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", 0x1000, 0x649}], 0x8000, &(0x7f0000000280)='vfat\x00') write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x2, r5}) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 00:27:08 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x8) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x121401) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000200)=0xed) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000300)={0x7ff, 0x2, 'client1\x00', 0x4, "ed952ad2017049fe", "4b478209be0e34c2dca108e3d1ad1665724c2b2030225b90130b5bc59e368108", 0xffff8326, 0xfffffffe}) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$getflags(r3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="669f3d", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000280)) io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 583.965812][ T27] audit: type=1804 audit(1579652829.010:317): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir154663994/syzkaller.8rRxVG/196/file0/file0" dev="loop0" ino=332 res=1 [ 584.005315][ T27] audit: type=1804 audit(1579652829.050:318): pid=15139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/60/file0/file0" dev="sda1" ino=17490 res=1 [ 584.063578][T15159] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 19) [ 584.069798][ T27] audit: type=1800 audit(1579652829.080:319): pid=15139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17490 res=0 [ 584.119832][T15159] FAT-fs (loop0): Filesystem has been set read-only 00:27:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = memfd_create(&(0x7f0000000200)='\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x1ff) r2 = dup2(0xffffffffffffffff, r1) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r4, 0x3, 0xc000, 0x80000003) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x47) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) write$cgroup_type(r5, &(0x7f0000000100)='threaded\x00', 0xff34) fallocate(r5, 0x3, 0xc000, 0x80000003) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000000c0)={{0x49, 0x9}, 0x0, 0xfffffffc, 0xffffffdb, {0x16, 0xcf}, 0xa, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r6 = getpid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x1d, 0x6, @tid=r6}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f0000000500)) r8 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r8, 0x0, 0x0) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a40)) r10 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r11, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r11, 0x4, 0x80000000002c00) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000005c0)=0xc) open$dir(&(0x7f0000000240)='./file0\x00', 0x10000, 0x83b2f476773c9c96) r12 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000000)) fallocate(r12, 0x3, 0xc000, 0x80000003) socket$inet6(0xa, 0xa, 0x8c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = dup(r13) getsockopt$netlink(r14, 0x10e, 0x0, 0x0, &(0x7f0000000000)) r15 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r15, 0x400c6615, &(0x7f0000000100)={0x0, @aes128}) sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001b00)="c9d8ddbba2813ad3e5f0839f53a89d1108d0524a98c285af719eb7adc1866a16e1e5865365eaa57f2ca52144e9c1bf5be7202f6c3b2c5a07f21d20f756f41bd30c3b1c1eeee11632059477d23bc3b5d04233f672ab082651ea52bb8c17eb03faec", 0x61}, {&(0x7f0000001b80)="89373bf6191b4b2aa4ef116769520e82a054fef0ff44b05fd0fd478194c3de0ad939776379b272bf777d10e4fc43a288718c7568fe4964b68021359a5477aa872cbc4f01f34612f518ac764c2c5a", 0x4e}, {&(0x7f0000001c00)}, {0x0}, {&(0x7f0000003540)="7fa28792f53a5237c01f6c9282abc0f10cb199cbfb0e5bf5569392620ea69828f384e7a052ea08043870bc707bb931ccac7f05cd320f0e0e8276678f793686eb1273eead93d8737bc8b4fe12b39f81e7424d2b0e51c0c011b486618785d5659b6fb25c5b6954f0fd6ccd0118931ae9c28c9e3a24e7dff9064bdb3637d2efa7a0f620b26fc0587e8b4a6f3e202fe857a13f00a3b30d22a3d04aab7852906bc7383ef00de133658ccfc997e5971e2b", 0xae}, {&(0x7f0000001ec0)="99703957cc599c3602e014e7aaabb3776f97682c24931f00c4cdfc0fc7c16147e0a7e4ce52e173b10aa1cb40603ca2d8a853ec3e0e821bb9475765b55d08f9cf51e4ad61a0ebe7260fced0ae8ea3c8a1e87002d02d95f18372665604fc4e25aa3158e9ec0be1f1046bffa7de8d96e2694daae04ec45e340a012226fb7c6b1d04fcdd21b1b61ca9789b8a3c2c8525a0a82f1f8a5e16", 0x95}, {0x0}], 0x7, &(0x7f0000003b40)=ANY=[@ANYBLOB="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"], 0x4b2}}], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) timer_settime(r7, 0x0, 0x0, 0x0) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) [ 584.179547][T15159] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 584.241829][T15159] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 19) 00:27:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 584.565258][ T27] audit: type=1804 audit(1579652829.610:320): pid=15186 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir154663994/syzkaller.8rRxVG/196/file0/file0" dev="loop0" ino=332 res=1 [ 584.609618][ T27] audit: type=1800 audit(1579652829.650:321): pid=15159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="loop0" ino=332 res=0 00:27:09 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r3) 00:27:09 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r3) [ 585.055988][T15199] FAT-fs (loop3): bogus number of reserved sectors [ 585.081496][ T27] audit: type=1804 audit(1579652830.120:322): pid=15174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=17009 res=1 [ 585.188927][T15199] FAT-fs (loop3): Can't find a valid FAT filesystem [ 585.229843][ T27] audit: type=1800 audit(1579652830.120:323): pid=15174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=17009 res=0 00:27:10 executing program 2: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x8) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x121401) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000200)=0xed) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000300)={0x7ff, 0x2, 'client1\x00', 0x4, "ed952ad2017049fe", "4b478209be0e34c2dca108e3d1ad1665724c2b2030225b90130b5bc59e368108", 0xffff8326, 0xfffffffe}) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$getflags(r3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="669f3d", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000280)) io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000000000, 0x80000000000000, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 585.390435][ T27] audit: type=1804 audit(1579652830.130:324): pid=15203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=17009 res=1 [ 585.470838][ T27] audit: type=1800 audit(1579652830.130:325): pid=15203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=17009 res=0 [ 585.561533][ T27] audit: type=1804 audit(1579652830.130:326): pid=15207 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="file0" dev="sda1" ino=17009 res=1 [ 585.836767][T15200] IPVS: ftp: loaded support on port[0] = 21 [ 585.858159][T15217] IPVS: ftp: loaded support on port[0] = 21 00:27:11 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r3) [ 585.945957][ T21] tipc: TX() has been purged, node left! [ 585.984367][ T21] tipc: TX() has been purged, node left! [ 585.998650][ T21] tipc: TX() has been purged, node left! [ 586.012537][ T21] tipc: TX() has been purged, node left! [ 586.051615][ T21] tipc: TX() has been purged, node left! [ 586.060679][ T21] tipc: TX() has been purged, node left! [ 586.100858][ T21] tipc: TX() has been purged, node left! [ 586.124703][ T21] tipc: TX() has been purged, node left! 00:27:11 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:27:11 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r3) 00:27:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) pipe(&(0x7f00000006c0)) close(0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a00600100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfe30d4ed6f71b242b42000000ea0000000000000000000400000000000000000500000000000000000000000000000000000000e60100000001000000000020009dd3a884b3da0ba85e145e568f"], 0xb8}}, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1d82dbc1b3ef6f83, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0815b5055e0bcfe87b3071ce26c85a25da511dd99511759b2354") ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0)=0x3) 00:27:12 executing program 4: r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x8, "aeccd79c8cc0020db3b095478313502dd0d082e8bfa8335bf785c3dd6841ccc8", 0x1, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) sendto$llc(r3, &(0x7f0000000180)="53c7d26bcc41c9eb67f329033fc86be9a77d6cb5841cbf867a337f886c3b92b5cd5b19b55d1fcb2ad801d36ebbfc96b384f88d98294563db69d911648aa411b3ba5906672f0274dd22341942dac546e13e", 0x51, 0x4000000, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400003) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb000) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(r4, r5) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000002c0), 0x12) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r9 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) connect$bt_sco(r9, &(0x7f0000000200), 0x8) dup2(r7, r8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) r10 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r10, 0xc0d05640, &(0x7f0000000440)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) migrate_pages(r11, 0x0, 0x0, &(0x7f0000000100)) 00:27:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) pipe(&(0x7f00000006c0)) close(0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a00600100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fbbccf810000000000000000fd85d16e79bad40ac3794899000000000000000000000000000000d94bfeadbfe30d4ed6f71b242b42000000ea0000000000000000000400000000000000000500000000000000000000000000000000000000e60100000001000000000020009dd3a884b3da0ba85e145e568f"], 0xb8}}, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1d82dbc1b3ef6f83, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0815b5055e0bcfe87b3071ce26c85a25da511dd99511759b2354") ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000000c0)=0x3) 00:27:13 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:27:14 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:27:14 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) setuid(r1) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fstat(r2, &(0x7f00000003c0)) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x6b00000000000000, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/237, 0x1a, 0xed, 0x8}, 0x20) 00:27:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:14 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:27:14 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r3) [ 589.759324][T15278] BPF:No type found [ 589.783382][T15281] BPF:No type found [ 589.822971][T15287] IPVS: ftp: loaded support on port[0] = 21 [ 589.832873][T15289] IPVS: ftp: loaded support on port[0] = 21 [ 589.868943][T15290] FAT-fs (loop3): bogus number of reserved sectors [ 589.885906][T15296] IPVS: ftp: loaded support on port[0] = 21 [ 589.894926][ T21] tipc: TX() has been purged, node left! [ 589.900165][T15290] FAT-fs (loop3): Can't find a valid FAT filesystem [ 589.907571][ T21] tipc: TX() has been purged, node left! 00:27:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x78) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = semget(0x1, 0x44023f0aade0def2, 0x5cfc9714f7513220) semop(r3, 0x0, 0xa9b01d486ca589ab) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000100)=""/47) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x81, @empty}, {0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x2, {0xa, 0x4e21, 0x1, @rand_addr="90b3544193300bc41f5d96891390d75f", 0x9}, r2}}, 0x38) 00:27:15 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) setuid(r1) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:15 executing program 2: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230303075"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r4 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x440) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f0000000380)={0x0, @src_change}) fanotify_mark(r3, 0x1, 0x0, r4, &(0x7f00000001c0)='./file0\x00') r6 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$RTC_UIE_OFF(r6, 0x7004) r7 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl='posixacl'}]}}) 00:27:15 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) setuid(r1) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 590.345511][T15308] 9pnet: Insufficient options for proto=fd [ 590.379356][T15309] 9pnet: Insufficient options for proto=fd 00:27:15 executing program 2: io_uring_setup(0x726, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3, 0x143}) fstat(0xffffffffffffffff, &(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r1 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r1) lchown(&(0x7f0000000000)='./file0\x00', r0, r1) r2 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x2}, [{0x2, 0x2, 0xffffffffffffffff}], {}, [{0x8, 0x77f334fc4aafa68b, r1}, {0x8, 0x1, r2}, {0x8, 0x6}, {0x8, 0x3, 0xee01}], {0x10, 0x4}, {0x20, 0x2}}, 0x4c, 0xa87aaf4c02ad5a2d) getgroups(0x2, &(0x7f00000005c0)=[r1, 0xee01]) setregid(r3, 0x0) setregid(0x0, 0x0) 00:27:15 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) setuid(r1) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 590.644447][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 590.644506][ T27] audit: type=1804 audit(1579652835.690:330): pid=15299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/62/file0/file0" dev="sda1" ino=17531 res=1 [ 590.727087][ T27] audit: type=1800 audit(1579652835.730:331): pid=15299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17531 res=0 00:27:16 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x600100, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@rand_addr=0x1ff, @empty, r1}, 0xc) r2 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000000c0)=""/4096) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x9) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001200)='/dev/full\x00', 0x400200, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000001240)=0x3, 0x8) r4 = openat(r0, &(0x7f0000001280)='./file0\x00', 0x80000, 0xc) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f00000012c0)=0x2008, 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000001300)="5e520d38442131fa0352d737c6e15601c4337f206a88aa44fcd0d3aabc282d61b7250c6a70833ccd224262f7bd43a40646729720d188aaef23c045d2690e9b4400d4f40b1873313b198650ad4633d3f9f72d7b2390ff50e1673916f44c16dccb9c8d7d6c0f5f6d5e41853512838857", 0x6f) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001380)='/proc/capi/capi20ncci\x00', 0x50b000, 0x0) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f00000013c0)={0x2b, @local, 0x4e22, 0x2, 'fo\x00', 0x1, 0x4, 0x4f}, 0x2c) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x38, r6, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x1c, 0x18, {0x8, @bearer=@l2={'eth', 0x3a, 'bridge_slave_1\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x400c085) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x200, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000001580)='/dev/audio\x00', 0x602000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001800)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002240)={0x0}, &(0x7f0000002280)=0xc) r11 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000022c0)={{{@in6, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f00000023c0)=0xe8) r13 = geteuid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003ac0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003b00)={0x0, 0x0}, &(0x7f0000003b40)=0xc) sendmsg$netlink(r0, &(0x7f0000004540)={&(0x7f00000015c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2}, 0xc, &(0x7f00000044c0)=[{&(0x7f0000001600)={0x188, 0x22, 0x200, 0x70bd26, 0x25dfdbff, "", [@typed={0x4, 0x44}, @typed={0xc, 0x7a, 0x0, 0x0, @u64}, @generic="6396943d5f90a5eb88487480a627768b90535409d295b5b860604155efd26d11bbefc1e7b2ea3c54134d8b7bffb24546ff27b25648c6a58e70254527268ebb89bff87e7396f1f391502ff0f0bc50e35c86046b78f06de155884701dc912c5a241f56fe74bb0a9dc822c83534e2de60b495f0d23243d5358f841932f91bc520d1fdbbedc9bb62872d6831b067a30fe01f856156ae7e46be7ca070c2b495de", @generic="ef49a26072cf363febeb4305f2d0dcc8ed01e22ef278e009de4c58191946d3b82df9229f7d0c1560b66116caa12dc7bd23031e406d5cfb7017cba823c4d96ab007bfbe8d396d23b11f43da8103f63da9008302b3c1de6a85c811cfa714f89c1b98ce75ed109c26a818fb94a3a8ad77b7e9e7428392639fe3b6c49811a67757f3ca6a4855e8728155eddead654f3fcb534125d46a3b42fb0d5641ad1687ae9abfbafd5e358ff34c63171b02b146afe3de0656db7aba637b6bb177786d5ad884acb0b9510053c8fb"]}, 0x188}, {&(0x7f00000017c0)={0x18, 0x36, 0x1, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0x27, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x18}, {&(0x7f0000001840)={0x9f0, 0x33, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x3d1, 0x62, 0x0, 0x1, [@typed={0x8, 0x90, 0x0, 0x0, @pid=r9}, @typed={0xa3, 0x1, 0x0, 0x0, @binary="9b4b27276dee915331a0e120a012d80f545a4a31529ef3ef728ea080f5b27e2b3dd5c6e274e5809311ff7a859e7a9070627da29f6373477d3e47eb6b6effc7375aae43079b7b8718e26bb8c4fe5d67d4d6fdec5d37a30ece7a9774bb2cccfbc37f8623633efe5e17373752eca2507dede4127a7343b56b20a6ecc4e0311ea0e4e669d700ba8ce6b60b285c57874c18d3272b660607521b068cd199dbe4b0cc"}, @generic="39543ab72f7d8f4fd1e15f2403c404a6878b0c01a8bd6b4fcb995d0caad8ce1fc8349a5c74082f5236bb3580ec91f971b048dd558e3f783a25eaa133c0df1181b8b0f2e017467d959c58e306096816fdc8226f58926c8906287d700a3dd6fe185b23cd50247d3a58e9c194e6633a71c9cd61618a718bcc64a504a9ec1d484b1381906ccf7b6cecd80ecbc4fff503bf0514628ca872b6db9b691bbe3720a1a6", @generic="a479af5fb61392c4a1a10bb502c529b4f43b948afb9f80615e1280fd705fea64ed38ff60868bd3e1f4609b1ff1d92c0efa3edf4f4e8145f82a659cfc62b5c748cec089a2887843c5173bd93342480f75583860163a04ec9c589f7b6d8bda718d5d029a28da88fa387b22481cc871d5c847861a4699910117904203091adf2141ef886d5935e4bc2571e1b85a92201f1cfd9573a66575b84c2bacc50b312b3be80729a4f7f0937c674c459209d09f16e16f4a2940f0cf39379caf8b3c58b017397afdd3f07ad280d8a1446de5aec5d2630f8e7f9a22c833458ed0e1602faf095a", @typed={0x8, 0x84, 0x0, 0x0, @u32=0x401}, @generic="7f9c43d770272a107fed3f8cc781113b4a2b53d434de8a7e82ce7765b1f154b39905315fedc93222f0577de6951cb42b0d778fb5b85cb24f0e53dad77bd87f553809ff1eca267e93d659c020fab965edc812b55aa8073c5fd5fd448716abf41188407a20c57fe1cfbdd02758c4f02514986cc072558cd9a42fe83f07f5765655a784bdb80145ac5bc7d0ec007ed907e8e90eeffca2bd764cd04a42e8db4d4d8b5484a00bdab9b9151e06d62725f2ca2db28e8c735612cb1284464275d8c37fdca16005efae10a4a809f350999ec7b98fc1b0985b9f738fe3df3b233b23bb3f3f456bdee44c1c3c0477fa6cbf", @generic="ed588368c67a62dbd1e0f7e7b05c1746b2f4c24757f0773cee76d8c2b33bde97ae89d77f49e0d83d27d8a25c971e340b1863c89b5e120bdda3daa69cc88a2f2bac9c5b9a17c2283afcf051b8075720e919d012207bd200a8c5d19fbfaa53e8c5586304cdfe14cde683a839e66893b1940056e4d0ed7b49aefa03b5a1be37756208a34ce11c2b7b81a6f871c563ec4febc595f9cad3f353fc388f94d6780755fde12988791e5420368588d5cb2adf"]}, @generic="54989f1f2b14181902727dd5c6ce199cdce50dfc0225945f0e883c2ccf194ee72cefc49ea58411a44410019d08d6d9db2738cad8157dd23bd7", @nested={0x1fc, 0x36, 0x0, 0x1, [@typed={0x14, 0x17, 0x0, 0x0, @ipv6=@rand_addr="c09da6ae5c2493f702332bfd24a6a4ae"}, @generic="c9ff11545308d92e5c0f8dea", @generic="0458470cdd7bcf66e8c0732fd51d31ed3e121d5a6b0eaedd993c69e0ccf7baa2753db52b472552f4dfe2e96af92258e9064b1e90d4cff0c2bef442b8a63fbecf96a4c358c46bd544f4a6db3e263edd6670e7c5aeeaa4ecdf2caab805cc06c831c97b1b53af8b29fb0ed4accee55e9e72fe75575a80a17af93c25ae832fa5a30b8c696b525187ab35ea28a74344d2b40cdf48f6c5e445bbf09be43de15cd4fef529599f2fae678f5e064939625bc6ddb9d24dec24feae51c43bdac13db8c868ce8ec4199abb6656458d9491dd6ce426a0e56ad3bab1bace4a5980d5e3", @typed={0xfa, 0x43, 0x0, 0x0, @binary="0845a99c76b77956bbcd63fabb1df4fd59afb3321805275699184d4f3fd7d5d42fa939334bbd9d8ea352d055f1e6d4960b9117801b13a264011129624d4015aa4ef4497820b5fd08fb319ce2fd3ac3f612ab7848a864cdd5f438e1eefb7aa81a81e584064c3230e32e34a85857ff365c1a5e1c74f0bc176466b608cd7ee3e2f6bd50a7c808ca10a9a9a2d76543a583da37c557a9ec6ff61f5a8fc4b67daf7b69ba4b0b5da18184d76b74aa4b13bf3a16df0f3ab827bc102b565c46c6b18977794611d46cd1b82a0acf02abca17d7a5107032abe76565dddd6dd52b97b0d973e973e6bd06aeb490b501f762643c21efb8477fcd06b2e6"}]}, @typed={0x4, 0x62}, @generic="7c85cfbcd75f45785bc57558e161c308445920cc73fe9a5f07c9c6fc1d29f1934fd973dd0682155b848876a420250b2ca4cb35e09c6b585c7abd30d40632550ef6bd06cf4a5f2638be5c", @nested={0x37d, 0x44, 0x0, 0x1, [@generic="50275d34ea61dc0002e00050ceb0f3b0419493362d78c0328cef65347a06c2021e90a3c5da4852a5c82527e9f291d3578c11a8d5c1ca4b1fdf8d908bcad5cf17a74014e6914e0861dae347517f6b2b793f4d1647c043a701186ea3d82b0f5bd4b615f74dfbee91c6430b749b2e645872bc8d719dbef33b987dc61ec662ce0c7e0657b64ac37c506b4b82f2307aede3af0c6c8add5a33c08d61ceb68ea89bed32a8754af7b8b2b049f76c7679f844c9dfe16974304281ae2a63", @generic="e4142dc22099a7d422a32f2a2e4ee706f2abe5074dbfd717d032948be2438c4eb530b86b9a14f2c869af168a8bf8c6dd5f9a7f391c403cf54fb38e8e4d3d5c08ecc54b78e7d6deb2141879c81a81b2d92dbe70cdec682c858a8479294f41b8d524fe5a2de48d5131c5d0cb90887ed63aca8698da833aa3462adb5a7b0816663c9441851dcfadc7a5debdfce802dcc75381dd81476050a5e1bb8587e950d55eef6b0050b07f8c80462bee784f596f6dda34456e7848a6d20eb162a49a93c2ef5692ecb4ff3ac5588246689513fec16ba1a19a946327f3c6ad691e0b1422c9326d9a3538ee0daded0eb4c5a76bd8758df1a588aa28ead0315a", @generic="f60fa9f6eef23e569d4bb2229f3a11", @generic="7aeda9085446d8aa86fe85b18f785ac2de285af06692a30efb7467cdd12af7f01f657c06fdaf86714dfaf06bd35e8c3b20ab4eb6a396abccf1aebfae50be056298bae1d7a89caabe6032a4276cf9db8b22c50cfafa326e684b70f64c87a2a31be39191480204dd433f11daa86af1f09bb522a26faa230332e0b46077fee18dd1170c2342638ce543076b245143ddc17de70d2d149b96d16ebe84904297868ac950252da05fb0914413c2adbfec21053ebfa4e8e1f7488c08ec6bac5704076dc0baace1e765434110e39a194c928874a08e4c367770b13ca33bd958fc727fe5f7691ab1d9c5ae783c23f5ae525bc6c0d97c4db80101", @generic="e11e2c48b4d55302834525524ab0122bbd50e09276aa021f1341507714d24d3061d0c10102fac4ddb50fa348d3159e0f98d9ce9b8e5e8bc5a7ad0d17f4", @typed={0x7, 0x1, 0x0, 0x0, @str='fo\x00'}, @generic="8277154021f0405d7b221c65909ef6056bbd4365345447579728297329b8b7df01802d3f634129e11284e7a73147c1016d9ff235077b89bff57ce96292823cefe43f446ed60414068d2fca2e1ff8e88edc73bc21b9803cca0cf8432fc03aec8469823a9b430f14bbc1d6cc82264a2bfb8d951e9645877e8b7ca98315fa6e6e"]}, @typed={0x7, 0x73, 0x0, 0x0, @str='!