:01:56 executing program 0: 15:01:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:57 executing program 5: 15:01:57 executing program 3: 15:01:57 executing program 4: 15:01:57 executing program 2: 15:01:57 executing program 0: 15:01:57 executing program 0: 15:01:57 executing program 4: 15:01:57 executing program 5: 15:01:57 executing program 3: 15:01:57 executing program 2: 15:01:57 executing program 5: 15:01:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:58 executing program 0: 15:01:58 executing program 4: 15:01:58 executing program 3: 15:01:58 executing program 2: 15:01:58 executing program 5: 15:01:58 executing program 4: 15:01:58 executing program 2: 15:01:58 executing program 0: 15:01:58 executing program 5: 15:01:58 executing program 3: 15:01:58 executing program 2: 15:01:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:01:59 executing program 5: 15:01:59 executing program 0: 15:01:59 executing program 4: 15:01:59 executing program 3: 15:01:59 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1e1}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x102}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 15:01:59 executing program 3: socket(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x0, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) 15:01:59 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) setitimer(0x0, 0x0, 0x0) 15:01:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x12, 0x1) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0xffffffffffffff5b) 15:01:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x82001) dup2(r0, r1) 15:01:59 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") flistxattr(r0, &(0x7f0000000140)=""/203, 0xcb) 15:01:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 233.128840] syz-executor.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 233.143905] audit: type=1326 audit(1555599719.426:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10573 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0xffff0000 15:02:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:00 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006ff000/0x2000)=nil, 0x2000, 0x0, 0x10012, r0, 0x0) 15:02:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="280000000000000000000000070000004418282c5b0f02008cbf36c4553eb9cbd97f58f874a2b4d9"], 0x28}, 0x0) 15:02:00 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000080)=[{}, {}], 0x2, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, {0x3, 0x0, 0x4, 0x6, 0x2, 0x4}}, 0x8) 15:02:00 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000080)=[{}], 0x1, 0x2) 15:02:00 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x150) r1 = gettid() write$P9_RSTAT(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) tkill(r1, 0x1000000000016) [ 233.883121] audit: type=1326 audit(1555599720.166:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10573 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0xffff0000 15:02:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlockall(0x7) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000002000000000627c05000500000000000a00000000010000ff17000000000000000000000000011700000000000000007c5a55e5b070dc33dce986c14dda882cca8b1ecca35504d96187ee7b9ffd45f45586be15fdab8978056600024286b79973811916d33ec373333f015e5927dabf6887718ca18455daea151ad3f6478842aff027f59c4e687b50ce4d7e29464c483c7a8efdc3a44d8d58745e490c5cb2d84f4d2cb66ae865fd1425f0cf053bcbc554c41866fa1ee24f5bc2e16aac3eb0a5fa55c226cf3bc2"], 0x117}}, 0x0) rt_sigreturn() sendmmsg(r0, &(0x7f0000000180), 0x400000000000238, 0x0) 15:02:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlockall(0x7) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x80000080d) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000002000020000627c05000500000000000a00000000010000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) setpriority(0x0, 0x0, 0x9) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x101003, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000340)=0x1, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB]}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') chroot(&(0x7f0000000400)='./file0\x00') rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000238, 0x0) dup(r0) r4 = socket$inet6(0xa, 0x0, 0x6) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) prctl$PR_SVE_SET_VL(0x32, 0x2ab58) 15:02:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 15:02:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adcf8123c129a319bd070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x82000, 0x0) dup2(r0, r1) 15:02:00 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006ff000/0x2000)=nil, 0x2000, 0x0, 0x10012, r0, 0x0) 15:02:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffeb8, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="0002000000000000fe8000000000bbbff1297496d984b423fd3fcc30764980c6921928f44443a96b013c83ecc8f766f0e754ff316c5dc82877c0bc66ed6ae9f379ccc382a282731fafb39c254ef6ce44a3a637bb15cfbcd55bdbe60e04beb5cdc160bda183e0f383799f71cfc7b3a784f01e0e50b85683bc2f271e4b7d8932abd74816b8cf932b91ffd812764b7d93cb4c26c4db1bb560ebc210f904babb0a946fa59e5ff7ed62d76eef6239e6a3ff1300e965649e763042064af79c24bde833081d137a49d4b0407b8bc5eb353d1274daec60419ed2313eb52b1c8bc6cf5971"], 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 234.089450] FAT-fs (loop3): bogus number of reserved sectors [ 234.114934] FAT-fs (loop3): Can't find a valid FAT filesystem [ 234.177828] FAT-fs (loop3): bogus number of reserved sectors [ 234.196886] FAT-fs (loop3): Can't find a valid FAT filesystem 15:02:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:00 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x87}, {0x80000006}]}, 0x10) 15:02:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 15:02:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) 15:02:00 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)) 15:02:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="0e721895ea4888a0a68304232c0c14fb"}, 0x1c) 15:02:01 executing program 0: setrlimit(0x7, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) 15:02:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="28000000000000000000000007000000fd170f03008cbf36c4553eb9cbd97f58f874a2b4d9e69000"], 0x28}, 0x0) 15:02:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) 15:02:01 executing program 4: r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='./file1\x00') 15:02:01 executing program 5: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fadvise64(r0, 0x7ffffffffffffffc, 0x1, 0x1000000004) 15:02:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/219, 0xdb}], 0x1, 0x0) 15:02:01 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0, 0x0) 15:02:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:01 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 15:02:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="fa91ed79fa5d8ac93b721c424fed55e5ee8ef828a8f7c60f6fe03837007238bb0c470a883c0178dc984e2993e98b7b4c89eb65a028b212c9f0b03104424b184432d17d1f76c545a3ae2f63ffaa41d7a29398739982153d3f", 0x58}], 0x1) 15:02:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="2800000000000000000000000700000007180f03008cbf36c4553eb9cbd97f58f874a2b4d9e69000"], 0x28}, 0x0) 15:02:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f0000000140), 0x23c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x240400, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000140)) 15:02:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7c, 0x600000000000000, [0x47f], [0xc2]}) 15:02:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) 15:02:01 executing program 5: 15:02:01 executing program 4: 15:02:01 executing program 5: 15:02:02 executing program 4: 15:02:02 executing program 0: 15:02:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000780)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 15:02:02 executing program 5: 15:02:02 executing program 0: 15:02:02 executing program 3: 15:02:02 executing program 0: [ 236.471292] IPVS: ftp: loaded support on port[0] = 21 15:02:03 executing program 2: 15:02:03 executing program 5: 15:02:03 executing program 4: 15:02:03 executing program 3: 15:02:03 executing program 0: 15:02:03 executing program 4: 15:02:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:03 executing program 5: 15:02:03 executing program 2: 15:02:03 executing program 3: 15:02:03 executing program 0: 15:02:03 executing program 4: 15:02:03 executing program 0: 15:02:03 executing program 4: 15:02:03 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7f}, 0x10) write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071010000100feffffff0800000000000000", 0x24) 15:02:03 executing program 5: 15:02:03 executing program 2: 15:02:03 executing program 4: 15:02:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:04 executing program 3: 15:02:04 executing program 5: 15:02:04 executing program 2: 15:02:04 executing program 0: 15:02:04 executing program 4: 15:02:04 executing program 3: 15:02:04 executing program 4: 15:02:04 executing program 0: 15:02:04 executing program 2: 15:02:04 executing program 5: r0 = socket(0xa, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x06\x01k\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000000)={'bridge0\x00', 0xfffffffffffffffd}) 15:02:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:04 executing program 3: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000), 0xffd7) 15:02:04 executing program 0: 15:02:04 executing program 4: 15:02:04 executing program 2: [ 238.280854] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.287978] bridge0: port 1(bridge_slave_0) entered disabled state 15:02:04 executing program 2: 15:02:04 executing program 0: 15:02:04 executing program 4: 15:02:04 executing program 3: [ 238.415621] ýÿ: renamed from bridge0 15:02:04 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @empty=[0x7, 0x4, 0x3000000, 0x8906, 0x0, 0xb00000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, "e57049", 0x0, "cd98e8"}}}}}}, 0x0) 15:02:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x0, 0x3}, 0x0) 15:02:04 executing program 5: r0 = socket(0xa, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x06\x01k\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000000)={'bridge0\x00', 0xfffffffffffffffd}) 15:02:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:05 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x800, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x1}, 0x3c) 15:02:05 executing program 4: 15:02:05 executing program 2: 15:02:05 executing program 0: 15:02:05 executing program 5: r0 = socket(0xa, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x06\x01k\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000000)={'bridge0\x00', 0xfffffffffffffffd}) 15:02:05 executing program 4: 15:02:05 executing program 0: 15:02:05 