(\x00'}]}, 0x9f0}, {&(0x7f0000002400)={0x168c, 0x30, 0x523, 0x70bd27, 0x25dfdbfb, "", [@nested={0x30a, 0x81, 0x0, 0x1, [@generic="833f96492789a8c38bb4e2ea0c77fa40f70e3ae00c161d8d0f22a9d881c2234bfda78d9442f9370052985296c11c1a282d1667c2b2132cfef0a18ce2e91dce2a37df5c02c5b6709d0a0f99f23cde164341ebe6e3c0b15a0652ce1a1e49820f7ba2a7301253d802a34c2338447188dfeced26734ee74c319c94b14925d39bb030f22d8555d30befc7840ff7a185389ad4eec6e1ec36a5981a093bba341ef2d1cdab929096b65fdcb95d136e4c30d8d0d43070edf26f7b185fa6b76918917d03ac7c0ca994693e51278f493aa4af53c61a5afcd9bcb50af8", @typed={0x30, 0xd, 0x0, 0x0, @binary="650e2520e183f9e662bbbb41c76b2a0dbecfe9e0d42e377946fc819172bc47d3965a0f23c2d2c13c55495ace"}, @typed={0x8, 0x83, 0x0, 0x0, @pid=r10}, @generic="fafe4740abf9e95a03d2b34e0a9a53f2225afb465a5f1b970615af4315f3d693fb488b7a1871d3adc7d683de5a86adc5890e771303ece8de858f0f15f516ee34e791a8557042be71df9daa515a3b2c73ca839b31a0ca906b3c45e4363844c9a74bb0f052e36ee2d0f62855572206fc0d427c0008420d39845ecf0b44c1f29a369e201130ecbb", @typed={0xbe, 0x64, 0x0, 0x0, @binary="d0cb06dcabf9ade7eb647af228f359fdd1c172828021af2299097f478831c881220fe7d4db39a4c8ad4d273299827bd32d03c11420ed1bed3bdaa7462baef574f8da51864fe9b5896852feda429db14a12c32cc30945f953a6de351b03f52fbf67383257ea74d5a35cee921aded5230baed56453af2d8f0730ad64df2e7326e6b4ffbcb16148c3947b331909d00909cc98296aec16e84d6a001c068a1b26fb217ed2cbcb1161985c568b6137c1449325c0ca05864de3f9fffb13"}, @generic="58338e4fe30584b7a8dfef42a3f0fc498df2b1b298637ca3973b3585c31b2de77675e8cfafe6339840933264f01542da2385beebef26cdebdf6522d95fe03c1c461ac2b861fe0f49acde92a823e947f899bdb82d50f9e1f91888f92b3b4dc6f4ad02b39f08d6f4bb11608d8f3f2ab7011bf6fdadb5c76f4a60c85662edcea16da5faae54a4b7a47acaf538bbb578dfcd45cc0bc174415830a2c7f8b6445b2f2e4ebf3f396d9dae38a5ce6e7f55a8a58285"]}, @typed={0x8, 0x6, 0x0, 0x0, @uid=r11}, @generic="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", @generic="351cab0c9a0560fa6ac9b78c4e229eb167c687cd4d35898e9fa20a47f6f3878c4ebc051a8e5a4c71c83c771bb733fda623d878b105f38a61876a0872df7d6134196325546568ce9a80d7f681d219967895dab8256661df8076ba85c58a6634d60a28057e890c59f435af0f812e862b5ef6530ca7a3989b14173e7d6a01f4dde35362c00adc93bd52e8c97e265d1efdc123cb1038f9587e74366ddbe981f5807b0f04a6fd8dd42a750b87c8f5711bfa15c62ab63b05d605e37119bef8bb2e1e39bd1939d8f5bc60a1e57bff92ce7f9476ac99c8ae491520ccb0697c9ce48c2d0406747be204cb2f05854472a34b8efc86fea27ef33b4575", @nested={0x1f6, 0x96, 0x0, 0x1, [@generic="28a51f651c3a79a3227f0b95f7b74b682c28634bcc6417c9f08f6509c761ff7421f5e4d2c878c4d99edf1f38b2a28190d3bb7cc967baad26aadd1abb9550bf138563879c606ccc3a6dd4355fadf6e535b77ef2ff4211b927059bce766500aedc54410c5cb9b3738ba03a5c433b2cce809d0fc5529fa54ecb62ae6436ca8e3b232d730985648829f4eebc5ecb600bfab41137b6676ca198b51082bc", @generic="1e1648042e8d0baed6c25b507c5017d584b549f07af4bd4de21c5689caf558e32eafd29b2509a8e94c32f7ec4b259e6626def0bbaefaf653e4e3a0f7c0d0d085cccfe4db40dc297459896753d53e8eb7d8203cf66d944ceacd1d2d266dbc2a02", @typed={0x8f, 0x17, 0x0, 0x0, @binary="f8cfef98759e30df02f79053c7ee88ecef3b1de1a679e936d5cb0c635f04132ebea7e186e35b5d591d7481dea92be05b72e6872823a3a4f0fc2e24e2a6f0824627d9e608004f7dd53389f39a1a89bfccc2382e8d57e2129141518352faacda70b454bd6c28ccc735a9a17795ea58557dd2962de3d089e9d49a2b6911c368e1c5e61ae261ddee67b3d53366"}, @generic="cd3abfff796f200877a08402ed798e37e39c53027d3ad63baf660e0e81685c88e5b7b12622fe8a34d3fdd3e8f2fcf29e8410f5534e373a577633c01dbf27c99df9e12808f1c8e6e9cd4e6c4ddf1d6209fe15be92f351dd07dd34bf505fe13573e94855b99ebc7e"]}, @generic="7195139e4167d2f12deae207c16e8b1d6ad284b4fe0dd132b86ab7f8b4f1f5ad6a887fbebab2585312b2e51ee02d2f106d90cba2330e8aead0d83b2240b1e32f7053ffbe7483af214622e337739a19f6337892c536a78d6b", @nested={0x20, 0x11, 0x0, 0x1, [@typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x66, 0x0, 0x0, @uid=r12}]}]}, 0x168c}, {&(0x7f0000003b80)={0x44c, 0x2a, 0x400, 0x70bd26, 0x25dfdbfc, "", [@nested={0x2ad, 0x5, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @uid=r13}, @generic="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", @typed={0x8, 0x77, 0x0, 0x0, @pid=r14}, @generic="e2823c781be3c0bbc4bba323af51be2337a88773cb1182198c7a59864649474579c1d684ab233ca060822ac888d96c6ba67ae2df124c30d2e7e9823bf876b8c82e287fa1ee5ba0f7e18d3cdefa7773d24089623c9a0995fe207f88012ad4c2e44b6983bd0dbf2bf6996182e128d69940c1e40e475f3cbbd34c90b3ccab50cdbb693c56ff06e0468f2fdefe2802e751fc9a6469e5ffdad71b07c7b1e0be3deaf3370dc25b0cd7a6ef2a2cb103bc819e5e504cdc420a634f67ca14c94c254d5e4e1293f4c74a7b9b309740b3d5ed88661cca7e7da1cab6655a6d281406309516720483053a2be3326d40a910041191a4d0eca5aa0c", @generic="a44f4b94835955bdd4d75b93e6a0a64efb1635cbd95aa469dbf495a89c7eb710a871a96acac2aac8a1b8f3bd069dd16c846d3dd4e99f8e556706fbcee01b914c2e7e5525c66182ff09e4dd39418015080b57765ce7e95971501275dc9527e920e22be43417fc99ac2ee0251e902160", @generic="d08922e3613f0152728cc143fcf98b21d8b58851c1932226ae59d6673d", @generic="4d31b352b3613713418db8bed6b9e20327f0a84e68dafc4174f473654068"]}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@rand_addr=0x3f}, @nested={0x5c, 0x60, 0x0, 0x1, [@generic="722b7d3a3f15200fccd94776568ba172f92e1e1a27ff99be3365d9f99b013310f69d13c7d0c33aad0d83744f6b2a6f62befdc13cdbb04fe640ed6328798eaa6e0d4e5a952513494b29b023c345a70151669a542cb3149035"]}, @nested={0x59, 0x5f, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @uid=r15}, @generic="1e638e658ee80f3edbdeba0379a1d443b9a480fe4d54d24eedf878e8a5e49dcf07e368bbbce4d76798eaa2a37a1e0c7757d06c2ba6b8c329f738e4809d590e4ba03e62be2c", @generic="8d6b23970fb83fa0"]}, @nested={0xcc, 0x91, 0x0, 0x1, [@generic="05ea1fc13a1a85a4b08e7dfa3e89e2dc2d147c30c8835d197eb4566aa251ca386e5f946ca6fa0f0948f8b6784a2a7ea17a8a62262e95ba903f1c00565b092674", @generic="c4f5c982840dff73964f6da0ab7bc071faead520892bcf1153fcaea1016ee7f0001c4d0e181dbab235a8b877f2c6b3f7cc5c61ed8aed5dc5e7594764761a9589b88265d3a954de469a0d4ebe874051ef5a56fcbd35634a6a0df38398638d3469bfff58f1892a5780ef84a9923fc977b84c396543a2247b8408ff8fd7a01d1448e9d942e97aeb6baf"]}]}, 0x44c}, {&(0x7f0000004000)={0x47c, 0x1e, 0x200, 0x70bd29, 0x25dfdbff, "", [@nested={0x3f7, 0x79, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @u32=0x80000001}, @generic="3441f97fa4570284ccf01a3fa435d2ef0f8c5c5a6bff1176bb311bf5eadac1b150f6c4297fc1c020288ecca968dfb03586ce6878b055cc3dc45e41d74749fef2ba385f30171cccf662c0373d76f8723fdcf9a2998b54e9a4a9ee7f95c8206b7cc9bcb23bd8", @generic="292b174fa791da309024966556051f26234a96a003abfc2a9f2fcf9def178d8eb8d69d8dd2431312ac7307eabfba51478c6d1ecc816f1058ee8242eec3d2eff366813b33a1d911986e53ad23", @generic="8506a6cf8b56ec70a4352cc2d57ea16e7be33e05f6fd0b201e901f0350ae61ddad856b8c9ef71c48bbfffd7b7080b87b26ca0e71cbaf3f8a", @generic="5961cd97a1674f49d750f3b40311facc77abe8400870d1f02eddf235a0f20a18dfc98688bfbe40b0c781d88ed7766a2e98d4b13c6b3c1c74f445ed23bf414ea90510cabd247e4d622bd537d40247453f0e0900da7fd7ba54bed5bac35d5dc055a99f36013c8e307d46dcee05756c7e65db7fc7a0d0196d2c", @generic="7c77d51e1a86ebaa3754acf3243a20989f4852", @generic="38dfe0674554b90426e020ac5385a956441c7da051848158219ad2b6a9621a14b265802c4c31628ea7f8518164559c23445caac3f00fb48f53515b8c474026cba0e9d4e105e167945978b4b258fe7c9038ef142a26fd4812af4adc52bb2bdfdd8a91ff5138048128c201428756af8296defeb5213b252200fbf606c07976ce0b982a444feda1b58d7a756e390b118aa317c8fd88f24a13d9a9c85ee42a8321a7e663", @generic="1ab6895cef0f49e69e528a7935a99a2dcec929864fffedf0f16a583922cc7e85465f7a011e45552de9ad6eaa92725d1c334859fbfdc328929fbad44ef63985087e4bbdea11c0f584f9dbbf477ed8168c4b89223772d52ec7cce34405ad6a587c3bc0cea3ff48d5ce20e333528dac1e2ca496914c70de12668be4d96d61e9730311bcbfcf190d1193a205b39f064f24d53bb1f756c863cd4a2008d7fb049df7ed1c260336e52b8c1d6bd68c21a509fb054f7708970575df5287cd1a80507da2e3fc9bd6e5f25eeeff2f32c99d45e347dda5224eaa32129a75d8f27059b1eda887bc6055a2d4079e2ecc24f22c8262ca5694", @generic="67e6136e37d35f22b836786b314f09d6b4e97c75498671554840fe9b5da754807838cb48e41ac20b31b1cf643c4095d8c6d9f111694acb25d0c334cdcf1daf6db5215650fa605857eb9ae32f0c61254b309eb533aa7e835ad6b6f7c6b946cd9678e9375fb392af7183e915320040cf0f5a31177c71d2f30ec3d2e9a6df6695057802901b0e2fed342c0d84d880626b4b0fcd3cd3bb3584106f9d78a4805898add48e7a90f87d847b40d769920288490bd34039ec65a7f38133594aeb1257469bd62d7e07d80e0e6c010d4f50bf539ee8b7b1c964fbde1237fef1ce266455bc70b7a90750"]}, @generic="2f794034ca47fbb476ef11fc36cd0474deb73c4bb4a7fd604edf5597c4dc006467abbe28cab999193e12ebc80c4f37e35d75b443ff54b206a4a754261103559978031d856a56c2ff8e7acb7bf8c0c052ecf4863c3b8bdf865368df74e3f56a20b1d5835d9825dcef2d68da9e782054738d"]}, 0x47c}, {&(0x7f0000004480)={0x28, 0x18, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@generic="e4fc29c61e0f472208e7c90b15db42582f055967b44ace"]}, 0x28}], 0x7}, 0x800) io_setup(0x9fe, &(0x7f0000004580)=0x0) r17 = syz_open_dev$mice(&(0x7f00000045c0)='/dev/input/mice\x00', 0x0, 0x80080) io_cancel(r16, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x8, 0x3, r17, &(0x7f0000004600)="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", 0x1000, 0x7fffffff, 0x0, 0x2, r7}, &(0x7f0000005640)) 00:27:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 591.251383][T15328] FAT-fs (loop3): bogus number of reserved sectors [ 591.276898][T15328] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000007961e62273faa6884c44825cc4f142133d4a1cac53819fda"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000006500080028bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="06000400ff02010100"/20], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc050) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030700009e15f04f031fffffe100004000638477fbac14143fe0004301c699da153f08a0e6e380f60106f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 00:27:16 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000002c0)) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0x3224, 0xc, 0x4, 0x0, 0x100, {r2, r3/1000+30000}, {0x2, 0x1, 0x3f, 0x20, 0x68, 0x7f, "7e3b0cf5"}, 0xfffffe00, 0x2, @fd, 0x7fff, 0x0, r1}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) accept$packet(r0, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x741, 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)={0x9, 0x7fff, 0xffff}) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) 00:27:16 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:27:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:16 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000100), 0x4) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000900)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) getsockopt$inet_dccp_buf(r3, 0x21, 0x2, &(0x7f00000005c0)=""/75, &(0x7f0000000640)=0x4b) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r2, r4, 0x0, 0x102000003) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3f, 0x800}, &(0x7f00000000c0)=0x8) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5522, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SETINTERFACE(r6, 0x5522, 0x0) write$binfmt_misc(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a7893dba66977f4943fd91b06000000000000001ab8b7cd3daa4f0a1408449cf3fd239aa7e805136a2faa05ac590890f2c5deef90ed7edecfe24ed1f7838c879d147b9292d68771707a3714e60227a12a859d3c8a4d9eb5a2db621699a2a16b7d53530ce901000000de1937e5eaba125486027a382ba7c70e8155b86923d312fa81c758d4d24036e752880d6890c1d28c1a79055b52cd493099e2a832bdc693d11d444640cd5c591388ac8cb4cb00"], 0xa9) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000000)={0xe0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="cc74858c8cfa66b846008ee0deee39560e0f00d348b809000000000000000f2376430f01c10f23f8b9910b00003e660feeafce45102260e322742274420fc732665808000f00d045d2e0", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000940)=ANY=[@ANYBLOB="008e00000100ffff2000000000000000", @ANYRESOCT=r9, @ANYBLOB="f800000000000000080000002100000045000000ff7f0000", @ANYPTR=&(0x7f0000000180)=ANY=[], @ANYBLOB="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"]) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000540), &(0x7f0000000580)=0x2) 00:27:16 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 591.817201][T15350] IPVS: ftp: loaded support on port[0] = 21 [ 591.895911][T15339] XFS (loop1): Mounting V4 Filesystem [ 592.027916][ T27] audit: type=1804 audit(1579652837.070:332): pid=15333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/63/file0/file0" dev="sda1" ino=17538 res=1 [ 592.063871][T15339] XFS (loop1): totally zeroed log [ 592.081178][T15339] XFS (loop1): Metadata corruption detected at xfs_agi_verify+0x264/0x360, xfs_agi block 0x2 [ 592.092748][T15339] XFS (loop1): Unmount and run xfs_repair [ 592.098887][T15339] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 592.106787][T15339] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 592.116188][T15339] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 592.126303][T15339] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 592.141550][T15339] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 592.156463][T15339] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 592.172349][T15339] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 592.189586][T15339] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 592.224788][T15339] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00:27:17 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:27:17 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:17 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000100), 0x4) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000900)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) getsockopt$inet_dccp_buf(r3, 0x21, 0x2, &(0x7f00000005c0)=""/75, &(0x7f0000000640)=0x4b) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r2, r4, 0x0, 0x102000003) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3f, 0x800}, &(0x7f00000000c0)=0x8) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5522, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SETINTERFACE(r6, 0x5522, 0x0) write$binfmt_misc(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a7893dba66977f4943fd91b06000000000000001ab8b7cd3daa4f0a1408449cf3fd239aa7e805136a2faa05ac590890f2c5deef90ed7edecfe24ed1f7838c879d147b9292d68771707a3714e60227a12a859d3c8a4d9eb5a2db621699a2a16b7d53530ce901000000de1937e5eaba125486027a382ba7c70e8155b86923d312fa81c758d4d24036e752880d6890c1d28c1a79055b52cd493099e2a832bdc693d11d444640cd5c591388ac8cb4cb00"], 0xa9) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000000)={0xe0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="cc74858c8cfa66b846008ee0deee39560e0f00d348b809000000000000000f2376430f01c10f23f8b9910b00003e660feeafce45102260e322742274420fc732665808000f00d045d2e0", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000940)=ANY=[@ANYBLOB="008e00000100ffff2000000000000000", @ANYRESOCT=r9, @ANYBLOB="f800000000000000080000002100000045000000ff7f0000", @ANYPTR=&(0x7f0000000180)=ANY=[], @ANYBLOB="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"]) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000540), &(0x7f0000000580)=0x2) [ 592.263038][T15339] XFS (loop1): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 592.332794][T15339] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 592.372929][T15339] XFS (loop1): Failed to read root inode 0xd88, error 117 [ 592.464748][T15376] IPVS: ftp: loaded support on port[0] = 21 00:27:17 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000002c0)) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0x3224, 0xc, 0x4, 0x0, 0x100, {r2, r3/1000+30000}, {0x2, 0x1, 0x3f, 0x20, 0x68, 0x7f, "7e3b0cf5"}, 0xfffffe00, 0x2, @fd, 0x7fff, 0x0, r1}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) accept$packet(r0, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x741, 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)={0x9, 0x7fff, 0xffff}) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) 00:27:17 executing program 4: ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 593.196990][T15391] XFS (loop1): Mounting V4 Filesystem [ 593.256063][T15391] XFS (loop1): totally zeroed log [ 593.284943][T15391] XFS (loop1): Metadata corruption detected at xfs_agi_verify+0x264/0x360, xfs_agi block 0x2 [ 593.312759][T15391] XFS (loop1): Unmount and run xfs_repair [ 593.357484][T15391] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 593.413013][T15391] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 593.432970][T15391] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 593.452792][T15391] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 593.482930][T15391] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 593.514715][T15391] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 593.552843][T15391] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 593.561915][T15391] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 593.575390][T15391] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 593.592788][T15391] XFS (loop1): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 593.612858][T15391] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 593.622397][T15391] XFS (loop1): Failed to read root inode 0xd88, error 117 [ 593.993559][ T21] tipc: TX() has been purged, node left! 00:27:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:19 executing program 4: ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ptmx\x00', 0x4400, 0x0) dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000500)={0x0, 0xeeb9}, 0x8) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r7 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x80082102, &(0x7f0000000540)=r8) ioprio_set$uid(0x3, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x10) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000005c0)=0x1, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:27:19 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:27:19 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:27:19 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f00000002c0)) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0x3224, 0xc, 0x4, 0x0, 0x100, {r2, r3/1000+30000}, {0x2, 0x1, 0x3f, 0x20, 0x68, 0x7f, "7e3b0cf5"}, 0xfffffe00, 0x2, @fd, 0x7fff, 0x0, r1}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) accept$packet(r0, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x741, 0x8}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000000)={0x9, 0x7fff, 0xffff}) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) [ 594.106133][T15411] IPVS: ftp: loaded support on port[0] = 21 [ 594.116032][T15412] IPVS: ftp: loaded support on port[0] = 21 [ 594.142678][ T21] tipc: TX() has been purged, node left! [ 594.157224][ T21] tipc: TX() has been purged, node left! [ 594.178022][ T21] tipc: TX() has been purged, node left! 00:27:19 executing program 4: ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 594.216081][ T21] tipc: TX() has been purged, node left! [ 594.342369][T15413] XFS (loop1): Mounting V4 Filesystem 00:27:19 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 594.389637][T15413] XFS (loop1): totally zeroed log [ 594.454738][T15413] XFS (loop1): Metadata corruption detected at xfs_agi_verify+0x264/0x360, xfs_agi block 0x2 [ 594.477141][T15420] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 594.512795][T15413] XFS (loop1): Unmount and run xfs_repair [ 594.543099][T15413] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 594.613473][T15413] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 594.645307][T15413] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 594.656481][T15413] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 594.677827][T15413] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 594.690796][T15413] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 594.701577][T15413] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 594.722216][T15413] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 594.734909][T15413] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 594.798566][T15413] XFS (loop1): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 594.832935][T15413] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 00:27:19 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 594.843240][T15439] FAT-fs (loop3): bogus number of reserved sectors [ 594.865327][T15413] XFS (loop1): Failed to read root inode 0xd88, error 117 [ 594.869864][T15439] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:20 executing program 0: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) quotactl(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 00:27:20 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:20 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) [ 595.431426][T15457] fuse: Unknown parameter '0x0000000000000004' [ 595.479129][T15459] fuse: Unknown parameter '0x0000000000000004' [ 595.596850][T15462] IPVS: ftp: loaded support on port[0] = 21 [ 595.689606][ T27] audit: type=1804 audit(1579652840.730:333): pid=15439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/64/file0/file0" dev="sda1" ino=16994 res=1 [ 595.823954][ T27] audit: type=1800 audit(1579652840.770:334): pid=15439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16994 res=0 00:27:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:21 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x208000) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0xa92, 0xa, 0x3}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 00:27:21 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x8, &(0x7f0000000000)=[{0x9, 0x0, 0x8, 0xfff3}, {0x71, 0x2c, 0x2, 0x3}, {0x0, 0x7f, 0x8, 0x3f}, {0x74, 0x6, 0x3, 0x9}, {0x4, 0x6, 0x5, 0x1f}, {0x8, 0x0, 0x81, 0x8}, {0x40, 0x6, 0x5, 0xffffffc0}, {0xff, 0x6, 0x20, 0x800}]}) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x3008042, 0x0) 00:27:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) lremovexattr(&(0x7f0000000200)='./bus/file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='s']) 00:27:21 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:21 executing program 2: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./control\x00') renameat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000009000)='./control\x00') name_to_handle_at(r0, &(0x7f0000000040)='./control\x00', &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], &(0x7f000091bffc), 0x0) [ 596.371579][T15477] overlayfs: failed to resolve './file0': -2 [ 596.403380][T15477] overlayfs: failed to resolve './file0': -2 00:27:21 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 596.426295][T15479] FAT-fs (loop3): bogus number of reserved sectors [ 596.462558][T15479] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:21 executing program 0: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001003360b703002097f86b006a0a00fe00000000850000000d000000b70000000000000095000000000000007961e62273faa6884c44825cc4f142133d4a1cac53819fda"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030700009e40f088641fffffe100004000638477fbac14143fe0004301c699da153f08a0e6e380f60106f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000180)={0xde, 0x8, 0x8, 0x78, &(0x7f0000000100)=""/120, 0x87, &(0x7f0000000380)=""/135, 0xfb, &(0x7f00000005c0)=""/251}) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) read$char_usb(r3, &(0x7f0000000a00)=""/4096, 0x1000) 00:27:21 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, 0x0) [ 597.188077][ T27] audit: type=1804 audit(1579652842.230:335): pid=15487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/65/file0/file0" dev="sda1" ino=16945 res=1 00:27:22 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 597.287665][ T27] audit: type=1800 audit(1579652842.260:336): pid=15487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16945 res=0 [ 597.337700][T15505] IPVS: ftp: loaded support on port[0] = 21 00:27:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000240), 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:22 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000580), 0x8}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') unshare(0x40000000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x10, 0x0, 0x25dfdbff, {0x1, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x2}, @CTA_MARK={0x8, 0x8, 0xfffeffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40804) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x1000000) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, &(0x7f0000000100)=0x54) r2 = socket(0x10, 0x0, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x16c0, &(0x7f0000003700)={0x77359400}) r3 = socket(0x10, 0x0, 0x0) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x16c0, &(0x7f0000003700)={0x77359400}) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000001fc0)=ANY=[@ANYRES32]) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x22, 0x80005, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, &(0x7f0000000500)) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000540), 0x4) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000400)={'filter\x00'}, &(0x7f0000000480)=0x44) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:27:22 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, 0x0) 00:27:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r2, 0x4, 0x80000000002c00) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr, 0x80000000}, 0x1c) perf_event_open(&(0x7f0000000500)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) listen(r1, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x400, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r5, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44005) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x2f}, 0xfffffffe}, 0x1c) dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) r6 = dup2(r0, r1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) socket$l2tp(0x2, 0x2, 0x73) r7 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) accept$netrom(r4, &(0x7f0000000400)={{0x3, @bcast}, [@rose, @netrom, @null, @rose, @bcast, @remote, @rose, @bcast]}, &(0x7f0000000480)=0x48) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000140)=0xfc84) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r8, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r8, 0x4, 0x80000000002c00) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{}, "502b9fdf57dcfe21", "4efef0cd78ac24d9d43071201668cd682130965022e378a8a5a7f1e9e3f732bb", "cb5d5d48", "03c24f2d9cca3439"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff5d, 0x0, 0x0, 0x0) 00:27:22 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, 0x0) [ 597.806537][T15510] IPVS: ftp: loaded support on port[0] = 21 [ 597.921463][T15520] FAT-fs (loop3): bogus number of reserved sectors [ 597.958524][T15520] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:23 executing program 2: modify_ldt$write(0x1, &(0x7f00000000c0)={0x1000, 0x100000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x24080) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0xfffffffeffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r2, r1, 0x0, 0x800000080000010) 00:27:23 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 598.443116][T15530] FAULT_INJECTION: forcing a failure. [ 598.443116][T15530] name failslab, interval 1, probability 0, space 0, times 1 [ 598.528720][T15530] CPU: 0 PID: 15530 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 598.537631][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.547854][T15530] Call Trace: [ 598.551235][T15530] dump_stack+0x11d/0x181 [ 598.555599][T15530] should_fail.cold+0xa/0x1a [ 598.560295][T15530] __should_failslab+0xee/0x130 [ 598.565184][T15530] should_failslab+0x9/0x14 [ 598.569750][T15530] __kmalloc+0x53/0x690 [ 598.574008][T15530] ? terminate_walk+0x1d0/0x250 [ 598.578920][T15530] ? tomoyo_realpath_from_path+0x83/0x4c0 [ 598.584760][T15530] tomoyo_realpath_from_path+0x83/0x4c0 [ 598.590787][T15530] ? tomoyo_get_mode.part.0+0x5c/0xb0 [ 598.596283][T15530] tomoyo_path_number_perm+0x10a/0x3c0 [ 598.602040][T15530] ? __fget+0xb8/0x1d0 [ 598.606133][T15530] tomoyo_file_ioctl+0x2c/0x40 [ 598.611029][T15530] security_file_ioctl+0x6d/0xa0 [ 598.616074][T15530] ksys_ioctl+0x64/0xe0 [ 598.620508][T15530] __x64_sys_ioctl+0x4c/0x60 [ 598.625336][T15530] do_syscall_64+0xcc/0x3a0 [ 598.629997][T15530] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 598.636056][T15530] RIP: 0033:0x45b349 [ 598.639982][T15530] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 598.659610][T15530] RSP: 002b:00007f602d385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.668494][T15530] RAX: ffffffffffffffda RBX: 00007f602d3866d4 RCX: 000000000045b349 [ 598.676683][T15530] RDX: 0000000020000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 598.684888][T15530] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 598.693843][T15530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 598.702173][T15530] R13: 000000000000046d R14: 00000000004c5e04 R15: 0000000000000000 [ 598.718950][ T27] audit: type=1804 audit(1579652843.760:337): pid=15524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/66/file0/file0" dev="sda1" ino=17377 res=1 00:27:23 executing program 2: recvfrom$x25(0xffffffffffffffff, &(0x7f0000000200)=""/223, 0xdf, 0x0, &(0x7f0000000080)={0x9, @remote={[], 0x1}}, 0x12) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000000001004d010200000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x3, 0x5, 0x4, 0x8, 0x80000001, {0x0, 0x7530}, {0x1, 0x5155da812ccdefd0, 0x6, 0x1, 0x0, 0x5, "6528a10f"}, 0x4, 0x1, @fd, 0x7ff, 0x0, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0x101002, 0x0) recvfrom$ax25(r2, &(0x7f0000000440)=""/244, 0xf4, 0x2020, &(0x7f0000000540)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}, 0x48) r3 = open(&(0x7f0000000600)='./file0/file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vga_arbiter\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000380)='./file0\x00', r4, &(0x7f00000003c0)='./file0\x00') ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x0, 0x9, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9e0901, 0x7, [], @ptr=0xf}}) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) [ 598.816681][T15530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 598.867599][ T27] audit: type=1800 audit(1579652843.760:338): pid=15524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17377 res=0 [ 599.002902][ T21] tipc: TX() has been purged, node left! 00:27:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000240), 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:24 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 599.172664][ T21] tipc: TX() has been purged, node left! 00:27:24 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 599.334046][T15544] FAT-fs (loop3): bogus number of reserved sectors [ 599.361593][ T21] tipc: TX() has been purged, node left! [ 599.362779][T15544] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:24 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 599.518279][T15550] FAULT_INJECTION: forcing a failure. [ 599.518279][T15550] name failslab, interval 1, probability 0, space 0, times 0 [ 599.573673][T15553] IPVS: ftp: loaded support on port[0] = 21 [ 599.624293][T15555] IPVS: ftp: loaded support on port[0] = 21 [ 599.672734][T15550] CPU: 0 PID: 15550 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 599.681476][T15550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 599.691718][T15550] Call Trace: [ 599.695033][T15550] dump_stack+0x11d/0x181 [ 599.699466][T15550] should_fail.cold+0xa/0x1a [ 599.704090][T15550] __should_failslab+0xee/0x130 [ 599.708991][T15550] should_failslab+0x9/0x14 [ 599.713780][T15550] __kmalloc+0x53/0x690 [ 599.718199][T15550] ? tomoyo_encode2.part.0+0xd9/0x260 [ 599.723748][T15550] tomoyo_encode2.part.0+0xd9/0x260 [ 599.728995][T15550] tomoyo_encode+0x34/0x50 [ 599.733608][T15550] tomoyo_realpath_from_path+0x14a/0x4c0 [ 599.739286][T15550] tomoyo_path_number_perm+0x10a/0x3c0 [ 599.745245][T15550] ? __fget+0xb8/0x1d0 [ 599.749580][T15550] tomoyo_file_ioctl+0x2c/0x40 [ 599.754444][T15550] security_file_ioctl+0x6d/0xa0 [ 599.759411][T15550] ksys_ioctl+0x64/0xe0 [ 599.763808][T15550] __x64_sys_ioctl+0x4c/0x60 [ 599.768565][T15550] do_syscall_64+0xcc/0x3a0 [ 599.773158][T15550] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 599.779160][T15550] RIP: 0033:0x45b349 [ 599.783089][T15550] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 599.802862][T15550] RSP: 002b:00007f602d385c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.811349][T15550] RAX: ffffffffffffffda RBX: 00007f602d3866d4 RCX: 000000000045b349 [ 599.820298][T15550] RDX: 0000000020000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 599.828456][T15550] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 599.836649][T15550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 599.844812][T15550] R13: 000000000000046d R14: 00000000004c5e04 R15: 0000000000000001 [ 600.032770][T15550] ERROR: Out of memory at tomoyo_realpath_from_path. [ 600.150020][ T27] audit: type=1804 audit(1579652845.190:339): pid=15544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/67/file0/file0" dev="sda1" ino=16849 res=1 00:27:25 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 600.298539][ T27] audit: type=1800 audit(1579652845.230:340): pid=15544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16849 res=0 00:27:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x19, 0x4) 00:27:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000240), 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:26 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 601.386092][T15568] FAT-fs (loop3): bogus number of reserved sectors [ 601.446056][T15568] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000002c0)) fchown(0xffffffffffffffff, 0x0, 0x0) socket(0x27, 0x80009, 0x8) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f30303030303030305c715cd3410a4b09583030303030363030303000"/41, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xfffffffffffffffb, &(0x7f00000005c0)="22167ed5e682420dc0468cbfbeadd4208d57b7c964b1f73d7d5f855409663eb399ee722b1687c00a5c6494e26d7b5134dde06ae6e756ae33ac2ede24b76b66bc574707fafef66aeaf0dd46d4a301cf8cb443b79cf783daef00c86119f0b2be5f7fa044742388a0a9740cacf1119ae090061e6cdf916aa51952d015631c6c20361cfd953c17ad50acd1a546a4bfad4002cb817147dfbe3275abb0a4658dfc0e6857808434b3b55a0ce755bab3d3a9a04d1b6cd65bef164f656353a24974fa1e9bd735f2b5797c5d51058ef7483f92d9c18907dea5c8c49cedf6f917e6e73134d3fee522769f91cf3ce9bd6351dce25d4f730c53d2d07eced9f9") bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) keyctl$session_to_parent(0x12) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r2, 0x4, 0x80000000002c00) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r3, 0x4, 0x80000000002c00) getpeername(r3, &(0x7f0000000300)=@can, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @rand_addr="550900002b07143e97f49be43600", 0x0, 0x204, 0x0, 0x90ff87ab671db945, 0x4}) 00:27:26 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:26 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 601.687723][T15576] fuse: Bad value for 'fd' [ 601.928682][T15584] IPVS: ftp: loaded support on port[0] = 21 00:27:27 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x10, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 602.100016][ T27] audit: type=1804 audit(1579652847.140:341): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/68/file0/file0" dev="sda1" ino=17541 res=1 [ 602.139042][T15577] fuse: Bad value for 'fd' [ 602.186489][ T27] audit: type=1800 audit(1579652847.140:342): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17541 res=0 00:27:27 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x2275, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:27 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:27 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x2403, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:27 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x2405, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 602.624026][T15597] IPVS: ftp: loaded support on port[0] = 21 [ 602.726765][T15601] FAT-fs (loop3): bogus number of reserved sectors [ 602.777113][T15601] FAT-fs (loop3): Can't find a valid FAT filesystem [ 602.834754][ T21] tipc: TX() has been purged, node left! [ 602.849621][ T21] tipc: TX() has been purged, node left! [ 602.862525][ T21] tipc: TX() has been purged, node left! [ 602.914329][ T21] tipc: TX() has been purged, node left! 00:27:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:28 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x4c00, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:28 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 603.324865][T15615] IPVS: ftp: loaded support on port[0] = 21 00:27:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:28 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x4c01, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 603.493170][ T27] audit: type=1800 audit(1579652848.540:343): pid=15601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16499 res=0 00:27:28 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x4c80, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:28 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x4c81, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x5411, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 604.046641][T15626] FAT-fs (loop3): bogus number of reserved sectors [ 604.090469][T15626] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:29 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x2403, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x541b, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:29 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x2403, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x541c, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:29 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:29 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x2403, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 604.851308][ T27] audit: type=1804 audit(1579652849.890:344): pid=15626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/70/file0/file0" dev="sda1" ino=17550 res=1 [ 604.874690][T15647] IPVS: ftp: loaded support on port[0] = 21 [ 604.969223][ T27] audit: type=1800 audit(1579652849.890:345): pid=15626 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17550 res=0 [ 606.992691][ T21] tipc: TX() has been purged, node left! [ 607.135624][ T21] tipc: TX() has been purged, node left! [ 607.282720][ T21] tipc: TX() has been purged, node left! [ 607.412748][ T21] tipc: TX() has been purged, node left! [ 607.616130][ T21] tipc: TX() has been purged, node left! [ 607.647506][T15675] IPVS: ftp: loaded support on port[0] = 21 [ 608.118079][T15675] chnl_net:caif_netlink_parms(): no params data found [ 608.316230][T15675] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.336293][T15675] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.363549][T15675] device bridge_slave_0 entered promiscuous mode [ 608.972755][T15675] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.980013][T15675] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.013562][T15675] device bridge_slave_1 entered promiscuous mode [ 609.149716][T15675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.294633][T15675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.503985][T15675] team0: Port device team_slave_0 added [ 609.511071][T15675] team0: Port device team_slave_1 added [ 609.613621][T15675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.620688][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.646764][T15675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.658511][T15675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.666027][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.693208][T15675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.808926][T15675] device hsr_slave_0 entered promiscuous mode [ 609.863325][T15675] device hsr_slave_1 entered promiscuous mode [ 609.912756][T15675] debugfs: Directory 'hsr0' with parent '/' already present! [ 610.160635][T15675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.212888][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 610.224423][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.234566][T15675] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.251018][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 610.260177][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.273214][T14443] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.280278][T14443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.339383][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 610.361535][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.386265][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.404857][T13587] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.411951][T13587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.440400][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 610.518791][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 610.536573][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 610.564815][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 610.584973][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 610.604953][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 