executing program 2: 15:02:05 executing program 3: 15:02:05 executing program 2: 15:02:05 executing program 4: 15:02:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:06 executing program 0: 15:02:06 executing program 5: r0 = socket(0xa, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x06\x01k\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000000)={'bridge0\x00', 0xfffffffffffffffd}) 15:02:06 executing program 3: 15:02:06 executing program 2: 15:02:06 executing program 4: 15:02:06 executing program 0: 15:02:06 executing program 3: 15:02:06 executing program 4: 15:02:06 executing program 2: 15:02:06 executing program 2: 15:02:06 executing program 4: 15:02:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:07 executing program 0: 15:02:07 executing program 3: 15:02:07 executing program 5: 15:02:07 executing program 4: 15:02:07 executing program 2: 15:02:07 executing program 5: 15:02:07 executing program 4: 15:02:07 executing program 3: 15:02:07 executing program 0: 15:02:07 executing program 2: 15:02:07 executing program 3: 15:02:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:08 executing program 4: 15:02:08 executing program 0: 15:02:08 executing program 5: 15:02:08 executing program 2: 15:02:08 executing program 3: 15:02:08 executing program 0: 15:02:08 executing program 4: 15:02:08 executing program 2: 15:02:08 executing program 3: 15:02:08 executing program 5: 15:02:08 executing program 5: 15:02:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:08 executing program 0: 15:02:08 executing program 2: 15:02:08 executing program 3: 15:02:08 executing program 4: 15:02:08 executing program 5: semop(0x0, &(0x7f0000000000)=[{0x0, 0x1}], 0x1) 15:02:09 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000400)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "6aa1a0", 0x14, 0x0, 0x0, @loopback, @empty, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:02:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}}) dup2(r0, r1) 15:02:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300), 0xffffffffffffff5b) 15:02:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 15:02:09 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='e'], 0x1) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 15:02:09 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000400)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "6aa1a0", 0x14, 0x0, 0x0, @loopback, @empty, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:02:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffff", 0x21}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xb6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 15:02:09 executing program 5: semop(0x0, &(0x7f0000000080)=[{}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x0, 0x1}], 0x1) 15:02:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300), 0xffffffffffffff5b) 15:02:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev, 0x5}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 15:02:09 executing program 0: semop(0x0, &(0x7f0000000080)=[{0x4}, {0x0, 0xffffffff}], 0x2) semop(0x0, &(0x7f0000000000)=[{0x0, 0x1}], 0x1) 15:02:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000100), 0x0, 0x2}, 0x20) 15:02:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) close(0xffffffffffffffff) seccomp(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x10200000006}]}) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 15:02:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x2000, 0x1c4) ioctl$TCXONC(r2, 0x540a, 0x7ff) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44ff}) getsockopt$inet6_buf(r1, 0x29, 0x1f, &(0x7f00000000c0)=""/150, &(0x7f0000000000)=0x96) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000002900)='/dev/null\x00', 0x80000, 0x0) preadv(r3, &(0x7f0000002700)=[{&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/204, 0xcc}], 0x6, 0x0) r4 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000002c0), 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000001c0)) signalfd4(r3, &(0x7f0000000140)={0x6}, 0x8, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000280)=0x7f, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0xfffffffffffffe8e, 0x20000006, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) dup3(r5, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) getrandom(&(0x7f0000000400)=""/28, 0x1c, 0x3) ptrace$getsig(0x4202, 0x0, 0x8001, &(0x7f0000002780)) readahead(r5, 0x7, 0xc0) gettid() sendfile(r7, r8, 0x0, 0x8000fffffffe) write$eventfd(r5, 0x0, 0x0) 15:02:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() mlockall(0x7) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000002000020000627c05000500000000000a00000000010000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) rt_sigreturn() ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000238, 0x0) dup(r0) 15:02:10 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x87) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 15:02:10 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) prctl$PR_SET_THP_DISABLE(0x2b, 0x0) 15:02:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffff", 0x21}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:10 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 15:02:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@mpls_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 15:02:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000a40)=""/11, 0xb}], 0x2}}], 0x48}, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{&(0x7f0000000180)=@xdp, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/183}, {&(0x7f0000000040)=""/28}, {&(0x7f00000002c0)=""/127}, {&(0x7f0000000340)=""/85}, {&(0x7f00000003c0)=""/63}, {&(0x7f0000000400)=""/141}, {&(0x7f00000004c0)=""/36}, {&(0x7f0000000500)=""/234}], 0x0, &(0x7f0000000680)=""/98}}], 0x524, 0x0, 0x0) 15:02:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0xc0f85403, &(0x7f0000000040)) 15:02:10 executing program 0: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc7547570ec523ca67775c5418889206e112d5c9dfb01009136a3d0d056b0a644ef730000000000000000271c0900000000000061c900ef"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:02:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a19000/0x400000)=nil, 0x400000, 0x2, 0x8012, r1, 0x0) 15:02:10 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) [ 244.606460] audit: type=1804 audit(1555599730.886:248): pid=11035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir356418955/syzkaller.dc7f9m/198/bus" dev="sda1" ino=17107 res=1 15:02:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socket$inet_udplite(0x2, 0x2, 0x88) 15:02:10 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0), 0xff6e) 15:02:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r1, &(0x7f000000ac80), 0x400000000000254, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 15:02:10 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b"], 0x1, 0x0) msgctl$IPC_RMID(r0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) [ 244.634412] audit: type=1804 audit(1555599730.906:249): pid=11035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir356418955/syzkaller.dc7f9m/198/bus" dev="sda1" ino=17107 res=1 [ 244.687397] audit: type=1804 audit(1555599730.906:250): pid=11035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir356418955/syzkaller.dc7f9m/198/bus" dev="sda1" ino=17107 res=1 15:02:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffff", 0x21}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:11 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) mincore(&(0x7f00009da000/0x2000)=nil, 0x2000, 0x0) 15:02:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socket$inet_udplite(0x2, 0x2, 0x88) 15:02:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7c, 0x600000000000000, [0x9e], [0xc2]}) 15:02:11 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) 15:02:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0xffffffff) 15:02:13 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x69c4}) 15:02:13 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xffffff09) fallocate(r1, 0x3, 0x10000, 0xfffe) 15:02:13 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='devpts\x00Vh\xd2p!s\n@ha\xae\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\x00\xcen\bC \x81', 0x0, 0x0) 15:02:13 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{}]}, 0x8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x8) 15:02:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e00000000", 0x27}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff", 0x22}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:13 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f0000000000), 0xffd7) 15:02:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x1007a00, 0x0) setxattr$security_smack_entry(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64IPOUT\x00', &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x12, 0x1) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300)=0x5, 0xffffffffffffff5b) 15:02:13 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000080)='\x00', 0x1, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 15:02:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, [0x2]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 15:02:14 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000000740)={0x8, "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", 0x1000}, 0x1006) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) fcntl$setstatus(r1, 0x4, 0x4400) sendfile(r0, r1, 0x0, 0x8000fffffffe) 15:02:14 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000007000/0x2000)=nil, 0x2000, 0xa) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_getroute={0x1c, 0x1a, 0x201, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x100}, [""]}, 0x1c}}, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setstatus(r1, 0x4, 0x0) 15:02:14 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xffffffffffffff4a) [ 247.814127] audit: type=1804 audit(1555599734.096:251): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir356418955/syzkaller.dc7f9m/203/bus" dev="sda1" ino=17140 res=1 [ 247.999713] audit: type=1804 audit(1555599734.276:252): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir356418955/syzkaller.dc7f9m/203/bus" dev="sda1" ino=17140 res=1 15:02:14 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) read$FUSE(r0, &(0x7f0000000280), 0x1000) 15:02:14 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) 15:02:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0xffffffffffffff4a) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, 0x0) 15:02:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'], 0x1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) [ 248.286666] [ 248.288325] ====================================================== [ 248.294642] WARNING: possible circular locking dependency detected [ 248.300991] 4.14.112 #2 Not tainted [ 248.304611] ------------------------------------------------------ [ 248.310928] syz-executor.3/11179 is trying to acquire lock: [ 248.316637] (&event->child_mutex){+.