610.638553][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 610.648747][T14443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 610.714210][T15675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.730536][T15675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 610.739344][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 610.747916][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 610.756425][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 610.821112][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 610.828850][ T8049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 610.840403][T15675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.005911][T14442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 611.015472][T14442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 611.028284][T15675] device veth0_vlan entered promiscuous mode [ 611.035666][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 611.044548][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 611.054180][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 611.062117][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 611.097308][T15675] device veth1_vlan entered promiscuous mode [ 611.114755][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 611.123405][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 611.131461][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 611.140549][T13587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 611.196818][T15675] device veth0_macvtap entered promiscuous mode [ 611.206602][T15675] device veth1_macvtap entered promiscuous mode [ 611.221417][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 611.231951][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.242127][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 611.252669][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.262487][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 611.273812][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.283708][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 611.294224][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.304095][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 611.314937][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.324983][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 611.335580][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.349264][T15675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.360012][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 611.370492][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.380485][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 611.391010][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.401062][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 611.411729][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.421590][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 611.432433][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.442431][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 611.453036][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.463117][T15675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 611.473636][T15675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.485097][T15675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.494167][T14442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 611.504024][T14442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 611.512081][T14442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 611.521246][T14442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.530372][T14442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 611.539259][T14442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 611.669463][T15693] IPVS: ftp: loaded support on port[0] = 21 [ 611.945960][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.953624][ T21] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.961307][ T21] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.969003][ T21] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.977126][ T21] device bridge_slave_1 left promiscuous mode [ 611.987135][ T21] bridge0: port 2(bridge_slave_1) entered disabled state 00:27:37 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:37 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x5421, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:37 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:37 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:37 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:37 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x81}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000100)={r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) fcntl$setsig(r2, 0xa, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000200)='./bus\x00', 0x1, 0x1, &(0x7f0000000240)=[{&(0x7f0000000500)="bfbb79202c095615da38534b07ad9732e15db73679a6036fcc4da09deaba7159724753d2d3082c94168071f3bd0f362da5029840c9ad15f87431c2fa236ca064424e76a8beab51e499480fc5871e30d487f3c52353e45c3202be3e7b71d79dddb54ddacdaef41f28519bf4f473e51b977fc697b16cd7c330958224c7cfb20f780981eab953d3a9f27e5427a0cf31d65351ff69c545185f0187a1c911c059c80f2fa040edaf3996063de6ca45c649b85c72df045dd297cbc86e4d716d10f8e3ed25ceb1c8f010ef5e1b1ef3adf370ab93ce955552a7ac63dabf23a062483cc83426666a8c6291dad2e585d2b1fac09b6bcc780a", 0xf3, 0x8}], 0x20000, &(0x7f0000000880)={[], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_lt={'euid<', r5}}, {@permit_directio='permit_directio'}]}) setsockopt$inet6_buf(r4, 0x29, 0x2c, &(0x7f0000000140)="19f00702000000", 0x7) fcntl$setstatus(r4, 0x4, 0x80000000002c00) ftruncate(r4, 0x51) getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000000)=""/101, &(0x7f0000000080)=0x65) write$UHID_INPUT(r0, &(0x7f0000000980), 0x10a9) [ 612.043283][ T21] device bridge_slave_0 left promiscuous mode [ 612.049595][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.135826][ T21] device veth1_macvtap left promiscuous mode [ 612.141856][ T21] device veth0_macvtap left promiscuous mode [ 612.172898][T15702] IPVS: ftp: loaded support on port[0] = 21 [ 612.185004][T15704] FAT-fs (loop3): bogus number of reserved sectors [ 612.200726][T15704] FAT-fs (loop3): Can't find a valid FAT filesystem [ 612.227411][ T21] device veth1_vlan left promiscuous mode [ 612.290161][ T21] device veth0_vlan left promiscuous mode [ 612.348171][T15714] IPVS: ftp: loaded support on port[0] = 21 [ 612.366764][T15715] IPVS: ftp: loaded support on port[0] = 21 00:27:37 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x5450, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:37 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x5451, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:38 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x5452, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 612.946932][ T27] audit: type=1804 audit(1579652857.980:346): pid=15712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/71/file0/file0" dev="sda1" ino=17571 res=1 00:27:38 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x5460, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:38 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x6364, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:38 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x660c, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 614.583322][ T21] device hsr_slave_0 left promiscuous mode [ 614.622733][ T21] device hsr_slave_1 left promiscuous mode [ 614.685760][ T21] team0 (unregistering): Port device team_slave_1 removed [ 614.696776][ T21] team0 (unregistering): Port device team_slave_0 removed [ 614.707807][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.736583][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.809559][ T21] bond0 (unregistering): Released all slaves 00:27:41 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:27:41 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8901, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:41 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:41 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:41 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 616.564632][T15757] IPVS: ftp: loaded support on port[0] = 21 [ 616.572836][T15758] IPVS: ftp: loaded support on port[0] = 21 [ 616.590610][T15759] IPVS: ftp: loaded support on port[0] = 21 [ 616.612696][T15760] FAT-fs (loop3): bogus number of reserved sectors [ 616.619818][T15760] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:41 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8902, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 616.739615][T15770] IPVS: ftp: loaded support on port[0] = 21 00:27:42 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8903, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 617.113767][ T21] tipc: TX() has been purged, node left! 00:27:42 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8904, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:42 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8906, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 617.321663][ T27] audit: type=1804 audit(1579652862.360:347): pid=15769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/72/file0/file0" dev="sda1" ino=17586 res=1 00:27:42 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8907, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:42 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x890b, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:43 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:27:43 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 618.225029][T15795] IPVS: ftp: loaded support on port[0] = 21 00:27:43 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:43 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x890c, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:43 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 618.365214][T15801] IPVS: ftp: loaded support on port[0] = 21 [ 618.383120][T15802] IPVS: ftp: loaded support on port[0] = 21 00:27:43 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8912, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 618.455718][T15808] IPVS: ftp: loaded support on port[0] = 21 00:27:43 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8915, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 618.719707][T15814] FAT-fs (loop3): bogus number of reserved sectors [ 618.756762][T15814] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:44 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8918, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:44 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x891e, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 619.528590][ T27] audit: type=1800 audit(1579652864.570:348): pid=15817 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16499 res=0 00:27:44 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8933, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:44 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:44 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:27:44 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 619.850935][T15837] IPVS: ftp: loaded support on port[0] = 21 00:27:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 620.006311][T15843] IPVS: ftp: loaded support on port[0] = 21 [ 620.039990][T15847] IPVS: ftp: loaded support on port[0] = 21 [ 620.219612][T15851] FAT-fs (loop3): bogus number of reserved sectors 00:27:45 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:45 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8940, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 620.262768][T15851] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:45 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8941, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 620.450296][T15860] IPVS: ftp: loaded support on port[0] = 21 [ 620.505604][ T21] tipc: TX() has been purged, node left! [ 620.511762][ T21] tipc: TX() has been purged, node left! [ 620.586404][ T21] tipc: TX() has been purged, node left! [ 620.592422][ T21] tipc: TX() has been purged, node left! 00:27:45 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x894c, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 620.630785][ T21] tipc: TX() has been purged, node left! [ 620.639227][ T21] tipc: TX() has been purged, node left! [ 620.832700][ T21] tipc: TX() has been purged, node left! 00:27:45 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8980, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 620.873342][ T21] tipc: TX() has been purged, node left! [ 621.018159][ T27] audit: type=1804 audit(1579652866.060:349): pid=15851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/74/file0/file0" dev="sda1" ino=16769 res=1 [ 621.131391][ T27] audit: type=1800 audit(1579652866.060:350): pid=15851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16769 res=0 00:27:46 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8981, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:46 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 621.509743][T15879] IPVS: ftp: loaded support on port[0] = 21 [ 621.666053][T15883] FAT-fs (loop3): bogus number of reserved sectors [ 621.720383][T15883] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:46 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:27:46 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8982, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:46 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 621.873766][T15894] IPVS: ftp: loaded support on port[0] = 21 00:27:46 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8983, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 621.919515][T15896] IPVS: ftp: loaded support on port[0] = 21 00:27:47 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:27:47 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89a0, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 622.371192][T15905] IPVS: ftp: loaded support on port[0] = 21 [ 622.414258][ T27] audit: type=1804 audit(1579652867.460:351): pid=15883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/75/file0/file0" dev="sda1" ino=16526 res=1 [ 622.532808][ T27] audit: type=1800 audit(1579652867.480:352): pid=15883 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16526 res=0 00:27:47 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89a1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:48 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:48 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89a2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:48 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 623.363946][T15925] IPVS: ftp: loaded support on port[0] = 21 [ 623.379687][T15928] FAT-fs (loop3): bogus number of reserved sectors [ 623.392740][T15928] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:48 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 623.611051][T15940] IPVS: ftp: loaded support on port[0] = 21 00:27:49 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:27:49 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 624.211095][ T27] audit: type=1804 audit(1579652869.250:353): pid=15936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/76/file0/file0" dev="sda1" ino=16553 res=1 [ 624.233155][T15950] IPVS: ftp: loaded support on port[0] = 21 00:27:49 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e3, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 624.319480][ T27] audit: type=1800 audit(1579652869.290:354): pid=15936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16553 res=0 00:27:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:49 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:27:49 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e7, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 624.925405][T15962] IPVS: ftp: loaded support on port[0] = 21 [ 624.951369][T15964] FAT-fs (loop3): bogus number of reserved sectors [ 624.984998][T15964] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:50 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e8, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:50 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:50 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e9, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 625.429381][T15977] IPVS: ftp: loaded support on port[0] = 21 00:27:50 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 625.574560][T15980] syz-executor.4 uses old SIOCAX25GETINFO [ 625.697752][T15983] IPVS: ftp: loaded support on port[0] = 21 00:27:50 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89ea, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 625.748094][ T27] audit: type=1804 audit(1579652870.790:355): pid=15970 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/77/file0/file0" dev="sda1" ino=16537 res=1 [ 625.872756][ T27] audit: type=1800 audit(1579652870.790:356): pid=15970 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16537 res=0 00:27:51 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89eb, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:51 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:27:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:51 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89ed, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 626.722862][T15995] FAT-fs (loop3): invalid media value (0x00) [ 626.764302][T16001] IPVS: ftp: loaded support on port[0] = 21 [ 626.794216][T15995] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:52 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xae01, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:52 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) fchmod(r1, 0xaa24b39694f48f74) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x7, 0x0, 0x1713, 0x36d}) 00:27:52 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:52 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xae41, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 627.576698][T16017] IPVS: ftp: loaded support on port[0] = 21 00:27:52 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xae60, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:52 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:52 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) fchmod(r1, 0xaa24b39694f48f74) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x7, 0x0, 0x1713, 0x36d}) [ 627.845628][T16030] IPVS: ftp: loaded support on port[0] = 21 00:27:52 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xae80, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 627.967598][T16034] FAT-fs (loop3): invalid media value (0x00) [ 627.984253][ T21] tipc: TX() has been purged, node left! [ 627.990281][ T21] tipc: TX() has been purged, node left! [ 627.996043][T16034] FAT-fs (loop3): Can't find a valid FAT filesystem [ 628.010986][ T21] tipc: TX() has been purged, node left! [ 628.213152][ T21] tipc: TX() has been purged, node left! [ 628.223645][ T21] tipc: TX() has been purged, node left! [ 628.291722][ T21] tipc: TX() has been purged, node left! [ 628.311730][ T21] tipc: TX() has been purged, node left! [ 628.478682][ T21] tipc: TX() has been purged, node left! [ 628.484869][ T21] tipc: TX() has been purged, node left! [ 628.506616][ T21] tipc: TX() has been purged, node left! 00:27:53 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 00:27:53 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 00:27:53 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x400454ca, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 628.537393][ T21] tipc: TX() has been purged, node left! [ 628.715565][ T21] tipc: TX() has been purged, node left! [ 628.721576][ T21] tipc: TX() has been purged, node left! 00:27:53 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x40047451, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 628.806191][T16054] IPVS: ftp: loaded support on port[0] = 21 [ 628.852912][ T27] audit: type=1800 audit(1579652873.900:357): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16557 res=0 [ 628.915929][ T21] tipc: TX() has been purged, node left! 00:27:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:54 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x40047452, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:54 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 629.084533][T16049] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 629.154870][T16049] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 00:27:54 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x40049409, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 629.212455][T16066] IPVS: ftp: loaded support on port[0] = 21 [ 629.241371][T16049] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 629.355514][T16075] IPVS: ftp: loaded support on port[0] = 21 00:27:54 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x40086602, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:54 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 629.461091][T16078] FAT-fs (loop3): invalid media value (0x00) [ 629.487152][T16078] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:54 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x4008ae89, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 630.136231][T16088] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 630.170102][T16088] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 630.256509][T16088] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 630.300138][ T27] audit: type=1804 audit(1579652875.340:358): pid=16082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/80/file0/file0" dev="sda1" ino=16536 res=1 00:27:55 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 00:27:55 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x4008ae90, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 630.365400][ T27] audit: type=1800 audit(1579652875.340:359): pid=16082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16536 res=0 00:27:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:55 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x40186366, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 630.577753][T16106] IPVS: ftp: loaded support on port[0] = 21 [ 630.853824][T16114] FAT-fs (loop3): invalid media value (0x00) [ 630.878962][T16114] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:56 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:56 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/137, 0x89}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:27:56 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x4020940d, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:56 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 631.132165][T16127] IPVS: ftp: loaded support on port[0] = 21 00:27:56 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x4020ae46, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 631.205932][T16131] IPVS: ftp: loaded support on port[0] = 21 00:27:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x10000000, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x2f083}], 0x6}, 0x0) 00:27:56 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x40305829, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:56 executing program 1: r0 = socket(0x42000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2716, 0x0, &(0x7f0000000180)) [ 631.704987][ T27] audit: type=1800 audit(1579652876.740:360): pid=16114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16492 res=0 00:27:56 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 00:27:56 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x4090ae82, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:57 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xa4eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000400)={0x1, [[0x1, 0x1f, 0x3, 0x6, 0xd2], [0x6, 0x9, 0x305a369, 0x0, 0x0, 0x0, 0x0, 0x7a], [0x3ff, 0x8, 0x0, 0x4, 0x1, 0x0, 0x0, 0x5]], [], [{0x1ff, 0x4, 0x20}, {0x8, 0x7}, {0x0, 0x0, 0x7fff}, {0x9, 0x3f, 0x4}, {0x8000, 0x9, 0x1ff}, {0x1, 0x5}, {0x0, 0x80000001}, {0x800, 0xc0, 0xf456955}, {0x0, 0xfffffc00, 0x10003}, {0x9, 0x0, 0x7}, {0xff, 0x8, 0x1}, {0x3ff, 0x8, 0x98000000}], [], 0x9}) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000140)={'\x00', {0x2, 0x4e24, @local}}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x64) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x3) fallocate(r2, 0x20, 0x9, 0x7) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) sched_setattr(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x15) write(r3, &(0x7f0000000040)="e0", 0x100000098) socket$inet6_sctp(0xa, 0x0, 0x84) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ptrace$pokeuser(0x6, 0x0, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) [ 631.957973][T16153] IPVS: ftp: loaded support on port[0] = 21 [ 632.331521][T16165] FAT-fs (loop3): invalid media value (0x00) [ 632.346712][T16165] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:57 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x4138ae84, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:57 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:27:57 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xa4eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000400)={0x1, [[0x1, 0x1f, 0x3, 0x6, 0xd2], [0x6, 0x9, 0x305a369, 0x0, 0x0, 0x0, 0x0, 0x7a], [0x3ff, 0x8, 0x0, 0x4, 0x1, 0x0, 0x0, 0x5]], [], [{0x1ff, 0x4, 0x20}, {0x8, 0x7}, {0x0, 0x0, 0x7fff}, {0x9, 0x3f, 0x4}, {0x8000, 0x9, 0x1ff}, {0x1, 0x5}, {0x0, 0x80000001}, {0x800, 0xc0, 0xf456955}, {0x0, 0xfffffc00, 0x10003}, {0x9, 0x0, 0x7}, {0xff, 0x8, 0x1}, {0x3ff, 0x8, 0x98000000}], [], 0x9}) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000140)={'\x00', {0x2, 0x4e24, @local}}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x64) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x3) fallocate(r2, 0x20, 0x9, 0x7) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) sched_setattr(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x15) write(r3, &(0x7f0000000040)="e0", 0x100000098) socket$inet6_sctp(0xa, 0x0, 0x84) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ptrace$pokeuser(0x6, 0x0, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) [ 632.564153][T16179] IPVS: ftp: loaded support on port[0] = 21 00:27:57 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x4400ae8f, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 632.696702][T16186] IPVS: ftp: loaded support on port[0] = 21 00:27:58 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x800454d2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:58 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x80086301, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 633.133194][ T27] audit: type=1804 audit(1579652878.180:361): pid=16165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/82/file0/file0" dev="sda1" ino=16551 res=1 00:27:58 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) [ 633.229568][ T27] audit: type=1800 audit(1579652878.210:362): pid=16165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16551 res=0 00:27:58 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x80108906, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 633.327321][T16200] IPVS: ftp: loaded support on port[0] = 21 00:27:58 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 00:27:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:27:58 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x80108907, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 633.948109][T16206] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 634.061839][T16206] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 634.115620][T16206] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 634.142958][T16218] FAT-fs (loop3): invalid media value (0x00) [ 634.150038][T16218] FAT-fs (loop3): Can't find a valid FAT filesystem 00:27:59 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:27:59 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:27:59 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8010aa01, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 634.268865][T16228] IPVS: ftp: loaded support on port[0] = 21 [ 634.337848][T16234] IPVS: ftp: loaded support on port[0] = 21 00:27:59 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 00:27:59 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x80304d65, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:27:59 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x8138ae83, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 634.902899][ T27] audit: type=1800 audit(1579652879.950:363): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16492 res=0 00:28:00 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xc0045878, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:00 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) [ 635.246521][T16255] IPVS: ftp: loaded support on port[0] = 21 00:28:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:00 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xc0045878, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 635.428970][T16247] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 635.481921][T16247] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 635.602743][T16247] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 00:28:00 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xc004743e, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:00 executing program 1: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:28:01 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r7, &(0x7f00000017c0), 0x3da, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:28:01 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) [ 635.912664][T16268] FAT-fs (loop3): invalid media value (0x00) [ 635.945820][T16268] FAT-fs (loop3): Can't find a valid FAT filesystem [ 636.033294][T16276] IPVS: ftp: loaded support on port[0] = 21 00:28:01 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xc008ae05, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 636.184205][T16286] IPVS: ftp: loaded support on port[0] = 21 [ 636.240051][T16280] hfs: can't find a HFS filesystem on dev loop1 [ 636.349353][T16280] hfs: can't find a HFS filesystem on dev loop1 00:28:01 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xc00caee0, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:01 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) 00:28:01 executing program 1: munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) [ 636.682881][ T27] audit: type=1800 audit(1579652881.730:364): pid=16281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16570 res=0 00:28:01 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xc0145401, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_buf(r0, 0x29, 0x2f, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 636.803107][T16301] IPVS: ftp: loaded support on port[0] = 21 00:28:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:02 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xc0189436, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0x1d7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x3c) 00:28:02 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xc018aa3f, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:02 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 637.406539][T16325] FAT-fs (loop3): invalid media value (0x00) [ 637.430145][T16325] FAT-fs (loop3): Can't find a valid FAT filesystem [ 637.567100][T16331] IPVS: ftp: loaded support on port[0] = 21 [ 637.592661][ T21] tipc: TX() has been purged, node left! [ 637.642885][ T21] tipc: TX() has been purged, node left! [ 637.648830][ T21] tipc: TX() has been purged, node left! [ 637.701310][ T21] tipc: TX() has been purged, node left! [ 637.708306][ T21] tipc: TX() has been purged, node left! [ 637.736429][ T21] tipc: TX() has been purged, node left! 00:28:02 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:28:02 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xc020660b, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="3100000012000900690006342fc56aef40c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@flushpolicy={0x10, 0x12, 0x4e326d0846e0c13d}, 0x10}, 0x8}, 0x0) [ 637.746854][ T21] tipc: TX() has been purged, node left! [ 637.787857][ T21] tipc: TX() has been purged, node left! [ 637.806770][ T21] tipc: TX() has been purged, node left! [ 637.836627][ T21] tipc: TX() has been purged, node left! [ 637.847004][T16342] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 637.884007][ T21] tipc: TX() has been purged, node left! [ 637.918255][T16344] IPVS: ftp: loaded support on port[0] = 21 [ 637.988732][ T21] tipc: TX() has been purged, node left! [ 637.996819][ T21] tipc: TX() has been purged, node left! 00:28:03 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:28:03 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xc020aa00, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 638.045172][ T21] tipc: TX() has been purged, node left! [ 638.055904][ T21] tipc: TX() has been purged, node left! 00:28:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r2, 0xa05, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) [ 638.086261][ T21] tipc: TX() has been purged, node left! [ 638.104172][ T21] tipc: TX() has been purged, node left! [ 638.117308][ T21] tipc: TX() has been purged, node left! 00:28:03 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0xc058534f, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 638.201258][T16354] IPVS: ftp: loaded support on port[0] = 21 [ 638.212709][ T27] audit: type=1804 audit(1579652883.250:365): pid=16329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/85/file0/file0" dev="sda1" ino=16485 res=1 [ 638.266729][ T27] audit: type=1800 audit(1579652883.250:366): pid=16329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16485 res=0 00:28:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r2, 0xa05, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 00:28:03 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:03 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x4, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 638.981343][T16371] FAT-fs (loop3): invalid media value (0x00) 00:28:04 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) [ 639.054023][T16371] FAT-fs (loop3): Can't find a valid FAT filesystem [ 639.202062][T16382] IPVS: ftp: loaded support on port[0] = 21 00:28:04 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:28:04 executing program 1: 00:28:04 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0xa, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:04 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:28:04 executing program 1: 00:28:04 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x10, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 639.471535][T16390] IPVS: ftp: loaded support on port[0] = 21 [ 639.531851][T16391] IPVS: ftp: loaded support on port[0] = 21 00:28:04 executing program 1: [ 639.732780][ T27] audit: type=1804 audit(1579652884.760:367): pid=16378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/86/file0/file0" dev="sda1" ino=16817 res=1 [ 639.832113][ T27] audit: type=1800 audit(1579652884.760:368): pid=16378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16817 res=0 00:28:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:05 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x25, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:05 executing program 1: 00:28:05 executing program 1: 00:28:05 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x80, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getneigh={0x14, 0x1e, 0x300, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x40810) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) write$P9_RLERROR(r5, &(0x7f00000002c0)={0x20, 0x7, 0x2, {0x17, 'cgroup.subtree_control\x00'}}, 0x20) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0xe0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="cc74858c8cfa66b846008ee0deee39560e0f00d348b809000000000000000f2376430f01c10f23f8b9910b00003e660feeafce45102260e322742274420fc732665808000f00d045d2e0", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0xa, &(0x7f0000000300)=0x2000000000005ea, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fb, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0xfe20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r8, &(0x7f0000002300)=ANY=[@ANYRES64], 0xf43185f1) openat$cgroup_subtree(r7, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r7, 0x2) dup3(r4, r6, 0x80000) 00:28:05 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:28:05 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r9, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r7) 00:28:06 executing program 1: 00:28:06 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) [ 641.043892][T16429] IPVS: ftp: loaded support on port[0] = 21 [ 641.053578][T16430] IPVS: ftp: loaded support on port[0] = 21 00:28:06 executing program 1: [ 641.140331][T16435] IPVS: ftp: loaded support on port[0] = 21 00:28:06 executing program 1: 00:28:06 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = accept$ax25(r0, &(0x7f0000000040)={{0x3, @bcast}, [@default, @null, @null, @bcast, @null, @rose, @default, @rose]}, &(0x7f00000000c0)=0x48) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000100)=0x1, 0x4) 00:28:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:06 executing program 1: 00:28:06 executing program 1: 00:28:07 executing program 1: 00:28:07 executing program 1: 00:28:07 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) [ 642.832619][T16469] IPVS: ftp: loaded support on port[0] = 21 00:28:07 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:07 executing program 1: 00:28:07 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:28:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:08 executing program 1: [ 643.090466][T16474] IPVS: ftp: loaded support on port[0] = 21 [ 643.138739][T16481] IPVS: ftp: loaded support on port[0] = 21 00:28:08 executing program 1: 00:28:08 executing program 1: 00:28:08 executing program 1: 00:28:09 executing program 1: 00:28:09 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:28:09 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:28:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0x76656f) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 644.295501][T16509] IPVS: ftp: loaded support on port[0] = 21 [ 644.395940][T16513] IPVS: ftp: loaded support on port[0] = 21 00:28:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/71) [ 645.281742][T16531] IPVS: ftp: loaded support on port[0] = 21 00:28:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) pipe(&(0x7f00000004c0)) 00:28:10 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:28:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0x76656f) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:10 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) [ 645.825826][T16545] IPVS: ftp: loaded support on port[0] = 21 00:28:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) pipe(0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf74000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000001c0a79e8169d3c2792432a4fa650c501000000a56462712cb064ecd5615f3196e3359aceb768637e60bd5d2e4b5992de991371274fdff6e79fc722e25659a7c85615c1b88bc894323cfe2314e887efecdcb7381ef4932cb0dcebea6d90e9c1677fbefd35893d883a2c559b7a34db461b1974af360eace66cec40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791c4e9dff3e8bfc7d1746091b1820102b1905a1561d8e64e27019095601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfbdc229874bc3d2418bab997c8bef9aa55841caa572ddff9220c67c9e17bee524c3dc747455763ecb0a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f00000004c0)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x626000, 0x0) [ 646.136062][T16555] IPVS: ftp: loaded support on port[0] = 21 00:28:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f00000002c0)='./bus\x00', 0x0) mount$9p_rdma(&(0x7f000000a740)='127.0.0.1\x00', &(0x7f000000a780)='./bus\x00', 0x0, 0x1000, 0x0) 00:28:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) waitid(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000006c0)) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6f73322e737973741ae22e736f636b706d6b0437e45bcbd892877376d96500"], 0x0, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x20a) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000200)={0x3f, 0x3f, [0x3, 0x8001, 0x7, 0x7ff], 0x3}) getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 00:28:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0x76656f) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:12 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) [ 647.402021][T16586] IPVS: ftp: loaded support on port[0] = 21 [ 647.429335][T16588] IPVS: ftp: loaded support on port[0] = 21 [ 647.482681][ T21] tipc: TX() has been purged, node left! [ 647.488864][ T21] tipc: TX() has been purged, node left! [ 647.516418][ T21] tipc: TX() has been purged, node left! [ 647.568383][ T21] tipc: TX() has been purged, node left! [ 647.626263][ T21] tipc: TX() has been purged, node left! [ 647.676709][ T21] tipc: TX() has been purged, node left! [ 647.703092][ T21] tipc: TX() has been purged, node left! [ 647.709540][ T21] tipc: TX() has been purged, node left! [ 647.721001][ T21] tipc: TX() has been purged, node left! [ 647.731535][ T21] tipc: TX() has been purged, node left! [ 647.742165][ T21] tipc: TX() has been purged, node left! [ 647.770256][ T21] tipc: TX() has been purged, node left! [ 647.786330][ T21] tipc: TX() has been purged, node left! [ 647.806119][ T21] tipc: TX() has been purged, node left! [ 647.830824][ T21] tipc: TX() has been purged, node left! [ 647.853749][ T21] tipc: TX() has been purged, node left! 00:28:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c00000024000705ff00"/20, @ANYRES32, @ANYBLOB="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"], 0x6c}}, 0x0) [ 647.897140][ T21] tipc: TX() has been purged, node left! 00:28:13 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) [ 648.020100][T16597] netem: incorrect ge model size [ 648.047451][T16597] netem: change failed [ 648.072007][T16600] netem: incorrect ge model size [ 648.093744][T16600] netem: change failed [ 648.133007][T16601] IPVS: ftp: loaded