+.}, at: [] perf_event_read_value+0x7a/0x410 [ 248.325919] [ 248.325919] but task is already holding lock: [ 248.331869] (&cpuctx_mutex){+.+.}, at: [] perf_event_ctx_lock_nested+0x150/0x2c0 [ 248.341054] [ 248.341054] which lock already depends on the new lock. [ 248.341054] [ 248.349378] [ 248.349378] the existing dependency chain (in reverse order) is: [ 248.356997] [ 248.356997] -> #5 (&cpuctx_mutex){+.+.}: [ 248.362544] lock_acquire+0x16f/0x430 [ 248.366853] __mutex_lock+0xe8/0x1470 [ 248.371178] mutex_lock_nested+0x16/0x20 [ 248.375748] perf_event_init_cpu+0xc2/0x170 [ 248.380718] perf_event_init+0x2d8/0x31a [ 248.385319] start_kernel+0x3b9/0x700 [ 248.389623] x86_64_start_reservations+0x29/0x2b [ 248.394900] x86_64_start_kernel+0x77/0x7b [ 248.399679] secondary_startup_64+0xa5/0xb0 [ 248.400736] kobject: 'loop1' (ffff8880a49197a0): kobject_uevent_env [ 248.404517] [ 248.404517] -> #4 (pmus_lock){+.+.}: [ 248.415259] kobject: 'loop1' (ffff8880a49197a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 248.416138] lock_acquire+0x16f/0x430 [ 248.416147] __mutex_lock+0xe8/0x1470 15:02:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff", 0x22}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:14 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x44000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15:02:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) [ 248.416158] mutex_lock_nested+0x16/0x20 [ 248.438937] perf_event_init_cpu+0x2f/0x170 [ 248.443793] cpuhp_invoke_callback+0x1ec/0x1ac0 [ 248.448997] _cpu_up+0x228/0x530 [ 248.452891] do_cpu_up+0x121/0x150 [ 248.456948] cpu_up+0x1b/0x20 [ 248.460557] smp_init+0x157/0x173 [ 248.464513] kernel_init_freeable+0x30e/0x538 [ 248.469523] kernel_init+0x12/0x162 [ 248.473663] ret_from_fork+0x3a/0x50 [ 248.477876] [ 248.477876] -> #3 (cpu_hotplug_lock.rw_sem){++++}: [ 248.484280] lock_acquire+0x16f/0x430 [ 248.488675] cpus_read_lock+0x3d/0xc0 [ 248.493005] static_key_slow_inc+0x13/0x30 [ 248.497757] tracepoint_probe_register_prio+0x4dc/0x6d0 [ 248.501199] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.503642] tracepoint_probe_register+0x2b/0x40 [ 248.503652] trace_event_reg+0x277/0x330 [ 248.503661] perf_trace_init+0x450/0xaa0 [ 248.503670] perf_tp_event_init+0x7d/0xf0 [ 248.503684] perf_try_init_event+0x170/0x210 [ 248.512466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.515551] perf_event_alloc.part.0+0xd48/0x2540 [ 248.515561] SYSC_perf_event_open+0xa2d/0x24c0 [ 248.515568] SyS_perf_event_open+0x34/0x40 [ 248.515588] do_syscall_64+0x1eb/0x630 [ 248.523672] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 248.527968] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.527972] [ 248.527972] -> #2 (tracepoints_mutex){+.+.}: [ 248.527991] lock_acquire+0x16f/0x430 [ 248.528005] __mutex_lock+0xe8/0x1470 [ 248.538338] caif:caif_disconnect_client(): nothing to disconnect [ 248.540561] mutex_lock_nested+0x16/0x20 [ 248.540572] tracepoint_probe_register_prio+0x36/0x6d0 [ 248.540585] tracepoint_probe_register+0x2b/0x40 [ 248.540594] trace_event_reg+0x277/0x330 [ 248.540602] perf_trace_init+0x450/0xaa0 [ 248.540611] perf_tp_event_init+0x7d/0xf0 [ 248.540622] perf_try_init_event+0x170/0x210 [ 248.635453] perf_event_alloc.part.0+0xd48/0x2540 [ 248.640830] SYSC_perf_event_open+0xa2d/0x24c0 [ 248.645949] SyS_perf_event_open+0x34/0x40 [ 248.650700] do_syscall_64+0x1eb/0x630 [ 248.655104] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.660809] [ 248.660809] -> #1 (event_mutex){+.+.}: [ 248.666204] lock_acquire+0x16f/0x430 [ 248.670540] __mutex_lock+0xe8/0x1470 [ 248.674868] mutex_lock_nested+0x16/0x20 [ 248.679448] perf_trace_destroy+0x28/0x100 [ 248.684212] tp_perf_event_destroy+0x16/0x20 [ 248.689133] _free_event+0x332/0xe70 [ 248.693363] free_event+0x38/0x50 [ 248.697352] perf_event_release_kernel+0x364/0x7a0 [ 248.702788] perf_release+0x37/0x50 [ 248.706919] __fput+0x277/0x7a0 [ 248.710718] ____fput+0x16/0x20 [ 248.714513] task_work_run+0x119/0x190 [ 248.718913] exit_to_usermode_loop+0x1da/0x220 [ 248.723999] do_syscall_64+0x4a9/0x630 [ 248.728389] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.734106] [ 248.734106] -> #0 (&event->child_mutex){+.+.}: [ 248.740182] __lock_acquire+0x2c89/0x45e0 [ 248.744832] lock_acquire+0x16f/0x430 [ 248.749135] __mutex_lock+0xe8/0x1470 [ 248.753434] mutex_lock_nested+0x16/0x20 [ 248.758015] perf_event_read_value+0x7a/0x410 [ 248.763032] perf_read+0x407/0x810 [ 248.767084] __vfs_read+0x107/0x6b0 [ 248.771218] vfs_read+0x137/0x350 [ 248.775193] SyS_read+0xb8/0x180 [ 248.779065] do_syscall_64+0x1eb/0x630 [ 248.783483] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.789179] [ 248.789179] other info that might help us debug this: [ 248.789179] [ 248.797305] Chain exists of: [ 248.797305] &event->child_mutex --> pmus_lock --> &cpuctx_mutex [ 248.797305] [ 248.807976] Possible unsafe locking scenario: [ 248.807976] [ 248.814014] CPU0 CPU1 [ 248.818663] ---- ---- [ 248.823304] lock(&cpuctx_mutex); [ 248.826820] lock(pmus_lock); [ 248.832514] lock(&cpuctx_mutex); [ 248.838555] lock(&event->child_mutex); [ 248.842597] [ 248.842597] *** DEADLOCK *** [ 248.842597] [ 248.848639] 1 lock held by syz-executor.3/11179: [ 248.853368] #0: (&cpuctx_mutex){+.+.}, at: [] perf_event_ctx_lock_nested+0x150/0x2c0 [ 248.862978] [ 248.862978] stack backtrace: [ 248.867465] CPU: 0 PID: 11179 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 248.874453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.883794] Call Trace: [ 248.886368] dump_stack+0x138/0x19c [ 248.889973] ? vprintk_func+0x65/0x159 [ 248.893845] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 248.899201] __lock_acquire+0x2c89/0x45e0 [ 248.903337] ? __lock_acquire+0x5f9/0x45e0 [ 248.907554] ? finish_task_switch+0x178/0x660 [ 248.912037] ? trace_hardirqs_on+0x10/0x10 [ 248.916254] ? finish_task_switch+0x178/0x660 [ 248.920729] ? finish_task_switch+0x14d/0x660 [ 248.925206] lock_acquire+0x16f/0x430 [ 248.928998] ? perf_event_read_value+0x7a/0x410 [ 248.933660] ? perf_event_read_value+0x7a/0x410 [ 248.938339] __mutex_lock+0xe8/0x1470 [ 248.942119] ? perf_event_read_value+0x7a/0x410 [ 248.946775] ? __mutex_lock+0x36a/0x1470 [ 248.950828] ? trace_hardirqs_on+0x10/0x10 [ 248.955056] ? perf_event_read_value+0x7a/0x410 [ 248.959718] ? mutex_trylock+0x1c0/0x1c0 [ 248.963758] ? mutex_trylock+0x1c0/0x1c0 [ 248.967808] ? find_held_lock+0x35/0x130 [ 248.971872] ? perf_event_ctx_lock_nested+0x119/0x2c0 [ 248.977055] mutex_lock_nested+0x16/0x20 [ 248.981098] ? mutex_lock_nested+0x16/0x20 [ 248.985326] perf_event_read_value+0x7a/0x410 [ 248.989808] ? mutex_lock_nested+0x16/0x20 [ 248.994031] ? perf_event_ctx_lock_nested+0x248/0x2c0 [ 248.999216] perf_read+0x407/0x810 [ 249.002740] ? __perf_read_group_add+0x680/0x680 [ 249.007492] ? trace_hardirqs_on+0x10/0x10 [ 249.011720] ? selinux_is_enabled+0x9/0x50 [ 249.015977] ? creds_are_invalid+0x48/0x110 [ 249.020290] ? fsnotify+0x933/0x11e0 [ 249.023988] __vfs_read+0x107/0x6b0 [ 249.027635] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 249.034302] ? __perf_read_group_add+0x680/0x680 [ 249.039058] ? vfs_copy_file_range+0xa40/0xa40 [ 249.043802] ? selinux_file_permission+0x85/0x480 [ 249.048766] ? security_file_permission+0x8f/0x1f0 [ 249.053690] ? rw_verify_area+0xea/0x2b0 [ 249.057754] vfs_read+0x137/0x350 [ 249.061205] SyS_read+0xb8/0x180 [ 249.064600] ? kernel_write+0x120/0x120 [ 249.068596] ? do_syscall_64+0x53/0x630 [ 249.072586] ? kernel_write+0x120/0x120 [ 249.076562] do_syscall_64+0x1eb/0x630 [ 249.080450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.085298] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.090477] RIP: 0033:0x458c29 [ 249.093658] RSP: 002b:00007f6072544c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.101376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 249.108918] RDX: 0000000000001000 RSI: 0000000020000280 RDI: 0000000000000003 [ 249.116190] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 249.123474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f60725456d4 [ 249.130825] R13: 00000000004c5a84 R14: 00000000004d9f20 R15: 00000000ffffffff 15:02:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:02:15 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045104, 0x0) 15:02:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b0000001c008104e00f80ecdb4cb90402c804a012000000020090", 0x1b}], 0x1}, 0x0) [ 249.141251] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 249.153238] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 249.164814] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 249.171646] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 249.178155] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' 15:02:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x4101) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x20810, r0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x800, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0xffffffffffff0d59, @ipv4={[], [], @loopback}, 0x9}, {0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x3, [0xfffffffffffffff7, 0x7, 0x11d, 0x0, 0x0, 0x9, 0x2, 0xf67]}, 0x5c) listen(r2, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 249.179561] chnl_net:chnl_net_open(): state disconnected [ 249.179572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.200259] kobject: 'kvm' (ffff8880a6e222d0): kobject_uevent_env [ 249.219116] kobject: 'kvm' (ffff8880a6e222d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' 15:02:15 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) write$vnet(0xffffffffffffffff, 0x0, 0x0) 15:02:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff", 0x22}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) [ 249.240194] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 249.251890] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 249.265114] kobject: 'kvm' (ffff8880a6e222d0): kobject_uevent_env [ 249.283644] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env 15:02:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) [ 249.291902] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 249.304118] kobject: 'kvm' (ffff8880a6e222d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 249.316506] kobject: 'loop1' (ffff8880a49197a0): kobject_uevent_env [ 249.327804] kobject: 'loop1' (ffff8880a49197a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 249.348831] kobject: 'kvm' (ffff8880a6e222d0): kobject_uevent_env [ 249.349946] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 249.360136] kobject: 'kvm' (ffff8880a6e222d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 