support on port[0] = 21 00:28:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r0, 0x0, 0x6f0a77bd) 00:28:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 00:28:13 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) [ 648.926695][T16621] IPVS: ftp: loaded support on port[0] = 21 00:28:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x1d, r0, 0x0, 0x0) keyctl$chown(0x1d, r0, 0x0, 0x0) 00:28:14 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 649.354353][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 649.464332][T16632] IPVS: ftp: loaded support on port[0] = 21 00:28:14 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pread64(r0, 0x0, 0x0, 0x0) 00:28:14 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:28:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 649.839988][T16639] IPVS: ftp: loaded support on port[0] = 21 00:28:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(0x0, 0x40c5, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/71) 00:28:15 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000040)='\\', 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 00:28:15 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) [ 650.947497][T16668] IPVS: ftp: loaded support on port[0] = 21 00:28:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:16 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) [ 651.126665][T16671] IPVS: ftp: loaded support on port[0] = 21 00:28:16 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 651.381144][T16680] IPVS: ftp: loaded support on port[0] = 21 00:28:17 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0x76656f) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:17 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:17 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) [ 652.418590][T16693] IPVS: ftp: loaded support on port[0] = 21 [ 652.420271][T16691] IPVS: ftp: loaded support on port[0] = 21 [ 652.570793][ T27] audit: type=1804 audit(1579652897.610:369): pid=16694 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/96/file0/file0" dev="loop3" ino=342 res=1 00:28:17 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 653.041243][T16701] IPVS: ftp: loaded support on port[0] = 21 00:28:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0x76656f) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 653.641608][ T27] audit: type=1804 audit(1579652898.680:370): pid=16707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/97/file0/file0" dev="loop3" ino=344 res=1 00:28:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:28:19 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) 00:28:19 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) [ 654.494905][T16729] IPVS: ftp: loaded support on port[0] = 21 [ 654.496388][T16728] IPVS: ftp: loaded support on port[0] = 21 00:28:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0x76656f) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096102, &(0x7f0000000140)) 00:28:19 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 654.898098][T16742] IPVS: ftp: loaded support on port[0] = 21 00:28:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, 0x0) [ 655.095983][ T27] audit: type=1804 audit(1579652900.140:371): pid=16743 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/98/file0/file0" dev="loop3" ino=346 res=1 00:28:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, 0x0) 00:28:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, 0x0) 00:28:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, 0x0) 00:28:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) [ 656.422677][ T27] audit: type=1804 audit(1579652901.460:372): pid=16769 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/99/file0/file0" dev="sda1" ino=16586 res=1 00:28:21 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:21 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) 00:28:21 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000) [ 656.635980][T16781] IPVS: ftp: loaded support on port[0] = 21 [ 656.699324][T16784] IPVS: ftp: loaded support on port[0] = 21 [ 656.719515][T16789] IPVS: ftp: loaded support on port[0] = 21 00:28:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) 00:28:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) 00:28:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) 00:28:22 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001440)={0x3, 0x4, 0x6, 0x9}, &(0x7f0000001480)=0x10) perf_event_open(&(0x7f00000013c0)={0x4, 0x70, 0x2, 0x7f, 0x7, 0x0, 0x0, 0x3f, 0x6b50, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, @perf_bp={&(0x7f0000001380)}, 0x500, 0x100000000, 0x4, 0x3, 0x4, 0x5, 0x40}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000001500)=0x2) fcntl$setstatus(r2, 0x4, 0x80000000002c00) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000014c0)=0x0) ioprio_get$pid(0x1, r5) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) recvmsg$can_raw(r1, &(0x7f0000001340)={&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/17, 0x11}, {&(0x7f0000001100)=""/248, 0xf8}, {&(0x7f0000001200)=""/153, 0x99}], 0x4, &(0x7f0000001300)=""/55, 0x37}, 0x20) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001540)='/dev/vga_arbiter\x00', 0x100, 0x0) r7 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000001580)={0x18c, 0x0, 0x8000, 0x7ff}) ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0106438, &(0x7f00000015c0)={0x7, r8}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) close(r9) socket$l2tp(0x2, 0x2, 0x73) 00:28:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) [ 657.571802][ T27] audit: type=1804 audit(1579652902.610:373): pid=16803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/100/file0/file0" dev="loop3" ino=348 res=1 00:28:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r0, 0x0, 0x0) 00:28:23 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:23 executing program 5: unshare(0x40000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:23 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 658.324107][T16829] IPVS: ftp: loaded support on port[0] = 21 [ 658.382904][ T21] tipc: TX() has been purged, node left! [ 658.391260][ T21] tipc: TX() has been purged, node left! 00:28:23 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) 00:28:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r0, 0x0, 0x0) 00:28:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:23 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) [ 658.455515][T16833] IPVS: ftp: loaded support on port[0] = 21 00:28:23 executing program 5: unshare(0x40000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) [ 658.563053][ T21] tipc: TX() has been purged, node left! [ 658.599993][T16841] IPVS: ftp: loaded support on port[0] = 21 00:28:23 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) prctl$PR_SET_PDEATHSIG(0x1, 0x7) [ 658.616125][ T21] tipc: TX() has been purged, node left! [ 658.639812][ T21] tipc: TX() has been purged, node left! 00:28:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r0, 0x0, 0x0) [ 658.671883][ T21] tipc: TX() has been purged, node left! [ 658.683442][T16850] IPVS: ftp: loaded support on port[0] = 21 [ 658.783793][ T27] audit: type=1804 audit(1579652903.830:374): pid=16854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/101/file0/file0" dev="sda1" ino=16586 res=1 [ 658.929470][ T21] tipc: TX() has been purged, node left! [ 658.937858][ T21] tipc: TX() has been purged, node left! [ 658.972920][ T21] tipc: TX() has been purged, node left! [ 659.008244][ T21] tipc: TX() has been purged, node left! [ 659.047685][ T21] tipc: TX() has been purged, node left! 00:28:24 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) socket$unix(0x1, 0x1, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x628c}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44010}, 0x4000800) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 659.148078][ T21] tipc: TX() has been purged, node left! 00:28:24 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r1, 0x0, 0x0) [ 659.215901][ T21] tipc: TX() has been purged, node left! [ 659.229733][ T21] tipc: TX() has been purged, node left! 00:28:24 executing program 5: unshare(0x40000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) [ 659.303182][ T21] tipc: TX() has been purged, node left! [ 659.322433][ T21] tipc: TX() has been purged, node left! 00:28:24 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) fremovexattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375726974792e47504c237573fcbd70544660d92ba920c67be5b4c02be0"]) [ 659.479415][T16873] IPVS: ftp: loaded support on port[0] = 21 [ 659.504216][ T21] tipc: TX() has been purged, node left! [ 659.510318][ T21] tipc: TX() has been purged, node left! [ 659.541970][ T21] tipc: TX() has been purged, node left! 00:28:24 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:24 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r1, 0x0, 0x0) 00:28:24 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) 00:28:24 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x2, 0x20}) socket(0x3, 0x1, 0x81) 00:28:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:24 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) [ 660.015180][T16892] IPVS: ftp: loaded support on port[0] = 21 00:28:25 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r1}) 00:28:25 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r1, 0x0, 0x0) [ 660.158964][T16899] IPVS: ftp: loaded support on port[0] = 21 00:28:25 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, 0x0) 00:28:25 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:25 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, 0x0) 00:28:25 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x410000, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) [ 660.567240][ T27] audit: type=1804 audit(1579652905.600:375): pid=16900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/102/file0/file0" dev="loop3" ino=350 res=1 00:28:26 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:26 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x113800, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000200)={0x2, r2}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0xb, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x80) 00:28:26 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) 00:28:26 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, 0x0) 00:28:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:26 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) [ 661.510517][T16939] IPVS: ftp: loaded support on port[0] = 21 00:28:26 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x20400, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r2}) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)=0x1) pipe2(&(0x7f00000001c0), 0x80000) r3 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x60100) fcntl$setsig(r3, 0xa, 0x2) 00:28:26 executing program 4: ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 661.617308][T16945] IPVS: ftp: loaded support on port[0] = 21 00:28:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r1, 0x0, 0x0) 00:28:26 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x2000) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xb856d) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r3 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r3) lchown(&(0x7f0000000000)='./file0\x00', r2, r3) r4 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x2}, [{0x2, 0x2, 0xffffffffffffffff}], {}, [{0x8, 0x77f334fc4aafa68b, r3}, {0x8, 0x1, r4}, {0x8, 0x6}, {0x8, 0x3, 0xee01}], {0x10, 0x4}, {0x20, 0x2}}, 0x4c, 0xa87aaf4c02ad5a2d) stat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r6, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r6, 0x4, 0x80000000002c00) openat$fuse(0xffffffffffffff9c, &(0x7f0000001300)='/dev/fuse\x00', 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0, 0x0}, &(0x7f00000012c0)=0xc) setresgid(r3, r5, r7) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0xa00, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000001100)={@l2tp6={0xa, 0x0, 0x9, @mcast1, 0x1, 0x4}, {&(0x7f00000000c0)=""/4096, 0x1000}, &(0x7f00000010c0)}, 0xa0) 00:28:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r1, 0x0, 0x0) 00:28:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r1, 0x0, 0x0) [ 662.116883][ T27] audit: type=1804 audit(1579652907.160:376): pid=16949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/103/file0/file0" dev="loop3" ino=351 res=1 00:28:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:28 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) 00:28:28 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:28 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:28:28 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400001, 0x0) linkat(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1400) [ 663.075235][T16990] IPVS: ftp: loaded support on port[0] = 21 [ 663.080492][T16992] IPVS: ftp: loaded support on port[0] = 21 00:28:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) [ 663.129168][ T27] audit: type=1804 audit(1579652908.170:377): pid=16983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/104/file0/file0" dev="loop3" ino=352 res=1 00:28:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:28 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x2, 0xe, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x737, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000080)={0x3, @bcast}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic={0x2, 0x0, 0x7f}) 00:28:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) 00:28:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) [ 663.949503][ T27] audit: type=1804 audit(1579652908.990:378): pid=17014 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/105/file0/file0" dev="loop3" ino=353 res=1 00:28:29 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) 00:28:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r2, 0x4, 0x80000000002c00) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r2}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) 00:28:29 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) [ 664.455743][T17033] IPVS: ftp: loaded support on port[0] = 21 00:28:29 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:28:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) 00:28:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x6, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0xe6, 0x2, 0x4, 0x4000, 0xffffffff, {r3, r4/1000+30000}, {0x3, 0x1, 0x80, 0x3, 0x0, 0x3, "ca10d81d"}, 0x8, 0x6, @planes=&(0x7f0000000100)={0x6, 0x9, @mem_offset=0x7}, 0x7fff, 0x0, 0xffffffffffffffff}) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000001c0)=[{0x0, 0x3, {0x2, 0xff, 0x3}, {0x1}, 0xff, 0xfd}], 0x20) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) [ 664.967546][T17050] IPVS: ftp: loaded support on port[0] = 21 00:28:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffffffffffffa678, 0xa8700) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000090}, 0x40040814) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r2, 0x0, 0x0) [ 665.690555][ T27] audit: type=1804 audit(1579652910.730:379): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/106/file0/file0" dev="loop3" ino=355 res=1 00:28:30 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, 0x0) 00:28:30 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@nfc_llcp, &(0x7f0000000180)=0x80) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x6, 0xff, 0x9, 0x6, 0x0, 0xc0000000, 0x45508, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0x800}, 0x10, 0x8e, 0xacdc, 0xf937b9c3b075a06, 0x3ff80000000, 0x800, 0x4}, 0x0, 0x5, r0, 0x1) 00:28:31 executing program 4: execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='md5sumnodev\'\x00', &(0x7f0000000180)='\x00'], &(0x7f0000000440)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='em1\xa4wlan0securitynodev(\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='ppp0Rppp1eth0eth1r\x00', &(0x7f00000003c0)='^\x00', &(0x7f0000000400)='\x00']) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) mq_unlink(&(0x7f0000000040)='\x00') [ 666.083335][T17090] IPVS: ftp: loaded support on port[0] = 21 00:28:31 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:31 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:28:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, 0x0) 00:28:31 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000040)) 00:28:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r3, 0x0, 0x0) 00:28:31 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000280)=0x3, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r1, 0x4, 0x80000000002c00) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @null}) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000002c0)={0x7, 0x6, 0x4, 0x800, 0x80000000, {0x0, 0x2710}, {0x3, 0x0, 0x7, 0x1f, 0x69, 0x0, "18f85b11"}, 0x7fff, 0x1, @userptr=0xa000000000000, 0x2, 0x0, r1}) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000400)={0x8dc2}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1230183}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr="7fdbe3a9594bf7aa3ffe7a3b15690095"}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x1b, 0x1, 'cgroup.subtree_control\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24004050}, 0x0) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x30, 0xfb}, &(0x7f00000003c0)=0x18) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x9, 0x4) [ 666.586680][T17107] IPVS: ftp: loaded support on port[0] = 21 00:28:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) [ 667.081275][ T27] audit: type=1804 audit(1579652912.120:380): pid=17115 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/107/file0/file0" dev="loop3" ino=357 res=1 00:28:32 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:32 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x32) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x24) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r4, 0x7}}, 0x18) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x92000, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)={0x5, 0x1, 0x4, 0x20, 0x800, {}, {0x4, 0x1, 0x40, 0x40, 0x7f, 0x0, "b4b76fd9"}, 0x85, 0x3, @offset=0xf0, 0x6, 0x0, r5}) 00:28:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) [ 667.408414][T17137] IPVS: ftp: loaded support on port[0] = 21 00:28:32 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x1}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:32 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:33 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:28:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(0xffffffffffffffff, 0x0, 0x0) 00:28:33 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xf9) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) 00:28:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x0, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 668.255139][T17158] IPVS: ftp: loaded support on port[0] = 21 00:28:33 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001340)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x8380) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0x34ce, 0x10001, 0xffff0001}, 0x10) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x2000000000000174) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r2, 0x4, 0x80000000002c00) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001400)={r1, r2, 0x1, 0x7, &(0x7f00000013c0)="2836dc2c277c69", 0x8c, 0x0, 0x80, 0x46, 0x7, 0x3, 0x1, 'syz1\x00'}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000200)) openat$cgroup_subtree(r5, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xc, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x44810) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x50}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x0) dup2(r0, r1) 00:28:33 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r1, 0x4, 0x80000000002c00) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@hopopts={0x88, 0x206, [], [@hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x101}, @enc_lim={0x4, 0x1, 0x40}, @pad1, @jumbo={0xc2, 0x4, 0x6f63}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @generic={0x3a, 