249.366907] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 249.381830] kobject: 'kvm' (ffff8880a6e222d0): kobject_uevent_env 15:02:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) [ 249.392576] kobject: 'kvm' (ffff8880a6e222d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' 15:02:15 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r0) [ 249.423712] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 249.436314] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 249.456412] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 249.462942] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 249.780189] IPVS: ftp: loaded support on port[0] = 21 [ 250.091662] kobject: 'lo' (ffff8880736471b0): kobject_add_internal: parent: 'net', set: 'devices' [ 250.101616] kobject: 'lo' (ffff8880736471b0): kobject_uevent_env [ 250.107792] kobject: 'lo' (ffff8880736471b0): fill_kobj_path: path = '/devices/virtual/net/lo' [ 250.116879] kobject: 'queues' (ffff88809fa57e48): kobject_add_internal: parent: 'lo', set: '' [ 250.126125] kobject: 'queues' (ffff88809fa57e48): kobject_uevent_env [ 250.133162] kobject: 'queues' (ffff88809fa57e48): kobject_uevent_env: filter function caused the event to drop! [ 250.143734] kobject: 'loop1' (ffff8880a49197a0): kobject_uevent_env [ 250.150096] kobject: 'rx-0' (ffff888073398550): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.150255] kobject: 'loop1' (ffff8880a49197a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 250.159946] kobject: 'rx-0' (ffff888073398550): kobject_uevent_env [ 250.178114] kobject: 'rx-0' (ffff888073398550): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 250.189177] kobject: 'tx-0' (ffff88809ff5aad8): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.199204] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 250.201019] kobject: 'tx-0' (ffff88809ff5aad8): kobject_uevent_env [ 250.205718] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 250.213473] kobject: 'tx-0' (ffff88809ff5aad8): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 250.234664] kobject: 'tunl0' (ffff88809b85d470): kobject_add_internal: parent: 'net', set: 'devices' [ 250.244499] kobject: 'tunl0' (ffff88809b85d470): kobject_uevent_env [ 250.251004] kobject: 'tunl0' (ffff88809b85d470): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 250.260505] kobject: 'queues' (ffff8880a0c08848): kobject_add_internal: parent: 'tunl0', set: '' [ 250.269975] kobject: 'queues' (ffff8880a0c08848): kobject_uevent_env [ 250.276537] kobject: 'queues' (ffff8880a0c08848): kobject_uevent_env: filter function caused the event to drop! [ 250.286819] kobject: 'rx-0' (ffff8880a8fa5a90): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.296256] kobject: 'rx-0' (ffff8880a8fa5a90): kobject_uevent_env [ 250.302635] kobject: 'rx-0' (ffff8880a8fa5a90): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 250.313336] kobject: 'tx-0' (ffff888065c25a98): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.322844] kobject: 'tx-0' (ffff888065c25a98): kobject_uevent_env [ 250.329178] kobject: 'tx-0' (ffff888065c25a98): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 250.340197] kobject: 'gre0' (ffff88805885f3f0): kobject_add_internal: parent: 'net', set: 'devices' [ 250.349826] kobject: 'gre0' (ffff88805885f3f0): kobject_uevent_env [ 250.356195] kobject: 'gre0' (ffff88805885f3f0): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 250.365557] kobject: 'queues' (ffff8880939bd248): kobject_add_internal: parent: 'gre0', set: '' [ 250.374977] kobject: 'queues' (ffff8880939bd248): kobject_uevent_env [ 250.381492] kobject: 'queues' (ffff8880939bd248): kobject_uevent_env: filter function caused the event to drop! [ 250.391931] kobject: 'rx-0' (ffff888091976d90): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.401384] kobject: 'rx-0' (ffff888091976d90): kobject_uevent_env [ 250.407728] kobject: 'rx-0' (ffff888091976d90): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 250.418193] kobject: 'tx-0' (ffff88809bae2058): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.427663] kobject: 'tx-0' (ffff88809bae2058): kobject_uevent_env [ 250.434030] kobject: 'tx-0' (ffff88809bae2058): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 250.444991] kobject: 'gretap0' (ffff88807bed4630): kobject_add_internal: parent: 'net', set: 'devices' [ 250.455037] kobject: 'gretap0' (ffff88807bed4630): kobject_uevent_env [ 250.461648] kobject: 'gretap0' (ffff88807bed4630): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 250.471597] kobject: 'queues' (ffff8880939bd048): kobject_add_internal: parent: 'gretap0', set: '' [ 250.481258] kobject: 'queues' (ffff8880939bd048): kobject_uevent_env [ 250.487842] kobject: 'queues' (ffff8880939bd048): kobject_uevent_env: filter function caused the event to drop! [ 250.498136] kobject: 'rx-0' (ffff8880a94dd9d0): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.507707] kobject: 'rx-0' (ffff8880a94dd9d0): kobject_uevent_env [ 250.514117] kobject: 'rx-0' (ffff8880a94dd9d0): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 250.524801] kobject: 'tx-0' (ffff88809eaefcd8): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.534333] kobject: 'tx-0' (ffff88809eaefcd8): kobject_uevent_env [ 250.540822] kobject: 'tx-0' (ffff88809eaefcd8): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 250.551984] kobject: 'batman_adv' (ffff8880a4c99300): kobject_add_internal: parent: 'gretap0', set: '' [ 250.562281] kobject: 'erspan0' (ffff8880998f4830): kobject_add_internal: parent: 'net', set: 'devices' [ 250.572463] kobject: 'erspan0' (ffff8880998f4830): kobject_uevent_env [ 250.579056] kobject: 'erspan0' (ffff8880998f4830): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 250.588997] kobject: 'queues' (ffff88809fff5c48): kobject_add_internal: parent: 'erspan0', set: '' [ 250.598653] kobject: 'queues' (ffff88809fff5c48): kobject_uevent_env [ 250.605171] kobject: 'queues' (ffff88809fff5c48): kobject_uevent_env: filter function caused the event to drop! [ 250.615465] kobject: 'rx-0' (ffff88809f690d90): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.624905] kobject: 'rx-0' (ffff88809f690d90): kobject_uevent_env [ 250.631265] kobject: 'rx-0' (ffff88809f690d90): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 250.642017] kobject: 'tx-0' (ffff88807660fad8): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.651577] kobject: 'tx-0' (ffff88807660fad8): kobject_uevent_env [ 250.657915] kobject: 'tx-0' (ffff88807660fad8): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 250.669292] kobject: 'batman_adv' (ffff888096e43700): kobject_add_internal: parent: 'erspan0', set: '' [ 250.679778] kobject: 'ip_vti0' (ffff888072ce0a30): kobject_add_internal: parent: 'net', set: 'devices' [ 250.690165] kobject: 'ip_vti0' (ffff888072ce0a30): kobject_uevent_env [ 250.696933] kobject: 'ip_vti0' (ffff888072ce0a30): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 250.707037] kobject: 'queues' (ffff88809fc62a48): kobject_add_internal: parent: 'ip_vti0', set: '' [ 250.717292] kobject: 'queues' (ffff88809fc62a48): kobject_uevent_env [ 250.725870] kobject: 'queues' (ffff88809fc62a48): kobject_uevent_env: filter function caused the event to drop! [ 250.736222] kobject: 'rx-0' (ffff88808ab03190): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.745729] kobject: 'rx-0' (ffff88808ab03190): kobject_uevent_env [ 250.752129] kobject: 'rx-0' (ffff88808ab03190): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 250.763509] kobject: 'tx-0' (ffff888066cb6818): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.773044] kobject: 'tx-0' (ffff888066cb6818): kobject_uevent_env [ 250.779379] kobject: 'tx-0' (ffff888066cb6818): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 250.790701] kobject: 'ip6_vti0' (ffff888085612ef0): kobject_add_internal: parent: 'net', set: 'devices' [ 250.801290] kobject: 'ip6_vti0' (ffff888085612ef0): kobject_uevent_env [ 250.807970] kobject: 'ip6_vti0' (ffff888085612ef0): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0' [ 250.818071] kobject: 'queues' (ffff88809bc9a348): kobject_add_internal: parent: 'ip6_vti0', set: '' [ 250.836675] kobject: 'queues' (ffff88809bc9a348): kobject_uevent_env [ 250.843213] kobject: 'queues' (ffff88809bc9a348): kobject_uevent_env: filter function caused the event to drop! [ 250.853495] kobject: 'rx-0' (ffff88807da896d0): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.862981] kobject: 'rx-0' (ffff88807da896d0): kobject_uevent_env [ 250.869334] kobject: 'rx-0' (ffff88807da896d0): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0' [ 250.880150] kobject: 'tx-0' (ffff88809c04b318): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.889616] kobject: 'tx-0' (ffff88809c04b318): kobject_uevent_env [ 250.895979] kobject: 'tx-0' (ffff88809c04b318): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/tx-0' [ 250.907294] kobject: 'sit0' (ffff88806288f070): kobject_add_internal: parent: 'net', set: 'devices' [ 250.917108] kobject: 'sit0' (ffff88806288f070): kobject_uevent_env [ 250.923567] kobject: 'sit0' (ffff88806288f070): fill_kobj_path: path = '/devices/virtual/net/sit0' [ 250.932952] kobject: 'queues' (ffff88809f59f348): kobject_add_internal: parent: 'sit0', set: '' [ 250.942341] kobject: 'queues' (ffff88809f59f348): kobject_uevent_env [ 250.948815] kobject: 'queues' (ffff88809f59f348): kobject_uevent_env: filter function caused the event to drop! [ 250.959082] kobject: 'rx-0' (ffff88807da89610): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.968549] kobject: 'rx-0' (ffff88807da89610): kobject_uevent_env [ 250.974920] kobject: 'rx-0' (ffff88807da89610): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/rx-0' [ 250.985323] kobject: 'tx-0' (ffff888095c0d358): kobject_add_internal: parent: 'queues', set: 'queues' [ 250.994953] kobject: 'tx-0' (ffff888095c0d358): kobject_uevent_env [ 251.001313] kobject: 'tx-0' (ffff888095c0d358): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/tx-0' [ 251.012433] kobject: 'ip6tnl0' (ffff888095ee6c70): kobject_add_internal: parent: 'net', set: 'devices' [ 251.022617] kobject: 'ip6tnl0' (ffff888095ee6c70): kobject_uevent_env [ 251.029210] kobject: 'ip6tnl0' (ffff888095ee6c70): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0' [ 251.039500] kobject: 'queues' (ffff88808fbed948): kobject_add_internal: parent: 'ip6tnl0', set: '' [ 251.049167] kobject: 'queues' (ffff88808fbed948): kobject_uevent_env [ 251.055691] kobject: 'queues' (ffff88808fbed948): kobject_uevent_env: filter function caused the event to drop! [ 251.065959] kobject: 'rx-0' (ffff888073132250): kobject_add_internal: parent: 'queues', set: 'queues' [ 251.075420] kobject: 'rx-0' (ffff888073132250): kobject_uevent_env [ 251.081998] kobject: 'rx-0' (ffff888073132250): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/rx-0' [ 251.092710] kobject: 