0x1000, "cf5aa366b44f8f44227c44d942a7f29aee04dd1f12bde4881189efa048fca950854774f95f2e46986ff423249019525bac38c0a40660aeaea2e1bde4b3e947f2fba6000b16802f3f43c22eb1510e163a107d67753c7364dd5e683642b8abea0a166c193cf3da237e1a52af69b696b7b136a0a3898e6223a997bdad929256ecfddd99ce578106b3a4c8ef96066dafdaeb4ddf2e90189ca2b8baabed2e559ae5164307d16b04d214a02cd967b129646c4a111800f2681173037d126efc3aea358c5fff14a611db0b55a82509fb4c83f1c1bf63799cef22b727e4f33be47a1156109536700de829db5b6745dc5fd4f69c13ec957b25ad9b304114715e3d8c6d4701286742d3369154b93160d22636717c21a630d5d9cd4a5091d3b64516e65afa89abb8ab3ecb4061688843cc60e493fbe40dd355ac18293f3ebecf1eb60dc225d10208354d0c0f1369c60fe075fcf041d0f39ba4b7453c18be2c9dd68a30f3dae4b4312d848ccb89ddefa378a4b191ce39fea4c7bcd1235e4f42ff6b205d373d943abb09adb5e57e9d6c72690422800df05a1b78e57c24f82319682061cb0d582e10e86c3c6aed59fad658f9df6ba7a893a2d3dc0cc8058222e0f54969b02c17ac6adda0e14c80c0a2bd00ffbc84e452eb73681da359c01bf37906af373fac5a028ebb32fd4cfb512d6b4915c3c3383068fc1e3107e75095bdf0a6c274f1c714ca25f114b99af58b34d38aec064a49d98b1d40dc52127573e5551073d70333bc4cc3b19ba045430b4da29ace78670051e93801c5ec7687b04d8b583bd432e3f3e667d2fe219311b6e1be8cb548a90665bcbabd1f92c655f3407ed683873ae183102a97015807d4803b3a70761831238dc9e89250404171549a66de43c1a15be15381739e26ea18bccd446623fc3ab093eacdfb5f0f0e6493217e29561ced697208965a278f66ab643be64719716fe24768ab785da9afcecbb7630d9ab18a55b2be00bb10cfe6ec849d748f5fff0068dd4e4d0d672f447029585f6b93911371e2308541c09faa0d64e4e3100c1de61a98a8e1bc4b4b9aefb30cd859776b5da84e7370cd8a35dafbf0c2975858ebd95e1125e225e47cca0df80946418627f07fd5398a32e6ed2d1ecb1c0a5e0cbf5af4f47bb03c4e8bc3fc6af040de7f4889bd10e61fa80fad1652e2189267b710cbcef6e07ce2f8abbdc453ca521cca41b6f0078d24fc9056231a0f24a050fdbaf8b7032940ff71cfa2576553f27f875d722bac398194d01c80a3d9dcde333f28559c3fef27d61fb6502a567b9d631c30be5f8195f303486c1e22cd5a305f9f520c2f3a66a33a126ccb7e6990d8bcd14a6549c6fc9ad9fcea7438abba5bdcb24c42598fb062c878e1f3443bc69ce0afbc373dfc180956bb1d14c20d96cac870b51121613c4cfe273cc4a2307d4c0371d82a3f48a9904ef9b539f4e98a65d138e213053cf1474cda523b5c1dd1b7e0c10918f00a7c03830631fd8bafb60a45fe0b0b426b49a1a8d640ae49114423ba964b6cb5f68336e23a9b86152ad63956a14281ba250d0551b0f6fdac10d2bf55dca9d7df981bd1909b92a148f826543e22148b907c25cd004ea3cc97ff6435142700edb503c6dbdca0b612ada508eec1f8ee5dc415e43b468147a331f064341a07720c4883a6c126f8b2c8070b150752acc637241b3b5312950fc212624b30b4e7da348f3f64fea5921a414cbaa4014fd4036df313af8eea193e5bc8d312999f9d53a724ad102300ef63fab012802cc0dcea6cca28c9146966ca81a8e48cbf21e55d1f8429f897738d8de728de16c56675e1ba72a8f421eef7a98404ab4c97ff83c338c5c33cac571cc13ec0f9926016dfc171f63f58896bb34aa127e30f219dd7127cee73f18a6248814d122df55530d87d65055dd840822dd58a3a210230b1c1ffebd02e95db8f868af2ee6ea72b1840b507e8057b41b60d66a09a523e68db65139460c90758b4ee7cc197b40ac341d381f4e230b303296763b37d9ee6e66d0a82ac6eab348d4bf49899854a83ccec2ad24002280088bad2b5771bd15d32d19462b73fb24038e369b929d237039c2d6fe09137b97f646f743572a69fad2489ac472f1a2d95445f0799e135a4b246d8c8f2f0e713d5e743b73f8d502bafe349f19a49ee601bcc5dd684ec4f0215ec5f74f18c59ebcd32aae0590c51b9b6d297b0da2a816f42cd1dd96ce230be0729494cc61dc7762604253910057a86967210d316ff6e0e48ae4589c80dafbdaed89152e933de2bbfefb19e0c247e907af8c60802bcaeafee26393866c974c487d46893d40428c175e2b5e2c2e60fbf2587ed2158a5126409ff47e70af250515c8466e6715600a96baf2ef49cc5d3dcd7c55a8d4037eb6567963dc4ee78dd53d73c88af8c3cd27bb0853d42f244a95809d8a89501b2d91efa90244d74fe6f42269c55e61ff333647f418786355029376c17c32d5c9595fe945c042586e317af8d6e1c780a0b44fe69dcc6a6aacbd19ad9cc4d4bd43b738dd5fbdff57f47996633028f0f28bf652ab32e626c99974f9b33cad339a981ccbee972c5c421a5c7f5bb06a79a1ece3d30fd2de65c3534b54357a6c69df3ebcbd89926f48833c017fab2564efa40e1283823b2140f0b70f23b7dd0bdef726e5dd6c2327d3f8634029456e16ea7c37564a2d0dd1ee2bd6b75c15c86572ccb9ac8656ecdfe762182e0a2203c67af934ee56aee74b3928832d65f72f95c78635fc9f134cdf7b042aff3c831089dd7f34695c3a6eac3124e289adf8388fe889b5c6a67563f0cc734e0b2518421185d9deab8545fb19e8bed0e50aeaa0202687b80bc3bbc342f0347cc0433faaeeb45223ec64801bec467d90481fe95fb799e2478b6798cb4d05e4030155466c5f7208bd764741690ce956d9b19f7980597f2c76771a56297971b966bce52376139b3cae13a4c2259e7fa36c845741a44b3eeca38fbd2755c34803d6ad96889306fb98ddafea0c0dcde331684ecc7defc48e9442e414405808999fc5a730728dc44af7ccb592b086c13d64bd7edb967ee9149d244e4a670eeb68ac4ed297ceaa6d21e499310ee6a94060e7c9b09761431107daf025d2e1934fd7ca038ef8438044c45ac418a88e1e66c03d4c0406ec1f711a094a2f583eadf222adbc2ed21b4ec1cd28dc31ee04a0b22cfae44a0d8d871437103b04ec154a798a97d3d5fad3210e973be7b2a27eaeb29ccc91ba8dcf9553c2c7c0da42ddf3f82b2e0b657593a1eab05dbf6f366fec9f7c2a2ea891e2d0e5bf8d264f55e053bdd4293dcdd3f93edecb6e5fbccf1e7e91dcc6cbfa23b6afb8f95485fdfcfa8267e6edd4e77d3e336bcbdf90e3765ae3b03df4c0f04b335d67b43f40168d49c9fd25e7bafea20c96d0c70a8aa58f57367ed22304bf6a6d1fb16ee314889429ece31347c12cda8bf0e89b0171075e2d4574aebbf7a308123b043c609156ca9155e1c3acf9496bccd632c505fd73a80e02e4409ec93746d54f6f3beb309174dbb5e25f238d655964f2f9fd415f944c56108c2df95508449a80c19e86c55288dae488243528fe6c1154021d7c0e81a3d35073a21db539dd2a68e894cd3876d5ff5e29b6c7bbce3d9e5962c2f7212d04a17a351d1db7a96dbe138a64661465e49a60b912ca3543b0d40466bf9e28ab9550fa3c7ca51e48b874296566737a136892516ec659970f39ce95540b1d40ea8e18d6c8e58725f4c0dce5cd5e035af87c3197f99440f61646b792cf7071a58757f646a3540f994a683256160d3d81a50bb8c0a83838dff9e2d070baee1cf6b95ac9c85c868fdc187e7ed72fc53e813e3ea3f08d8885599e3bab19269d0a108b52c86f49132bebc5b74b8154c717fa01c3f0169c74063609a9c4a99a6708a0d3520bace3571ca268fbc85e1787218fa9fb5b4179387ccbfcd6eef7b2a637c7c449221b557fede5b05fbf325bed0d91d1634723383db59cbd8d6d6f3d4368e5e104f4561e66f2cbc2aa5d1f636c0d16796bb2a3acd2d94c99c4ac8fe0b330a8027a855c8db3f70442d147f84b76ea9314c0dfca84d4408b191bd982b0914e362c921744ee3b581424decf12681bdbe793c8820101f6e0ecab8872c7961b1d72816868d11423b2e99809179d424ca6c10b77abb41adc91cd6d33a70121745cea40b37a4aad7ef432f3a082996a0f741af3a3dd21bf3a6b774956a1ea930f5622078922542e724975a4c18912cd65ed10adc52cc59520de2a8dc25e1c586f51bd8968fa6ee8bf88c59066c976087d7b91450d3eeeb03b28498cf4fca0e9190828edc740cff025202fd40f11e32413378e8265af03eef27927417d35e1f751da8139ef662b63c706ece392ccccab18840a5abcbae6b531f4682537ad471ca4cb9162df7c3ed19637e18134456e1e77889330dd5f1d70b2dce57064254a15b7857c46f821537ca2898a683384c2278dd9c50c1be0310ba5f72641b32831e56f4cf8fc4542b72e2fbe9a4a59ac0d2c0c3f73572bd921e3de6906aa7c0d7e5ce07552565c71e820cfeada75e16d0c6794fe7052d304e9110716036cc245e6a477506ea90c7aa60736505048163c6f48a65a5eae49211be86f785fbc5c5448834f0b6478a41bd01994ca1882b028642985e0f6c93229a297219f82a870e77464156424ec0ec58b75400730b80bcc2c7617aa465781c7ce48758ebe5b7f1838803e33b2e14ad4e8271ade4eee9d0e9aa90f5bdc552a0602af6a0d0096a83c6723a3c9575c5659ae3dc1e45d63ed85b4de3e34659cbe20e5674e6224c8602bf804463f5cdc52e8a49d6ea88d452f967137235966df8e1b5981224f4707c5a2b2158063bada0061fea80e71b9d09ed28b9df285c654aef8ef8a076c485ef6d98cb06ca431eddc8866d5eae2abd7f26448f547739a133616f6bc715af3f65f742dadb5cb1b026a27f314791b3ad23be4adf2706ef4272b0d8c9cf812fbd8baedd28a5618ebc7071a353fab590058d3f9a6952a0006ec145836acab62375c29c149e8767031aa337cd7118b5493332b0a4183d83067d8c93074b5d0b7409769e66f2bcc39b1cf79e5e63081fb338fd481e59e6d5ee1880e007a18f5355c113ca956fa0accd5454f98eec2383fad77602e34d49f450e648b3519d9560b6142509e6eddd657123cdd8e111a977e4623da53501b4bc4c1c28b66d7970695fa0a8b019dd301b4834635b97f20980f22d9d4924dda998ace7784e727309c6696e17de5ef305993e895d0edca75c1e8fd7c9464e80448ffe51f4cfa0919a2c0531ffd4c8a007ab3ba8234998399460bb3377b219bab778ad726f29b33990b9f6cfe0a6dda0d3f795b3969d23bac4b826d5574b809deb9c970179038fe13a8a2037c664256870a7c66635dfc89069785e818b93638eed6f6c314af2c9dde378ec1657901aec8e446d964536f47ab16310f66c3d93f05762ad7faf095ce55b8d1b79fe42d1524a9d1c78593ee2a1ed30dc81c39a0c2eceaf186076ee2200051cad82e5ee4825a48c4211d2a06aa69d096c36d1e7d0476881cbe93f4abc696a945d9c54c02e39e4efea60c97739de2654574871915ba9d2eee09bd5c4858e93d98a5cb163bb5f193f0e714c12314e914e9ca846732c41d64cf30a6c6c64518e7f6b16da89c793e3395dc3807e18767c2301572a67e73ad59d18348ad9e1ab5d88d0388da2d372c1f3254d798f143321ab5600bc0960bcc8305de0a32496c330893e1543f01787682fbb75c9ff70ed8f65479f5e0af37ae0aa49fac7a54b"}]}, 0x1038) [ 668.456475][T17168] input: syz0 as /devices/virtual/input/input11 00:28:33 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 668.636389][T17174] input: syz0 as /devices/virtual/input/input12 [ 668.714480][T17178] IPVS: ftp: loaded support on port[0] = 21 00:28:33 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x84001) getpeername$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @default}) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x7401, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYBLOB="00000004"], 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={r6, 0xd2, 0x0, 0x800, 0x6}, &(0x7f0000000080)=0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYBLOB="00000004"], 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000000)={r9, 0xd2, 0x0, 0x800, 0x6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000280)={r6, 0x80000001, 0x5, 0x59e8, 0xffff, 0x3, 0x1ff, 0x2c, {r9, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x2b}, 0x101}}, 0x8, 0x4, 0x2, 0xffff8000, 0xffffffff}}, &(0x7f0000000380)=0xb0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000100)) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fedbdf250a00000014006e0004000200040001000400020004000200"], 0x28}, 0x1, 0x0, 0x0, 0x24004085}, 0x8010) 00:28:33 executing program 1: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) [ 668.867600][ T27] audit: type=1804 audit(1579652913.910:381): pid=17165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/108/file0/file0" dev="loop3" ino=359 res=1 00:28:34 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r2, 0x4, 0x80000000002c00) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e22, 0x7fff, @local, 0x1}, {0xa, 0x4e22, 0x80000001, @rand_addr="1eab2860d8d26463b729f2c9520a68e6"}, 0xfffd, [0x2, 0x100, 0xdfa9, 0x8001, 0xfffffffb, 0x400, 0x200, 0x200]}, 0x5c) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000200)={0x3, "e739bbb739f1276a42e64875852e8db2d3709b8a83e0fb297d6ea7f2e726090c", 0x3, 0x1}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x3f, 0x8, 0x4, 0x400, 0xfffffff7, {}, {0x4, 0x1, 0x20, 0x1, 0x7, 0x9, "5f66960f"}, 0x1, 0x1, @offset=0xffff7f9d, 0x2, 0x0, 0xffffffffffffffff}) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) renameat2(r4, &(0x7f0000000180)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x0) r6 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f00000000c0)={0x8, 'vlan0\x00', {'erspan0\x00'}, 0x7}) [ 669.192663][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.198672][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 669.232685][ T21] tipc: TX() has been purged, node left! [ 669.356900][ T21] tipc: TX() has been purged, node left! [ 669.362772][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.362795][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 669.432674][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.438478][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 669.471693][ T21] tipc: TX() has been purged, node left! 00:28:34 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) [ 669.563722][ T21] tipc: TX() has been purged, node left! [ 669.590651][ T21] tipc: TX() has been purged, node left! 00:28:34 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:28:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x0, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 669.627818][ T21] tipc: TX() has been purged, node left! 00:28:34 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r0, 0x4, 0x80000000002c00) accept4(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0xc00) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r2, 0x1e96bd0f0535ce91, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x129841) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) accept$packet(r6, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ec0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001a80)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000001b80)=0xe8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x9, @mcast1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="df1992beea881f93bdf1126f1c39cb8cc7f58490e7c5cba7d942d3953a4624ea5e1e5e20c8eb4ab48639c1b253efadbdc4", 0x31}], 0x1, &(0x7f0000000480)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffffe1}}, @hopopts={{0x28, 0x29, 0x36, {0x0, 0x1, [], [@jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts={{0x1d8, 0x29, 0x36, {0x3a, 0x37, [], [@generic={0x0, 0xad, "c96d73aa1b82f3eb8f34bff092aa6ed535d8773029b05f5246b22be8c054244b9d0696f2b3d2f75fbdeaae14502ee9e9d2f8d59a79cb15b0709d8d98424bbc2678a5b190fbb395610d1aee01de1e383b97f069eb44ca70aaed251cf6485274df6b75956e847354d20d840472c16981dd6abbc2e52a88be0338ea9ab1df12d0c4d53acffa20e5407a383dc57448a0a8ee6e4660f59671a1aa13578bda0b2103905aa0cc0703f10a1cac98dddb85"}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x3f}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x1, 0xe2, "7862ac16f8f43234c75aece170838df60d11602020bad5061c420f57291f8a7aaa245f0c70d41b247a7ab2661bee274a6b2c8fd4d6448b3576cf2b894ad243d2edb727a89b0f070cf38bf69b6dbbcc5bbb1e28a38bc1dbd8612816adbb7554249716c0676e3b19a5f4594c8313aa7ebca6864ff5189beaeefe49b3bc7a6aa9db48eb5e19f964efd1c23114b286fa2c18fad178a82cd1bd312c923a758af9a088dd439ad5171b2147563088bfb8f9d86a797afba97d2feb1a67855b57b10f4621d0c8aa23bc117d9eecb2ac0b75aef02c6496ed1eb673e7edb6ee3b6bfac6d096703f"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x80, 0xfffc, [0x40, 0x5]}}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x33, 0x1, [], [@ra, @ra, @ra={0x5, 0x2, 0x2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fff}}], 0x258}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000880)="d24b0ed535d9b1246ae27675321f005f48c1b519565a944525057646de291ea244f37e56c23dc5b01a32980f7ac7fafb3ed6562bf652aa55bb36a617104258ea55dfb1899525eace2096999dce2518f6a4bf5952ef7325a8a1f00540c7eede22301a7d1734ac27b153e530ee1f3a91e099b565fc48c4cf285f50679fc215546b94", 0x81}, {&(0x7f00000002c0)="21bf3da94ac0d118b906f4fa285dcd4c301685ac0b55ff6e5d2c4cf2083b1a9a2eb7b3444184071cbb4a93bfd32cae0a372ffd6832ed53a2bd604a827fc48ed6ef940c74a791b63a82b509a572bd891af4fdbc6c0e11c52b02bc1b4435229d8aef667255fdd5cd5808c154af1534c775f6c37595235344d5affdf31c", 0x7c}, {&(0x7f0000000940)="7c6d586126c44019d8707fd63e2ce6a399b040fab5b4c482437d36110b7bf45a93f4dbe487b17b108a59f1963bbf5c9fddbefb7861cc0b15117226def2ef700b1d86e3331bd9492db429706278a52ae6cdcba47d14edab1144c12e3189cbc0e3d4cca2da4196c83a706d56c3b567bc50f3e65f36728497b81ea646e22df0a0c158883f5f3de32cab23beebb9e02d709467a4386df81e9fe4692e796e63354203c1a57c9a99568911a5f4ac22658ef32919", 0xb1}, {&(0x7f0000000a00)="2dafea5f50081a648d24c3fe713c4ce184635f064d74350876543cf5bb69290a976d4719947e1d8a20c09405e04b7cbd7466e67c3ea6fd659974213d050f4abd236444f69e21b2e510c193d2b427a3cfeb44147fa96b9c1baa8fe239676ba9c45bec95d68917a548a6a229e45903a870a0054a58", 0x74}, {&(0x7f0000000a80)="9826240271ff9cc9fc4f99479ea7564a0492189ba18341845af56bd2bff21f4da7f166a66a1bde04b905ee50c31618c6f235c4b3ff1ca77cc8e7f664214464c28d7a4b81da392e60e8ff470c0f19998cf907a8e5121331ab1050a51ca632e5a041210447ccb8ab32951a738a44", 0x6d}, {&(0x7f0000000240)="d50fc0dff9298c8f068e8eb83db28e477013228f94f2", 0x16}], 0x6, &(0x7f0000000b80)=[@tclass={{0x14, 0x29, 0x43, 0xffffff01}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x0, 0x5, [], [@calipso={0x7, 0x20, {0x3, 0x6, 0xff, 0x9, [0x7, 0x4, 0xffffffffffffff01]}}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x1f}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x3}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x67, 0x3, [], [@jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1f}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7fff}, @pad1, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0xba}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, r4}}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x35, 0xb, [], [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0xea7d}, @enc_lim={0x4, 0x1, 0x19}, @generic={0xff, 0x40, "09640452612374474957799000fc2c482cf46eb2e991f686dde0a86a21b87f8bd9438e204d51ed8fa2302ff75b9af7f71d5bbf95c167f6414537d9df784f6b88"}]}}}], 0x168}}, {{&(0x7f0000000d00)={0xa, 0x4e24, 0x7f, @ipv4={[], [], @multicast2}, 0x1}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000d40)="5cf1e865eddd18ef411bf19b95dbc8a004f61283ec8709d6512865db94ba7ca5b59e68502a6f0cac4c8301fbe2b725d89c4d03a9d6da8946e041fbf4b45a2323cc98fe701f2b2d865a22722026128226cfa53c7baaa79e632d892263cbba2d16e63a", 0x62}, {&(0x7f0000000dc0)="a71d2ede451f9c1f37f5a76b70612074e0fb8ddb0bad05508e7c8b2d9c99d0488f", 0x21}], 0x2, &(0x7f0000000f00)=[@dontfrag={{0x14, 0x29, 0x3e, 0xef}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r7}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x58}}, {{&(0x7f0000000f80)={0xa, 0x4e20, 0xf04b, @remote, 0x3f}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000fc0)="b6cdad675434bf065680aec4ce3be315d893d10a3c491649dc0083f1ed5774b0c9de7d58bf6857d063749e2f616d6d514ba2ad1b333dd22fb572", 0x3a}, {&(0x7f0000001000)="2f39137c257c7c24d7a38f516372689cb50182aba5dc54c75db5d4ab6fdae21ade58c1709b07dd124de1ae3e0589ed964cb36afb5c22685d6aa74f17a93099cceb074d2c9848dff1348e4ef7ecb09ab0adf97ea5744b6d6f10c69d7445f86129bb505354bbcc190ab23124864529158afa8cc522e3aa36aa553a31587caa14dc03b8e102dff84cc9c71fe1876530f44c377b89c14e99f511384110a4fd33703954e6d8bc2b9c2934bbc926c25ec0609912945c558b07c59af26be39c82791952d858ee3cac099d62a7b8658a", 0xcc}, {&(0x7f0000001100)="fed0c9e73ed764c61257cadde59f73f2df87946753101b42eb006778fcfb7826d3e73dbadb9c9e8f0a8930fdeaaf0b5585b512b1a7934201c9ac1b2319c424e7fa45ebef06f8b2db8ae16aec28732b95e1628d82957267cad3924ad72db4188c54faf5400e61cdb38ed0ed066ee9de50f05ec81b241f8540de9eff6c794a563997438fbf40da2adfb3da4a7f6433773a45a4ff7e8c27c5681c0bc4c0faa1e64d3e922853db7287f935f6f1d2a2b07e93108cb0cdb783e5919c9db3f47b8b993a66a455dc6cbe30147193c4c49ab94de43bd669eec5e099b23beb", 0xda}], 0x3}}, {{&(0x7f0000001240)={0xa, 0x4e23, 0x3, @remote, 0xff}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000001280)="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", 0xfa}, {&(0x7f0000001380)="6bfc901dd7af912a2e70f4939079f4e60a0e1ade9998789c8ed51c132b9774e764f6b36ec6c6d6274fe7336eacc7ec2599eb30b83e5c51a7074edf90544e21e5f2a74e90776b5b801e85330ffee5c01d6511337dcfa1a3dbd28ae250c540a72e3406eccd2c73d3562d1caa8ae38284316df3be79207a725eda26ce60e0ca1781652cca7731a969a47b62d8224fd779ed2182855cbd1bc4164ce38b0085629ef5d00f57a700d3046598d4e77903e11e6854c05d049698e1312143920e0e6b7d767dc9bc1d8b334f1f11a90d244861d7fb21d763fabd97df6a331d1219b67d8e73a7df1bcbaf1acae1fbb06614f4e5bca8b52c325c9e", 0xf5}], 0x2, &(0x7f00000014c0)=[@rthdr={{0x28, 0x29, 0x39, {0x11, 0x2, 0x1, 0x0, 0x0, [@ipv4={[], [], @local}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2b, 0x2, [], [@hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x40}}], 0x70}}, {{&(0x7f0000001540)={0xa, 0x4e24, 0x6, @ipv4={[], [], @loopback}, 0x5}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000001580)="376aeb1382ecbb9103c38f88b01151f0973cdc350facf78e68cb2155b2e417ef69a6ee6cec9779ea63091560ff954b16f547a0690b64e8a9ecbcdfc3d466da8ca4d90237987e2bd0a0e5a0d79925b99040b0996e48ab4971d6e613ca080d9df7fdc8142ca05d4959a82ecb124a6165a6826c5c1930b254dc3eb7a5f2322d18af49bb8588828f0064852be7f67c10649da82a19e2b06946083c43eee4df239b2f4839fb3780bfca4f45a0a5e1f6efb449b3c50a85981f32f73bec23bb9eec0668987bafb0905f38174f8dffc011eeb3ee4ba7652f621c8b3b76dfc8", 0xdb}, {&(0x7f0000001680)="b2b5403df4f8f258cd5a330477b6aebc533e17fd2c4cd83e4127034d774301a089072679031920fccc118a6b0bbeb4170fc024364ca7c4ce40b82338189eebc25f5ab299c585a8c9db8784", 0x4b}, {&(0x7f0000001700)="738a94a81a9717e3007d106ed06e172f3e992ec4b3831cbd7c36fc5c9151b292319a2cb1b3f3c035a5444618f63ad0d090d7810b3747fe79ff9cf96a56c98e615a7f79f9771b4e473b9e4309760d3ffe901a02098254f63e6af5f3fc0b73be92c05ea1eb0577d7301265118495f21fa6709d8ad7fb8251e74390345d89a26fb95b11cc04d4c39cd45acf96433c66232a3db40a7960ffa996851e82d0ec0cfb7b629ec00bcd3150962a9440577fa44d5cc4", 0xb1}, {&(0x7f00000017c0)="1f6debf73e708808b2f4a8855a637f02d452e6021c3bbaa55555dcdab16b5332a84b1b3f668ebbd09aaa2d920fb0bb54e82129692e15e289b940983d1a53ac61bbb8b59296ec55d95ab4ecfad5133ccb6e3a5c49cf02d148a9a292a0b4185b7a303698298712a19aef6746ddcc02c363da03076d65299bfa75ce911404cf75631b9e07432260d649db85c281e2e2c71948147d0e", 0x94}], 0x4}}, {{&(0x7f00000018c0)={0xa, 0x4e20, 0x1000, @mcast2, 0x800}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000001900)="be02a3529fe0b8ea3692f89bea45c507ae6faf3e36b26a35cab8cc292dcb8795f199", 0x22}, {&(0x7f0000001940)='\nD', 0x2}, {&(0x7f0000001980)="c6f908cacde9f03c31a3293f7108796d8ca25b8de5bc19d949dafac18892fe2da87a4e09c653b9d2262af8c582679aca6d29452ebf384f9b618478c54ca0d888a9f693c73bd08966c1e78aff45fb36d2c965b507f8b3d0b35e9986f7bcbe65cb7f151953cf98d1bac8662d3116b900a92bcd41f80821e8", 0x77}, {&(0x7f0000001a00)="28ccb823f1c34688c87d0863324fa19d5c044c2059405d085772775c827068c93aa5", 0x22}], 0x4, &(0x7f0000001bc0)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x16, 0xc, 0x0, 0x3, 0x0, [@mcast1, @rand_addr="9a9a6746cb116219f981f323ad44423c", @loopback, @empty, @empty, @loopback]}}}, @rthdrdstopts={{0xd0, 0x29, 0x37, {0x8, 0x16, [], [@ra={0x5, 0x2, 0x1f}, @generic={0xff, 0xab, "d8c39fe47c6ddf3b399fae31316a7d672c244d9d38863d53b3f5562cec3b065a8f4e346513860ff0368cf758d4d2ffc7f73ff27fe61b312cdb75ada04cb10709878eacdde2dcfa83cf3dd606354625bf8c496653819d84cc3737ae8eb8a10e0a67f80041b11120932c95e20268bb5a339975fa678ad8a4e436582bc76669267387d4df1506a14a55d2e1697303b739c86a4020e784202ffb4e09bdacd56416c552b2626165f4182688372b"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3c}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x29, 0x1, [], [@ra={0x5, 0x2, 0x100}, @jumbo={0xc2, 0x4, 0x3}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2b, 0x0, [], [@enc_lim={0x4, 0x1, 0x40}]}}}, @rthdr={{0x28, 0x29, 0x39, {0xff, 0x2, 0x1, 0xb3, 0x0, [@empty]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, [], [@hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}, @ra={0x5, 