'tx-0' (ffff888096b6ed18): kobject_add_internal: parent: 'queues', set: 'queues' [ 251.102302] kobject: 'tx-0' (ffff888096b6ed18): kobject_uevent_env [ 251.108655] kobject: 'tx-0' (ffff888096b6ed18): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/tx-0' [ 251.120273] kobject: 'ip6gre0' (ffff888098970e70): kobject_add_internal: parent: 'net', set: 'devices' [ 251.130285] kobject: 'ip6gre0' (ffff888098970e70): kobject_uevent_env [ 251.136876] kobject: 'ip6gre0' (ffff888098970e70): fill_kobj_path: path = '/devices/virtual/net/ip6gre0' [ 251.146804] kobject: 'queues' (ffff88809f59f148): kobject_add_internal: parent: 'ip6gre0', set: '' [ 251.156482] kobject: 'queues' (ffff88809f59f148): kobject_uevent_env [ 251.163030] kobject: 'queues' (ffff88809f59f148): kobject_uevent_env: filter function caused the event to drop! [ 251.173289] kobject: 'rx-0' (ffff888076622310): kobject_add_internal: parent: 'queues', set: 'queues' [ 251.182725] kobject: 'rx-0' (ffff888076622310): kobject_uevent_env 15:02:17 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x44000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15:02:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1be, 0x0) 15:02:17 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) write$vnet(0xffffffffffffffff, 0x0, 0x0) 15:02:17 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) write$vnet(0xffffffffffffffff, 0x0, 0x0) 15:02:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e0000", 0x25}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:17 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x44000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 251.189075] kobject: 'rx-0' (ffff888076622310): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/rx-0' [ 251.200088] kobject: 'tx-0' (ffff8880939f6558): kobject_add_internal: parent: 'queues', set: 'queues' [ 251.209547] kobject: 'tx-0' (ffff8880939f6558): kobject_uevent_env [ 251.215918] kobject: 'tx-0' (ffff8880939f6558): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/tx-0' [ 251.236483] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env 15:02:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e", 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1be, 0x0) 15:02:17 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) write$vnet(0xffffffffffffffff, 0x0, 0x0) [ 251.243254] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 251.273360] kobject: 'loop1' (ffff8880a49197a0): kobject_uevent_env [ 251.281753] kobject: 'loop1' (ffff8880a49197a0): fill_kobj_path: path = '/devices/virtual/block/loop1' 15:02:17 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) write$vnet(0xffffffffffffffff, 0x0, 0x0) [ 251.295508] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 251.302877] kobject: 'rx-0' (ffff888076622310): kobject_cleanup, parent ffff88809f59f148 [ 251.315152] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 251.325456] kobject: 'rx-0' (ffff888076622310): auto cleanup 'remove' event [ 251.339286] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env 15:02:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1be, 0x0) 15:02:17 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) write$vnet(0xffffffffffffffff, 0x0, 0x0) [ 251.342192] kobject: 'rx-0' (ffff888076622310): kobject_uevent_env [ 251.355417] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 251.356872] kobject: 'rx-0' (ffff888076622310): kobject_uevent_env: uevent_suppress caused the event to drop! [ 251.370102] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 251.386027] kobject: 'rx-0' (ffff888076622310): auto cleanup kobject_del [ 251.402627] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 251.410441] kobject: 'rx-0' (ffff888076622310): calling ktype release [ 251.421665] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 251.428994] kobject: 'rx-0': free name [ 251.433242] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 251.433995] kobject: 'tx-0' (ffff8880939f6558): kobject_cleanup, parent ffff88809f59f148 [ 251.446589] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 251.453293] kobject: 'tx-0' (ffff8880939f6558): auto cleanup 'remove' event [ 251.457922] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 251.465258] kobject: 'tx-0' (ffff8880939f6558): kobject_uevent_env [ 251.485966] kobject: 'tx-0' (ffff8880939f6558): kobject_uevent_env: uevent_suppress caused the event to drop! [ 251.496734] kobject: 'tx-0' (ffff8880939f6558): auto cleanup kobject_del [ 251.504544] kobject: 'tx-0' (ffff8880939f6558): calling ktype release [ 251.511273] kobject: 'tx-0': free name [ 251.515474] kobject: 'queues' (ffff88809f59f148): kobject_cleanup, parent (null) [ 251.524210] kobject: 'queues' (ffff88809f59f148): calling ktype release [ 251.531156] kobject: 'queues' (ffff88809f59f148): kset_release [ 251.537319] kobject: 'queues': free name [ 251.541665] kobject: 'ip6gre0' (ffff888098970e70): kobject_uevent_env [ 251.548261] kobject: 'ip6gre0' (ffff888098970e70): kobject_uevent_env: uevent_suppress caused the event to drop! [ 251.563855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.570483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.577909] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 251.586020] caif:caif_disconnect_client(): nothing to disconnect [ 251.630109] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 251.638082] chnl_net:chnl_net_open(): state disconnected [ 251.643644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.659567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.666741] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 251.675917] caif:caif_disconnect_client(): nothing to disconnect [ 251.720178] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 251.728160] chnl_net:chnl_net_open(): state disconnected [ 251.733780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.748943] kobject: 'ip6gre0' (ffff888098970e70): kobject_cleanup, parent (null) [ 251.759695] kobject: 'loop1' (ffff8880a49197a0): kobject_uevent_env [ 251.764309] kobject: 'ip6gre0' (ffff888098970e70): auto cleanup 'remove' event [ 251.772949] kobject: 'loop1' (ffff8880a49197a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 251.774106] kobject: 'ip6gre0' (ffff888098970e70): kobject_uevent_env [ 251.791897] kobject: 'ip6gre0' (ffff888098970e70): kobject_uevent_env: uevent_suppress caused the event to drop! [ 251.802333] kobject: 'ip6gre0' (ffff888098970e70): calling ktype release [ 251.809197] kobject: 'ip6gre0': free name [ 251.815128] kobject: 'rx-0' (ffff888073132250): kobject_cleanup, parent ffff88808fbed948 [ 251.823443] kobject: 'rx-0' (ffff888073132250): auto cleanup 'remove' event [ 251.830619] kobject: 'rx-0' (ffff888073132250): kobject_uevent_env [ 251.836942] kobject: 'rx-0' (ffff888073132250): kobject_uevent_env: uevent_suppress caused the event to drop! [ 251.847046] kobject: 'rx-0' (ffff888073132250): auto cleanup kobject_del [ 251.854290] kobject: 'rx-0' (ffff888073132250): calling ktype release [ 251.860920] kobject: 'rx-0': free name [ 251.864822] kobject: 'tx-0' (ffff888096b6ed18): kobject_cleanup, parent ffff88808fbed948 [ 251.873108] kobject: 'tx-0' (ffff888096b6ed18): auto cleanup 'remove' event [ 251.880264] kobject: 'tx-0' (ffff888096b6ed18): kobject_uevent_env [ 251.886586] kobject: 'tx-0' (ffff888096b6ed18): kobject_uevent_env: uevent_suppress caused the event to drop! [ 251.896887] kobject: 'tx-0' (ffff888096b6ed18): auto cleanup kobject_del [ 251.903762] kobject: 'tx-0' (ffff888096b6ed18): calling ktype release [ 251.910396] kobject: 'tx-0': free name [ 251.914292] kobject: 'queues' (ffff88808fbed948): kobject_cleanup, parent (null) [ 251.922705] kobject: 'queues' (ffff88808fbed948): calling ktype release [ 251.929478] kobject: 'queues' (ffff88808fbed948): kset_release [ 251.935479] kobject: 'queues': free name [ 251.939722] kobject: 'ip6tnl0' (ffff888095ee6c70): kobject_uevent_env [ 251.946326] kobject: 'ip6tnl0' (ffff888095ee6c70): kobject_uevent_env: uevent_suppress caused the event to drop! [ 251.970179] kobject: 'ip6tnl0' (ffff888095ee6c70): kobject_cleanup, parent (null) [ 251.978794] kobject: 'ip6tnl0' (ffff888095ee6c70): auto cleanup 'remove' event [ 251.987715] kobject: 'ip6tnl0' (ffff888095ee6c70): kobject_uevent_env [ 251.994587] kobject: 'ip6tnl0' (ffff888095ee6c70): kobject_uevent_env: uevent_suppress caused the event to drop! [ 252.006091] kobject: 'ip6tnl0' (ffff888095ee6c70): calling ktype release [ 252.012982] kobject: 'ip6tnl0': free name [ 252.017686] kobject: 'rx-0' (ffff88807da89610): kobject_cleanup, parent ffff88809f59f348 [ 252.025978] kobject: 'rx-0' (ffff88807da89610): auto cleanup 'remove' event [ 252.033106] kobject: 'rx-0' (ffff88807da89610): kobject_uevent_env [ 252.039428] kobject: 'rx-0' (ffff88807da89610): kobject_uevent_env: uevent_suppress caused the event to drop! [ 252.049504] kobject: 'rx-0' (ffff88807da89610): auto cleanup kobject_del [ 252.056495] kobject: 'rx-0' (ffff88807da89610): calling ktype release [ 252.063244] kobject: 'rx-0': free name 15:02:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) 15:02:18 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) write$vnet(0xffffffffffffffff, 0x0, 0x0) 15:02:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:18 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) 15:02:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffff", 0x21}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) [ 252.067243] kobject: 'tx-0' (ffff888095c0d358): kobject_cleanup, parent ffff88809f59f348 [ 252.076499] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env [ 252.083118] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 252.094475] kobject: 'tx-0' (ffff888095c0d358): auto cleanup 'remove' event [ 252.111026] kobject: 'tx-0' (ffff888095c0d358): kobject_uevent_env [ 252.117631] kobject: 'tx-0' (ffff888095c0d358): kobject_uevent_env: uevent_suppress caused the event to drop! [ 252.127733] kobject: 'tx-0' (ffff888095c0d358): auto cleanup kobject_del [ 252.129219] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 252.139612] kobject: 'tx-0' (ffff888095c0d358): calling ktype release [ 252.143412] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 252.147801] kobject: 'tx-0': free name [ 252.147821] kobject: 'queues' (ffff88809f59f348): kobject_cleanup, parent (null) [ 252.147824] kobject: 'queues' (ffff88809f59f348): calling ktype release [ 252.147828] kobject: 'queues' (ffff88809f59f348): kset_release [ 252.147835] kobject: 'queues': free name [ 252.189120] kobject: 'sit0' (ffff88806288f070): kobject_uevent_env [ 252.195561] kobject: 'sit0' (ffff88806288f070): kobject_uevent_env: uevent_suppress caused the event to drop! [ 252.196160] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 252.214884] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 252.216297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.224947] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 252.232337] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 252.239549] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 252.247820] caif:caif_disconnect_client(): nothing to disconnect [ 252.300268] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 252.308266] chnl_net:chnl_net_open(): state disconnected [ 252.313922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.328810] kobject: 'sit0' (ffff88806288f070): kobject_cleanup, parent (null) [ 252.339136] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env 15:02:18 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:18 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) 15:02:18 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) 15:02:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) [ 252.343448] kobject: 'sit0' (ffff88806288f070): auto cleanup 'remove' event [ 252.347572] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 252.367355] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 252.379577] kobject: 'sit0' (ffff88806288f070): kobject_uevent_env [ 252.386492] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' 15:02:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:18 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001c008104e00f80ecdb4cb9040cc804a012000000020090fb120001000e00da1b40d819a9060015ffffff", 0x2e}], 0x1}, 0x0) 15:02:18 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) 15:02:18 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) [ 252.395522] kobject: 'sit0' (ffff88806288f070): kobject_uevent_env: uevent_suppress caused the event to drop! [ 252.407984] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 252.418333] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' 15:02:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7c, 0x600000000000000, [0x40000080], [0xc2]}) 15:02:18 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) [ 252.447326] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env [ 252.461559] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 252.464207] kobject: 'sit0' (ffff88806288f070): calling ktype release [ 252.478941] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 252.508898] kobject: 'sit0': free name [ 252.514541] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 252.516639] kobject: 'kvm' (ffff8880a6e222d0): kobject_uevent_env [ 252.525335] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 252.536800] kobject: 'kvm' (ffff8880a6e222d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 252.541949] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 252.554442] kobject: 'kvm' (ffff8880a6e222d0): kobject_uevent_env [ 252.559157] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env [ 252.565292] kobject: 'rx-0' (ffff88807da896d0): kobject_cleanup, parent ffff88809bc9a348 [ 252.568333] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 252.580112] kobject: 'kvm' (ffff8880a6e222d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 252.588944] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 252.597189] kobject: 'rx-0' (ffff88807da896d0): auto cleanup 'remove' event [ 252.603868] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 252.612222] kobject: 'rx-0' (ffff88807da896d0): kobject_uevent_env [ 252.619269] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 252.628244] kobject: 'kvm' (ffff8880a6e222d0): kobject_uevent_env [ 252.633407] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 252.637787] kobject: 'kvm' (ffff8880a6e222d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 252.647815] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 252.656313] kobject: 'rx-0' (ffff88807da896d0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 252.664503] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 252.679106] kobject: 'rx-0' (ffff88807da896d0): auto cleanup kobject_del [ 252.685516] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 252.691767] kobject: 'kvm' (ffff8880a6e222d0): kobject_uevent_env [ 252.696625] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 252.703195] kobject: 'rx-0' (ffff88807da896d0): calling ktype release [ 252.732470] kobject: 'kvm' (ffff8880a6e222d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 252.764581] kobject: 'rx-0': free name [ 252.774623] kobject: 'tx-0' (ffff88809c04b318): kobject_cleanup, parent ffff88809bc9a348 [ 252.783286] kobject: 'tx-0' (ffff88809c04b318): auto cleanup 'remove' event [ 252.792288] kobject: 'tx-0' (ffff88809c04b318): kobject_uevent_env [ 252.798598] kobject: 'tx-0' (ffff88809c04b318): kobject_uevent_env: uevent_suppress caused the event to drop! [ 252.808920] kobject: 'tx-0' (ffff88809c04b318): auto cleanup kobject_del [ 252.815931] kobject: 'tx-0' (ffff88809c04b318): calling ktype release [ 252.822577] kobject: 'tx-0': free name [ 252.826473] kobject: 'queues' (ffff88809bc9a348): kobject_cleanup, parent (null) [ 252.834905] kobject: 'queues' (ffff88809bc9a348): calling ktype release [ 252.841708] kobject: 'queues' (ffff88809bc9a348): kset_release [ 252.847670] kobject: 'queues': free name [ 252.851967] kobject: 'ip6_vti0' (ffff888085612ef0): kobject_uevent_env [ 252.858638] kobject: 'ip6_vti0' (ffff888085612ef0): kobject_uevent_env: uevent_suppress caused the event to drop! 15:02:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffff", 0x21}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:19 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) 15:02:19 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:19 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) close(0xffffffffffffffff) 15:02:19 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\b']}) [ 252.890191] kobject: 'ip6_vti0' (ffff888085612ef0): kobject_cleanup, parent (null) [ 252.898801] kobject: 'ip6_vti0' (ffff888085612ef0): auto cleanup 'remove' event [ 252.906411] kobject: 'ip6_vti0' (ffff888085612ef0): kobject_uevent_env [ 252.918180] kobject: 'loop1' (ffff8880a49197a0): kobject_uevent_env [ 252.921207] kobject: 'ip6_vti0' (ffff888085612ef0): kobject_uevent_env: uevent_suppress caused the event to drop! 15:02:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x1, 0x154, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, 0x1cc) 15:02:19 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) [ 252.930931] kobject: 'loop1' (ffff8880a49197a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 252.956887] kobject: 'ip6_vti0' (ffff888085612ef0): calling ktype release [ 252.972715] kobject: 'ip6_vti0': free name 15:02:19 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:19 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r2) 15:02:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x247, 0x20000004, &(0x7f0000000280), 0x0) 15:02:19 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) [ 252.985268] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env [ 252.999796] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 253.012145] kobject: 'rx-0' (ffff88808ab03190): kobject_cleanup, parent ffff88809fc62a48 [ 253.034505] kobject: 'rx-0' (ffff88808ab03190): auto cleanup 'remove' event [ 253.043593] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 253.050757] kobject: 'rx-0' (ffff88808ab03190): kobject_uevent_env [ 253.058539] kobject: 'rx-0' (ffff88808ab03190): kobject_uevent_env: uevent_suppress caused the event to drop! [ 253.068332] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 253.075906] kobject: 'rx-0' (ffff88808ab03190): auto cleanup kobject_del [ 253.085073] kobject: 'rx-0' (ffff88808ab03190): calling ktype release [ 253.089881] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 253.091897] kobject: 'rx-0': free name [ 253.101223] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 253.103031] kobject: 'tx-0' (ffff888066cb6818): kobject_cleanup, parent ffff88809fc62a48 [ 253.115826] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 253.126795] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 253.127978] kobject: 'tx-0' (ffff888066cb6818): auto cleanup 'remove' event [ 253.137128] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 253.143574] kobject: 'tx-0' (ffff888066cb6818): kobject_uevent_env [ 253.151828] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 253.156481] kobject: 'tx-0' (ffff888066cb6818): kobject_uevent_env: uevent_suppress caused the event to drop! [ 253.168236] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 253.176138] kobject: 'tx-0' (ffff888066cb6818): auto cleanup kobject_del [ 253.183887] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 253.189373] kobject: 'tx-0' (ffff888066cb6818): calling ktype release [ 253.201623] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 253.205625] kobject: 'tx-0': free name [ 253.213833] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 253.215806] kobject: 'queues' (ffff88809fc62a48): kobject_cleanup, parent (null) [ 253.226113] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 253.233628] kobject: 'queues' (ffff88809fc62a48): calling ktype release [ 253.242451] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 253.246909] kobject: 'queues' (ffff88809fc62a48): kset_release [ 253.262435] kobject: 'queues': free name [ 253.271450] kobject: 'ip_vti0' (ffff888072ce0a30): kobject_uevent_env [ 253.283441] kobject: 'ip_vti0' (ffff888072ce0a30): kobject_uevent_env: uevent_suppress caused the event to drop! [ 253.312968] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 253.319429] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 253.331386] kobject: 'ip_vti0' (ffff888072ce0a30): kobject_cleanup, parent (null) [ 253.339888] kobject: 'ip_vti0' (ffff888072ce0a30): auto cleanup 'remove' event [ 253.348230] kobject: 'ip_vti0' (ffff888072ce0a30): kobject_uevent_env [ 253.354938] kobject: 'ip_vti0' (ffff888072ce0a30): kobject_uevent_env: uevent_suppress caused the event to drop! [ 253.365282] kobject: 'ip_vti0' (ffff888072ce0a30): calling ktype release [ 253.372182] kobject: 'ip_vti0': free name [ 253.376889] kobject: 'batman_adv' (ffff888096e43700): kobject_uevent_env [ 253.383799] kobject: 'batman_adv' (ffff888096e43700): kobject_uevent_env: filter function caused the event to drop! [ 253.394465] kobject: 'batman_adv' (ffff888096e43700): kobject_cleanup, parent (null) [ 253.403255] kobject: 'batman_adv' (ffff888096e43700): calling ktype release [ 253.410508] kobject: (ffff888096e43700): dynamic_kobj_release [ 253.416397] kobject: 'batman_adv': free name [ 253.420973] kobject: 'rx-0' (ffff88809f690d90): kobject_cleanup, parent ffff88809fff5c48 [ 253.429219] kobject: 'rx-0' (ffff88809f690d90): auto cleanup 'remove' event [ 253.436387] kobject: 'rx-0' (ffff88809f690d90): kobject_uevent_env [ 253.442717] kobject: 'rx-0' (ffff88809f690d90): kobject_uevent_env: uevent_suppress caused the event to drop! [ 253.452932] kobject: 'rx-0' (ffff88809f690d90): auto cleanup kobject_del [ 253.460429] kobject: 'rx-0' (ffff88809f690d90): calling ktype release [ 253.467036] kobject: 'rx-0': free name [ 253.471216] kobject: 'tx-0' (ffff88807660fad8): kobject_cleanup, parent ffff88809fff5c48 [ 253.479460] kobject: 'tx-0' (ffff88807660fad8): auto cleanup 'remove' event [ 253.486596] kobject: 'tx-0' (ffff88807660fad8): kobject_uevent_env [ 253.492925] kobject: 'tx-0' (ffff88807660fad8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 253.503025] kobject: 'tx-0' (ffff88807660fad8): auto cleanup kobject_del [ 253.509874] kobject: 'tx-0' (ffff88807660fad8): calling ktype release [ 253.516663] kobject: 'tx-0': free name [ 253.520611] kobject: 'queues' (ffff88809fff5c48): kobject_cleanup, parent (null) [ 253.541306] kobject: 'queues' (ffff88809fff5c48): calling ktype release [ 253.548144] kobject: 'queues' (ffff88809fff5c48): kset_release [ 253.554143] kobject: 'queues': free name [ 253.558345] kobject: 'erspan0' (ffff8880998f4830): kobject_uevent_env [ 253.565905] kobject: 'erspan0' (ffff8880998f4830): kobject_uevent_env: uevent_suppress caused the event to drop! [ 253.590176] kobject: 'erspan0' (ffff8880998f4830): kobject_cleanup, parent (null) [ 253.598681] kobject: 'erspan0' (ffff8880998f4830): auto cleanup 'remove' event [ 253.606838] kobject: 'erspan0' (ffff8880998f4830): kobject_uevent_env [ 253.613500] kobject: 'erspan0' (ffff8880998f4830): kobject_uevent_env: uevent_suppress caused the event to drop! [ 253.623944] kobject: 'erspan0' (ffff8880998f4830): calling ktype release [ 253.630822] kobject: 'erspan0': free name [ 253.635418] kobject: 'batman_adv' (ffff8880a4c99300): kobject_uevent_env [ 253.642462] kobject: 'batman_adv' (ffff8880a4c99300): kobject_uevent_env: filter function caused the event to drop! [ 253.653414] kobject: 'batman_adv' (ffff8880a4c99300): kobject_cleanup, parent (null) [ 253.662226] kobject: 'batman_adv' (ffff8880a4c99300): calling ktype release [ 253.670537] kobject: (ffff8880a4c99300): dynamic_kobj_release [ 253.676419] kobject: 'batman_adv': free name [ 253.680986] kobject: 'rx-0' (ffff8880a94dd9d0): kobject_cleanup, parent ffff8880939bd048 [ 253.689311] kobject: 'rx-0' (ffff8880a94dd9d0): auto cleanup 'remove' event [ 253.696438] kobject: 'rx-0' (ffff8880a94dd9d0): kobject_uevent_env [ 253.702776] kobject: 'rx-0' (ffff8880a94dd9d0): kobject_uevent_env: uevent_suppress caused the event to drop! 15:02:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffff", 0x21}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:20 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000080)=@ethtool_flash={0x33, 0x0, "ac8b1b763ce420c046c50ef754df5b005c534f6a60386e0ddc71a188b1b2c76335d71ddf0a027a8730ec3059b69dcece1f714e32fe303ea3b7e7b505cd9b4bf68ac46fd5f0ce7e718e5be1dd164a68baafc36033e2b3217833eea36a9b66c01a3942363262ab4c55dddf29959909eb242d87e6dc141050ec812fad97c0baf501"}}) 15:02:20 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r2) 15:02:20 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:20 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) [ 253.712981] kobject: 'rx-0' (ffff8880a94dd9d0): auto cleanup kobject_del [ 253.719841] kobject: 'rx-0' (ffff8880a94dd9d0): calling ktype release [ 253.726482] kobject: 'rx-0': free name [ 253.730422] kobject: 'tx-0' (ffff88809eaefcd8): kobject_cleanup, parent ffff8880939bd048 [ 253.738633] kobject: 'tx-0' (ffff88809eaefcd8): auto cleanup 'remove' event [ 253.745771] kobject: 'tx-0' (ffff88809eaefcd8): kobject_uevent_env [ 253.752529] kobject: 'loop1' (ffff8880a49197a0): kobject_uevent_env 15:02:20 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:20 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) [ 253.758962] kobject: 'loop1' (ffff8880a49197a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 253.776722] kobject: 'tx-0' (ffff88809eaefcd8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 253.799993] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 253.807957] kobject: 'tx-0' (ffff88809eaefcd8): auto cleanup kobject_del 15:02:20 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:20 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:20 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r2) 15:02:20 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) [ 253.816914] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 253.826574] kobject: 'tx-0' (ffff88809eaefcd8): calling ktype release [ 253.847697] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 253.856073] kobject: 'tx-0': free name [ 253.860057] kobject: 'queues' (ffff8880939bd048): kobject_cleanup, parent (null) [ 253.868757] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 253.884457] kobject: 'queues' (ffff8880939bd048): calling ktype release [ 253.893807] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 253.900453] kobject: 'queues' (ffff8880939bd048): kset_release [ 253.907415] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 253.918589] kobject: 'queues': free name [ 253.926106] kobject: 'gretap0' (ffff88807bed4630): kobject_uevent_env [ 253.932545] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 253.932789] kobject: 'gretap0' (ffff88807bed4630): kobject_uevent_env: uevent_suppress caused the event to drop! [ 253.939463] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 253.959868] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 253.966830] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 253.977120] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 253.980287] kobject: 'gretap0' (ffff88807bed4630): kobject_cleanup, parent (null) [ 253.983625] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 253.993797] kobject: 'gretap0' (ffff88807bed4630): auto cleanup 'remove' event [ 254.006225] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 254.009641] kobject: 'gretap0' (ffff88807bed4630): kobject_uevent_env [ 254.023511] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 254.024144] kobject: 'gretap0' (ffff88807bed4630): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.033585] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 254.045722] kobject: 'gretap0' (ffff88807bed4630): calling ktype release [ 254.049935] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 254.056826] kobject: 'gretap0': free name [ 254.071007] kobject: 'rx-0' (ffff888091976d90): kobject_cleanup, parent ffff8880939bd248 [ 254.071265] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env [ 254.079300] kobject: 'rx-0' (ffff888091976d90): auto cleanup 'remove' event [ 254.086000] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 254.095012] kobject: 'rx-0' (ffff888091976d90): kobject_uevent_env [ 254.108854] kobject: 'rx-0' (ffff888091976d90): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.135833] kobject: 'rx-0' (ffff888091976d90): auto cleanup kobject_del [ 254.150172] kobject: 'rx-0' (ffff888091976d90): calling ktype release [ 254.156818] kobject: 'rx-0': free name [ 254.161251] kobject: 'tx-0' (ffff88809bae2058): kobject_cleanup, parent ffff8880939bd248 [ 254.169481] kobject: 'tx-0' (ffff88809bae2058): auto cleanup 'remove' event [ 254.176783] kobject: 'tx-0' (ffff88809bae2058): kobject_uevent_env [ 254.183153] kobject: 'tx-0' (ffff88809bae2058): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.193242] kobject: 'tx-0' (ffff88809bae2058): auto cleanup kobject_del [ 254.200139] kobject: 'tx-0' (ffff88809bae2058): calling ktype release [ 254.206729] kobject: 'tx-0': free name [ 254.210675] kobject: 'queues' (ffff8880939bd248): kobject_cleanup, parent (null) [ 254.219149] kobject: 'queues' (ffff8880939bd248): calling ktype release [ 254.225939] kobject: 'queues' (ffff8880939bd248): kset_release [ 254.231948] kobject: 'queues': free name [ 254.236167] kobject: 'gre0' (ffff88805885f3f0): kobject_uevent_env [ 254.242548] kobject: 'gre0' (ffff88805885f3f0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.270187] kobject: 'gre0' (ffff88805885f3f0): kobject_cleanup, parent (null) [ 254.278430] kobject: 'gre0' (ffff88805885f3f0): auto cleanup 'remove' event [ 254.286559] kobject: 'gre0' (ffff88805885f3f0): kobject_uevent_env [ 254.292899] kobject: 'gre0' (ffff88805885f3f0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.304112] kobject: 'gre0' (ffff88805885f3f0): calling ktype release [ 254.310764] kobject: 'gre0': free name [ 254.314990] kobject: 'rx-0' (ffff8880a8fa5a90): kobject_cleanup, parent ffff8880a0c08848 [ 254.324320] kobject: 'rx-0' (ffff8880a8fa5a90): auto cleanup 'remove' event [ 254.331434] kobject: 'rx-0' (ffff8880a8fa5a90): kobject_uevent_env [ 254.337775] kobject: 'rx-0' (ffff8880a8fa5a90): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.348858] kobject: 'rx-0' (ffff8880a8fa5a90): auto cleanup kobject_del [ 254.355793] kobject: 'rx-0' (ffff8880a8fa5a90): calling ktype release [ 254.362514] kobject: 'rx-0': free name [ 254.366426] kobject: 'tx-0' (ffff888065c25a98): kobject_cleanup, parent ffff8880a0c08848 [ 254.374687] kobject: 'tx-0' (ffff888065c25a98): auto cleanup 'remove' event [ 254.381800] kobject: 'tx-0' (ffff888065c25a98): kobject_uevent_env [ 254.388100] kobject: 'tx-0' (ffff888065c25a98): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.398522] kobject: 'tx-0' (ffff888065c25a98): auto cleanup kobject_del [ 254.405422] kobject: 'tx-0' (ffff888065c25a98): calling ktype release [ 254.412017] kobject: 'tx-0': free name [ 254.415909] kobject: 'queues' (ffff8880a0c08848): kobject_cleanup, parent (null) [ 254.424360] kobject: 'queues' (ffff8880a0c08848): calling ktype release [ 254.431150] kobject: 'queues' (ffff8880a0c08848): kset_release [ 254.437118] kobject: 'queues': free name [ 254.441416] kobject: 'tunl0' (ffff88809b85d470): kobject_uevent_env [ 254.447823] kobject: 'tunl0' (ffff88809b85d470): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.480197] kobject: 'tunl0' (ffff88809b85d470): kobject_cleanup, parent (null) [ 254.488692] kobject: 'tunl0' (ffff88809b85d470): auto cleanup 'remove' event [ 254.495945] kobject: 'tunl0' (ffff88809b85d470): kobject_uevent_env [ 254.502368] kobject: 'tunl0' (ffff88809b85d470): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.512567] kobject: 'tunl0' (ffff88809b85d470): calling ktype release [ 254.519250] kobject: 'tunl0': free name [ 254.524007] kobject: 'rx-0' (ffff888073398550): kobject_cleanup, parent ffff88809fa57e48 [ 254.532819] kobject: 'rx-0' (ffff888073398550): auto cleanup 'remove' event [ 254.539923] kobject: 'rx-0' (ffff888073398550): kobject_uevent_env [ 254.546264] kobject: 'rx-0' (ffff888073398550): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.560206] kobject: 'rx-0' (ffff888073398550): auto cleanup kobject_del [ 254.567071] kobject: 'rx-0' (ffff888073398550): calling ktype release [ 254.573703] kobject: 'rx-0': free name 15:02:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff", 0x22}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:20 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:20 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r1) 15:02:20 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:20 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 15:02:20 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x0) 15:02:20 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:20 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) [ 254.577625] kobject: 'tx-0' (ffff88809ff5aad8): kobject_cleanup, parent ffff88809fa57e48 [ 254.582655] kobject: 'loop1' (ffff8880a49197a0): kobject_uevent_env [ 254.600063] kobject: 'tx-0' (ffff88809ff5aad8): auto cleanup 'remove' event [ 254.605067] kobject: 'loop1' (ffff8880a49197a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 254.619502] kobject: 'tx-0' (ffff88809ff5aad8): kobject_uevent_env 15:02:20 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 15:02:20 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x0) 15:02:20 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r1) 15:02:20 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) [ 254.642474] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 254.645617] kobject: 'tx-0' (ffff88809ff5aad8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.658064] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 254.699632] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 254.708775] kobject: 'tx-0' (ffff88809ff5aad8): auto cleanup kobject_del [ 254.715948] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 254.717482] kobject: 'tx-0' (ffff88809ff5aad8): calling ktype release [ 254.739833] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 254.748123] kobject: 'tx-0': free name [ 254.752868] kobject: 'queues' (ffff88809fa57e48): kobject_cleanup, parent (null) [ 254.760290] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 254.766136] kobject: 'queues' (ffff88809fa57e48): calling ktype release [ 254.774622] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env [ 254.781329] kobject: 'queues' (ffff88809fa57e48): kset_release [ 254.786897] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 254.789971] kobject: 'queues': free name [ 254.802003] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 254.804139] kobject: 'lo' (ffff8880736471b0): kobject_uevent_env [ 254.812180] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 254.816373] kobject: 'lo' (ffff8880736471b0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.826781] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 254.842396] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 254.852265] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 254.858680] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 254.869175] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 254.875653] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 254.885336] kobject: 'lo' (ffff8880736471b0): kobject_cleanup, parent (null) [ 254.885637] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env [ 254.895454] kobject: 'lo' (ffff8880736471b0): auto cleanup 'remove' event [ 254.899866] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 254.907257] kobject: 'lo' (ffff8880736471b0): kobject_uevent_env [ 254.916960] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 254.924887] kobject: 'lo' (ffff8880736471b0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 254.929030] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 254.939499] kobject: 'lo' (ffff8880736471b0): calling ktype release [ 254.955665] kobject: 'lo': free name 15:02:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff", 0x22}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:21 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:21 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:21 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 15:02:21 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x0) 15:02:21 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r1) 15:02:21 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 255.426728] kobject: 'loop1' (ffff8880a49197a0): kobject_uevent_env [ 255.434539] kobject: 'loop1' (ffff8880a49197a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 255.463054] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env 15:02:21 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r0) 15:02:21 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:21 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:21 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) [ 255.476107] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 255.506145] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env [ 255.534986] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 255.559917] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 255.566612] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 255.577703] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 255.584198] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 255.594919] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 255.602403] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 255.615658] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 255.622870] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 255.632929] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 255.639357] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 255.649312] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 255.655773] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 255.666341] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 255.674744] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' 15:02:22 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff", 0x22}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:22 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r0) 15:02:22 executing program 2: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x9}, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$int_in(r0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r3) write$vnet(0xffffffffffffffff, 0x0, 0x0) 15:02:22 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 15:02:22 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:22 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 15:02:22 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) [ 256.270758] kobject: 'loop1' (ffff8880a49197a0): kobject_uevent_env [ 256.277219] kobject: 'loop1' (ffff8880a49197a0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 256.308389] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env 15:02:22 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1f9, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r0) 15:02:22 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 15:02:22 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:22 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1be, 0x0) [ 256.322619] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 256.335385] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 256.342654] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 256.364502] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env 15:02:22 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1be, 0x0) 15:02:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 256.376304] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 256.396323] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 256.403568] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 256.414971] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 256.421484] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 256.432253] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 256.438688] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 256.454983] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env [ 256.461530] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 256.471684] kobject: 'loop3' (ffff8880a49c60e0): kobject_uevent_env [ 256.478111] kobject: 'loop3' (ffff8880a49c60e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 256.488644] kobject: 'loop2' (ffff8880a49626e0): kobject_uevent_env [ 256.495133] kobject: 'loop2' (ffff8880a49626e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 256.505134] kobject: 'loop5' (ffff8880a4a4ea60): kobject_uevent_env [ 256.511611] kobject: 'loop5' (ffff8880a4a4ea60): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 256.522984] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 256.536704] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' 15:02:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e", 0x23}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:23 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) shutdown(0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r0) 15:02:23 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x4101) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x20810, r0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='pstore\x00', 0x800, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0xffffffffffff0d59, @ipv4={[], [], @loopback}, 0x9}, {0xa, 0x4e22, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x3, [0xfffffffffffffff7, 0x7, 0x11d, 0x0, 0x0, 0x9, 0x2, 0xf67]}, 0x5c) listen(r2, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 15:02:23 executing program 5: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) ioctl$int_in(r0, 0x40000000af01, 0x0) 15:02:23 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1be, 0x0) 15:02:23 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, 0x0, 0x0, 0x0) 15:02:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e", 0x23}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) 15:02:23 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth0_to_bond\x00', 0x323) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001480), 0x4) 15:02:23 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, 0x0, 0x0, 0x0) [ 257.104901] kobject: 'loop1' (ffff8880a49197a0): kobject_uevent_env [ 257.123793] kobject: 'loop1' (ffff8880a49197a0): fill_kobj_path: path = '/devices/virtual/block/loop1' 15:02:23 executing program 3: gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x1400, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) close(r0) 15:02:23 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, 0x0, 0x0, 0x0) 15:02:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0081aee4050c00000f0000008bc609f6d8111692b4a0db949229ffffff9e", 0x23}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x2122) [ 257.156283] kobject: 'loop4' (ffff8880a49f2160): kobject_uevent_env [ 257.164300] kobject: 'loop4' (ffff8880a49f2160): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 257.181064] kobject: 'loop0' (ffff8880a48ad720): kobject_uevent_env [ 257.193552] kobject: 'loop0' (ffff8880a48ad720): fill_kobj_path: path = '/devices/virtual/block/loop0' 15:02:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="230000005e0