0x2, 0x2}]}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x2, 0xe, [], [@calipso={0x7, 0x40, {0x2, 0xe, 0x40, 0xff, [0x0, 0x1f, 0x7, 0x5, 0xffff, 0x86e, 0xca26]}}, @enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x30, {0x2, 0xa, 0xfb, 0xb800, [0x10000, 0x3, 0x1f, 0x8000, 0x400]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r8}}}], 0x2b8}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001e80)="16e261c5d11f7a9430cda2f20501e5e242b84ae63a3ef2552646ce4014702e83ee97e12199b48f79ab01fc777b99ea5242ba8cc66d59562737155b88ae90fbc47061b833b38e45fa82861b5593b5e078cf118c7a8bdcc110b16a7ed2ae67a8e976dbd07e6c3b67a8ffdf32f498a032358189fe160ee85ef80685ae9649ac09fbe50199cba742844a9ad50072796da385deb786045704aa4577a0fbffa48e09ab97c63c22d0820bdbc2ce83c025d55b012a79", 0xb2}, {&(0x7f0000001f40)="13b66c376612242bf985df1f54f09d4a2ff7100005be31eae765c95f849c036ae0db183d84a04ff96ed30542a814c7b29983c028609ad654cadde92869fbd60ee694e13f168774fa9f9c2a601f2127e381a7f04b3500e34ed6e95e41c2c043a1cca249d106d3d7382bc1722ca80ccb83bf0a2a8dd4d486e1227b967cefd99333ba47bc0e8e046532d5cd", 0x8a}, {&(0x7f0000002000)="21179e123d8c7f62dcc1f1d40382994f76bed5fee418dbecf91e0dcd7d4ab9f0f8119abad80f196f175436c42dfa9cd83c36728462f0df2abaf35641ec", 0x3d}, {&(0x7f0000002040)="26ce067437e954493807bf44", 0xc}, {&(0x7f0000002080)="2001575e432b846e34aa4f8773279bbf88aa910b9e4fe791329562fe6236a3840c128f72ca60c341fe43312e14cf1c823824872ae17cdf15808e65eccad62f06749fafb02b00926b8a18808df26f136586fd8486452540edd7a8a11278f10ba7cb1151077bf8374a67914b8411b2194090e57567a21c7c432d4457670ee4d69183b207963a92885467f52d9d3f72ce17c8bfc0e4806a78b8ef95c44310491ce9bbd467fa90f2149877ee98093b", 0xad}, {&(0x7f0000002140)="3f77b036de6d67ebaeb6a43a66f5fa2508057292b3e8c5ed17ffaca0c8871a65fa1548dd509214e57edeff20", 0x2c}], 0x6}}, {{&(0x7f0000002200)={0xa, 0x4e24, 0x8, @rand_addr="471b927dfad6eb02fe0ef1dca1358c40", 0x1000}, 0x1c, &(0x7f0000003680)=[{&(0x7f0000002240)="b0d1e698bb0827166554b4e6a33dae0a8a893d0567ecf7ac4b02356ecdaf0052100443caa64bad7e558b7fcbda735fa374f3dbd1604950a6804f326f89da8364c417d711f5c5bc30a03f46f234759b686bfc92ed30784dcbeb8b5588318a9ce0e9d74c2f1c2488d1e4eee2d41357bb06cd27b721e012dd9212ab70891e0f53e256516f51eced042b8120fc378d4a928d1399e0140208d252b4cb2aa0c098a7fd593e8e3317168cc5fe8286007e511b75334d4262e625261827168697cabfac7e7222b043d7915619472fe9f439a334fbeefb4e828a27c8dc253eb614809a641bb856162ae265db690ece5bf25ab89dd32b6e914e3ffcc30b6b102d9032bf0c9cf541d40a59c45b6c359f70a665e91bd1db71c3bb9b3da2778d2329b3cabb199a03a9970a83b2a5e7a45d9def46ddc87069643a07f7a0e786bb8bfd032dca53895d67491dbeba445ccc4e55a6a7722fcc9ccbd71bc9aa73dd32f89d891db8e4cf12bb830514cb37d5757d97f4d7191cce764cd5ae66bfa894e47460ad34d698ba49ff55cbf0fd9416b799d65206fd25d470bb3e39281cf378ca31d0273720b51ca69327d383166d585038526fc501867fa5fb51072422be57d64f8a02f9b69b82077fd254150065b6fe9d7d29b34603dac2ca8abe28ad22d9cb4fc52486c2f89cf01b988df5583e919ce522377ef95353b07c9a2773fe4e963e76c9ebe56f5114c1c478cd4bef2803831c470bfe9aaaba52997c3b0053ea6472a732238e2bd633d087128b42b5a39c8cd5017946dea1987902ca8aba43b5a8bfd7ad2aff4533b0209428a04f13326580927600013cbb302b93f48ab0edcdcc2f6076b1421672df9d83649224f0c1d831e7de41c7ccc26f5950c0ebf10b7783d8abeb64a3d86b2cd2b9167bfa133efe1f633f3a2193790dad25d1b61541a31565e9095f2c8962e9eb47cd34ffe44c93b81123049dd38820183881574bd1e159e4a5c083fa61e26f56f22b6d2bacf4a245b9239d59b5bc69aabea0b267f39378626f269b380628592c311b77ac2cd8a4f9c786536e18500b35d1309b95c7aaf35dc686e3d026f6ac923fb0b13dffc44c19c477473d00e4846204275ff27208501909b312cbab181ddd03dd53cc576d31935c9c6bc6c326c42e1f0a9cb30b92c8db43e98213aaf959ee8f2cacf095acc4761aca08e29d195f1fb2e3689c131e9e76ae22a9bf0ed8b172009d4d4e0c5a036b9f06dc9a5de74d50613effd0c6684efc5b9aa8fde067c518f05b439d96f31ce0759a32416c48d4900dc10d1ce199fa891d676d05741dd775f7428f71599e6f64ba90b0d25b55ffb5c26396de72c17e8b569a41bc82a39bdc9c3e962383a757d77b99989c163058bc2ba0912cd441d816a6675774f26f0669008a90affb094a1238c12c995edb99146b6b43939fa4a3d5caefbe742435f69f5ca4b4b10320fa2baf364be456a59ca8e346d4d4fc579b9ca4c771fdd883eb0334583c5f582807ed97326759cf85dbe868c10500ee3039805980222ebe5f17dfc7ac00f4f19d2fadfe7a687c67feaad688b7a0ab3e2cea3a3f06af7734b1da2398802f57c517a1babdba204369c82b4bee3b9ea13970ccab9dc295087091b8d563ed80b57363f523fdd5e0869e78e0c8e37b1586523eb2f48ea09a78741c6969b8ad11214e461a8c001d69a9c1a4496a6981f37d3e25cdd0da6bd2c6443bf38219558786a04af3656a97620d7ff1fceb9c872fa19b067f02c3df3d7008420311d2a79ba56bd2613c56e188ebee001c2c3ab69fd252116e341b97eeb5fc47c6e0e19f6a28e0335cb4f8ce8c91fc454e2f20b4ef85925d04a0ec3330adc6c6fc8ed3517281c89e9c54bf422127b9422daaa3e7bf30f3d08b7614336b6e8128b20c03df6d32d9932a0106acee3b7eca95e9106242c79fe4faf534e14b8f721391ea863af59f6f8b46afb28643b05cb814df4af772a15f1531ab6ecf86cc5c87a62e284107f50f6a0428470989582f35bfd7e0ffa08c483b3f380d80e98b80f86770f58f6bab3316b5cdbe96833791d43c1c4c214a253fedbcc9aea9dc778272174908b7d000d742916cd6b70530ad928b54c019254defee474f0012954374450aed46df25c695b7e7f59df620a9b9dcd310d2e0c37c3f655c7ea3c3e6fc09c675136ec927f970c27529c4cc6a490bfbfd8943777eddea5fbfb24f398b0e349821ea6db6d7722ce935803a84d046dd1e82282f647e47c2a1b542bb17b61396c0ab2d343497bb393ee3c33841cdc9491b3d1d7847720dd77d68f5f1c52013707569f18dc41345e89910aa2c7fc5a1350fbb75305b0ef1f70a27ea7724831c3448bb48378757caca6703c8ddd6295552376f0ef02e42f62648eb5da86a3848b746158683e0f4912977e93db376fc50892bceef27953baad71e51f4d36e0db7e96cf7d49c7b780f3ce1a87a83cfed4640aebd0585a6580970a4ed2f2f6cbf76c16667ee4141cf98b1e4124424e09934bb540ded685c66780448ac7596376e95c622468cbee40112c359f15d9c0c6da7a15230de956246661e3d9250949792ae84fe7e16decbfe1e28dec5294ab1470b003183bd729d587379acebf85f77f4d889e03055cfca0ae91a24dd0b234302a513b3ece5e4d406e9cca872fe5b26f6c91110fc1fbce3705241333160c47d561d58bea58aa67d49a5a3ed39fcdd5c2d8c68319d8fc6a3dcd690935fe62c984b3d5e61f25f30f7b74a9b55de18fb4844aa7e044472ee5e601c89514af10a97a6b6124c2f25e8c5a89376236d1d1ffe056f641a15552a1c35aa351ece047b171f6a6ffd4b42cb0e1cd8256d8d164a099c4acde6dce6468d9c687374cc3538b9c4eeac813d47eee1cd17d3f01d20c50d6b1a2c23c5027dd4079a8eba156b0c196f0069023f92ad090941ff8022a0067983f01ab89c399565621ea9b0aa69079ac8404010533f300319ee0c6f2dc53be0f4bb500a1eca9d9763ee2b60a189ee8021aeb55cf103369347494f76a380cf0a400b6b89c75baf0ccd77ac41d137cbc57002c50e9a40973ac05ab201e6819a508c8bb67aa913407ef0768fd86d7381aea20aaaeb59ccf344ea9f7745d61bfee3ace2fd098f2793c7b2f1887e181659c8128ec6bc22bdba606c3799f2463bb72bab162c7c3ebde9fc0b902c87ce999de5a03a7e208f46b0380e2cb55d084628ff3353b22b4683ca22d9e73f28366aed735fee813cf5cd148984c3b05fd2759f70017c35c107c128e273f68fbd2ed196c25ef545fb12ec98b87edfb9e0afe9d919d0586c61d6db0e25184523a8faa670f4bfc49ed7bd22e0ee6ed3c296dfd9d5c7118aa6a8ff9480ff9ccad31fb451a6d514b0105ef8872604106836d7d637c15d15e7d1fbe8b0e737a60aa240d43f8d3cb1e15e9b675cbdf673ecb43f9166cf5d73f5004325780b9659e939772a3132e15b8dbc39371cb099f169227bd1cceb75862cebda402997fd2e04c35551fa5e0088c095eaef74fb9ab07f9afb7d733c4f92239ec2dbdfa02bb3ad6bca520bb90d4803d5d106e43a33a2af7d6683acf6ca71086c1caf56e98c0e9ebf154335de743d91b5a48a767a826d753c1d4032b3321eddf2c6afe32b75a50e14fb51dc0d452714c865e6f087d075ea1afddb4dd09c31c2105a503c09cd63b4fd87e42a00f8844056b7a4a2ea2bfe3db3b0be45b00c3e8dab7bbd04af7c56e2488fcc17939ab5bd0ce4f0ed764d1770bbf13f795f11ef41d3d561765c2d9e9e234c42e251305d7fe9108d95b9f079a58bc5e1dab8112ccb9afad5fdc120141c9c5fa89900989eb4055382557c24846658663c6611279dac98db04d5b414871ccac404c04d0c243b88ddde76bcde477d7b66d620049f0cf3495c459e80c9115dc06c334839ad5257313902721a618665ae524cec5b4699ff7d7fe447622ba93188eada045a99d51cf3c5e8a39ad42b86e4963041188b563b9b45cc1e3d2d74f5f4553499fbc5c0e49915836a4498ad3e005b360807b85c53900722d0ec9360a271e897783270d6b0e2a0a1017517f9191105cd0d2a344c366c9d3b6ec5c4123e66ea1bacb80ffbc0c9a048d28d344007411a046c889416eb7e13a518cfea44a72de9c2d53bbd07343ce6c2f92eda0d577fd2361cfc2289cae1c0eb9bbbd2369c4e856c52cf78d5caa3581db5ec30f4d6b37b397e601122455c05e8025519ef57850db8e23b26d7ae0a91622bd9c47dbef3a0fcc51e63f3f536708ec5ae62e8e9be4fa5635db6816a8fb1b80395f4b5c69c52d202a6aca2529a56b20d09734abfddd9847eceb7d35538b59b95e15494cbad5ab7c57ae0c5c0f734ee80a1c9d9eedc35918f42a14cec258ab9c8b9eeac0ef171c971e98de95fa775f42495f84519095367ef1550bc322597eb5d038e42de08f5958d42a47942cc92f68a8e84b5b92e553bac8267c601dbf613b5f132394e5ca61ccfded6eded87798474483242540293f712b2b0a9df5065042ce845d45fa4083693726d80178f8d23cbc6928f0adf64fc37148063e0828663d5c6b90fea4d0dca1c5f0e058046615ccc3242133c657f93cc1816cf2e294df25f506c89aa48c48618f42b67ab836c07bf597863a00b36824df67ce3dd05c40648b6270873af9f2a5e7589821b6564ae7a23a910522545ebd39a4461a8a61cac2e328dd9a325193f95a66b636b313d8b4faa69705f8fb21a04d19e1c4d9ed5aaaa5ee8465555b255962e4e9495486a293a91cb4c6d7a24b9021e3be41a98a9e80e851b5df46b5540c235af4f39b20adf4e88acc0cbc9e2f9ef2617c06d08b535915fb90a99505f975338d8a26146a71551e365282da3904017959ebb87030be3c80cf57143b0399bffca0e043ae67336f1bf49e746483b806904481e63b7308e98e2c0aba010ad72276b61b6cf7dbdf52899d8f775d468b9832c5acfcf218e33ea01724a55576aeb1c602f014e42cf65c2499514b6930b9ac2d5fc5fa3914665369966d0e27242527e6f7f46c49df060c11aecc456f91bf2fad74a54267382199aab1780c3cd5ec44be5bd8abead8f1f014721e45eb0defc7bbc7e196efc94686513272764ff8b773868c59353be2d9a590d47d104a5fa16b24cafb92347016dbe2e4692e8bf4d2660afc08e7f714ab7f181d0da3bcdf0d40e79080588ef4e9fc0a21d786d2581a874d0ecd8b7a1f635d65a38a8e7cee1eed9f484c5c8eb006fcf3f8f73199f6c012aa57efd62fdf72f78c0520f7a961728b150864129d1d2d03a800227f03bddc9c30d7d8beaf5aebb1c1c9879daf54b59f48f316292c69072e65ad327531cf037975a1a485648a6037c1c44c74de84f7c9dcc0a0e52b447fc4d081ef4b8bfca9e0c305613ee30b5112cc82970af476f7967ffd35fc84b00c6277b2ad61163c4375109dccb9a87d04f4bddbe54e643612bdc61b4ebb40ba0ee706ed1cc2d2337f6f1a623299dda0453c1dd76c8339a82d96eb44ba29918c475508015bb81a4d0598b3ccfcb1f87f57c91673f98b72eab20c1a51068349c1d79e97e5b7300540d857a79dc7436c67a9d4a29137c071f3f857913ed39778d4ca194bea18dfd9924771c28891a0d32143a019a8bfdee3d596e1f658a98960ce505b4941e477ad0d6da5e60a0c0f433b02158e640cdf0d335cdefdaceeb94a02a3f1ad62732c9398c9f92cd3293a839dce1554b8201cae45d08cd3515a24b622b6e0f718e877887834e47acd044f4c5ea38bc96ef643df44034a2554eb9cb1fbe4df4ec74c9805cb996e5c8b5a2dc854028", 0x1000}, {&(0x7f0000003240)="a0aa791c4864abd8abed29bbba51be2814ab502f7e8c0c63022e837062380582876038befacced06c7bbe3403aed27ad593a75ed0149edfb0f3f8a78868f3d446cb49c96ca30d691f53fa1a19027a8e8036616f2f7057e2fce16c4bb1fc10b63b924de518942f9934b71ca2edfb17151777c93", 0x73}, {&(0x7f00000032c0)="3ea740f8a428a5aedb90a633f8afd7c3cce2ad610fa0d369472c74bc3b64b91ee0f4090ae1c3d787846f59156aa5e553676529b042d371c3765eaef3717ba99ddcb3858c8ad6009a537e0e00ab2766941692fa7fa8a9ab21e5bf9ba037e587ad4b33789f4391a42f6280091d8faf349fceeefa15c79524b8bfbedf9f1abd034120e139ae79dadb6a8c664fbfccb6ad25172b47686df827833327c7bc9bb1b3a27ef32ff3932c37d7958576fcfacdcc4b961ab5b77580be6a56fa3b472bd6cb2a2200f5f870f56c0316985da0aaef55001c4dc35b40509f01b91356cf79d4e8d30da12c7d10f1ed6ee5fcce46c841", 0xee}, {&(0x7f00000033c0)="69e3dab6b32b8e92d890dd5bd5423065223025751df0bd28398412fe6c062d39e14058bd197826c496114b03523b1493980134578b313aa8e0e4a2685b255e2e4829a5285aad56e2f86fae22f01f5e30dc9bef2be01d9ad7f266ce32f7f5bd8b152a13d92c6abf3be17ca82522448f1d31a02c94e3aa45ade2aed9f9a505ed37e4ca84844946384ea9fbd9f46a0e953f8fe22ec6e8ee0bf98caeb3d4e7adde0f0b75dad9b9f4b191be30884c6b487b57aad481444f4e730534", 0xb9}, {&(0x7f0000003480)="a37ee9b8203f911f023ca9651cfdfd804915791cda0e7ba1ae3c", 0x1a}, {&(0x7f00000034c0)="3730875f792178dbcc14b7bee95978df18ba5941d41db6be2a499c69b19f7459bed0ecc13893acb88f5638ca42ab97faa81e7647cddbbcbc98674a19eb31111a38c99c56a12f372dde1465b00a186b8274fa0000b6f4284820cad143a8b66b304bade1ce8211a589d8a3d6e8b2da22ac46fb955f60a38dfd5fed61481cb9b99c1c4e00ac3218f27b4d661e0a918feb4e6ff966abe53464cb0ece3b7fdb464fe2147558fce61171ca93afcd674cf272219fe93db2c3e5e140eeab48", 0xbb}, {&(0x7f0000003580)="a7a8be667ed9bd75fa683f250237ac656aa7801f2e7e858991959800b0da5448309fbfdbb0b2ff5f0d52297c2bf0703433a1d52990a150ca1d31bf8223c3329f2a6f3a8dadb5e8e36716f0d511c666fb133a5a51ee8aa19902b28a46ef922875c0c79fe5710767ec49fe279842c3ece5c73b165a829f64b787dbac228370a2d7310df6a2ec429264f572730de70884422b4c6164a06780c4302c254f09d2b320b0c9221ee95500d241eca4611b704462cac200c581caa18fb3d206e895c35798d6f1f30f3d65b81a0d71d7", 0xcb}], 0x7}}], 0x9, 0x84) r9 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f00000001c0)={0xc, 0x1, 0xfa00, {&(0x7f0000000700)}}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r11 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) lchown(&(0x7f0000000000)='./file0\x00', r10, r11) ioctl$SIOCAX25DELUID(r9, 0x89e2, &(0x7f0000000140)={0x3, @null, 0xffffffffffffffff}) [ 669.691531][ T21] tipc: TX() has been purged, node left! [ 669.712554][ T21] tipc: TX() has been purged, node left! [ 669.818716][T17207] IPVS: ftp: loaded support on port[0] = 21 [ 669.837497][T17208] IPVS: ftp: loaded support on port[0] = 21 00:28:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x40000000000000a1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = dup(0xffffffffffffffff) sendto(r2, &(0x7f0000000240)="67b93f64d764e61c4c64743a8737247b", 0x10, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002480), 0x2314432e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0xa1, 0x3f, 0x4, 0xc9b7, 0x5, 0x5, 0xfff, 0x2a62, r4}, 0x0) [ 669.932681][ T21] tipc: TX() has been purged, node left! [ 669.938897][ T21] tipc: TX() has been purged, node left! [ 669.947975][T17217] vhci_hcd: invalid port number 0 [ 670.029167][ T21] tipc: TX() has been purged, node left! [ 670.062735][ T27] audit: type=1804 audit(1579652915.100:382): pid=17214 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/109/file0/file0" dev="loop3" ino=361 res=1 [ 670.137577][ T21] tipc: TX() has been purged, node left! 00:28:35 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 670.202971][T17209] vhci_hcd: invalid port number 0 00:28:35 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) [ 670.322735][ T21] tipc: TX() has been purged, node left! 00:28:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x0, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 670.371468][T17231] IPVS: ftp: loaded support on port[0] = 21 00:28:35 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000100)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x347082, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x20}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 670.433355][T17238] IPVS: ftp: loaded support on port[0] = 21 [ 670.478469][ T21] tipc: TX() has been purged, node left! [ 670.535679][ T21] tipc: TX() has been purged, node left! [ 670.554778][ T21] tipc: TX() has been purged, node left! 00:28:35 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r2 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r1}) 00:28:35 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:35 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:36 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r1, 0x4, 0x80000000002c00) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f00000001c0)=0xe8) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r2}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x18180, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000080)={0x2, 0x5}) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r5, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r5, 0x4, 0x80000000002c00) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000002c0)={r5, 0x2, 0x8, "7f52ca1209e7cb6cb61e071fe7b38a2843af253a84e84487414ca74ea1ff5cf7e0b77a568032580eaf98faef8a9a63b8db2a3365e4a2a5de373b198a5974879728751dec48285cb2a91c79ef75953efa96d005da9c339315189252ede44893dca09b931c7994aee7c935ce75b8b6b3d1ef47244fdbb9ccf2e130b66a4cf673a1a3dca4b8b7c08121b957ab84c93489334295cb3711e3009131d90e8e0cd17d2fe4037c1876d1558a5d6c41"}) [ 670.956122][T17261] IPVS: ftp: loaded support on port[0] = 21 00:28:36 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:28:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x40000000000000a1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000001c0)) 00:28:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(0x0, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:36 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) [ 671.488464][T17287] IPVS: ftp: loaded support on port[0] = 21 [ 671.509479][T17289] IPVS: ftp: loaded support on port[0] = 21 00:28:36 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:36 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 00:28:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000), 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0), 0x8) bind$inet(r0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80), 0x400010f, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r6 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x8, "0eb61538a462ee812ba43ffc89bf1173dc3d06375d14638fb21b49d26972d96ef0b4b2e6d730ad6a7562b478c2974a9896747dccb30e7f63a1b51ec059554277", "1d0e47f158fae68f4d2aa224439c30eb3b3e468dfc3035d92c0929eeee707650bb008bd2cfa188d8954a0ede9661149d95659eff1ce2212f115951f98f736335", "3edea3fa98ed88e7de49fc2596c78e888e955cdca02efa85c8116766d8f71310", [0x0, 0x6]}) sendfile(r5, r5, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000240)=0x3c5) 00:28:36 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:37 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x204000, 0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @default, r1}) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) write$P9_RMKNOD(r2, &(0x7f00000001c0)={0x14, 0x13, 0x1, {0x4, 0x4, 0x5}}, 0x14) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) openat$cgroup_ro(r3, &(0x7f0000000200)='io.stat\x00', 0x0, 0x0) [ 671.950905][T17314] IPVS: ftp: loaded support on port[0] = 21 [ 672.086155][T17323] IPVS: ftp: loaded support on port[0] = 21 [ 672.096253][ T27] audit: type=1804 audit(1579652917.120:383): pid=17293 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/111/file0/file0" dev="loop3" ino=363 res=1 00:28:37 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000080)={0x3, @null, 0xffffffffffffffff}) 00:28:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000), 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0), 0x8) bind$inet(r0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80), 0x400010f, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r6 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x8, "0eb61538a462ee812ba43ffc89bf1173dc3d06375d14638fb21b49d26972d96ef0b4b2e6d730ad6a7562b478c2974a9896747dccb30e7f63a1b51ec059554277", "1d0e47f158fae68f4d2aa224439c30eb3b3e468dfc3035d92c0929eeee707650bb008bd2cfa188d8954a0ede9661149d95659eff1ce2212f115951f98f736335", "3edea3fa98ed88e7de49fc2596c78e888e955cdca02efa85c8116766d8f71310", [0x0, 0x6]}) sendfile(r5, r5, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000000240)=0x3c5) 00:28:37 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xffff, 0xffffffffffffffff}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x49, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 00:28:38 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:28:38 executing program 4: openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x200, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(0x0, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:38 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) [ 673.077661][T17366] IPVS: ftp: loaded support on port[0] = 21 [ 673.167370][T17369] IPVS: ftp: loaded support on port[0] = 21 00:28:38 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xd0fb) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x3da, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) close(r3) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x401, 0x0, 0x8, 0xcac, 0x5}, &(0x7f00000000c0)=0x14) r4 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x0, 0x72, 0x7, 0x0, 0x3}, 0x1c) r5 = dup(r4) dup2(r5, r1) 00:28:38 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r2 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r1}) 00:28:38 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r1, 0x4, 0x80000000002c00) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'geneve0\x00', {0x2, 0x4e20, @rand_addr=0x1}}) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x4200) [ 673.471594][ T27] audit: type=1804 audit(1579652918.510:384): pid=17370 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/112/file0/file0" dev="loop3" ino=365 res=1 [ 673.489353][T17389] IPVS: ftp: loaded support on port[0] = 21 00:28:38 executing program 1: r0 = socket(0x1e, 0x805, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x805, 0x0) r2 = dup(r1) dup2(r2, r0) 00:28:38 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(0x0, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:39 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="00000004"], 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={r4, 0xd2, 0x0, 0x800, 0x6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r4, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x80000001, @remote, 0x5}]}, &(0x7f0000000140)=0x10) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0xa, 0x1, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) [ 673.936986][T17402] IPVS: ftp: loaded support on port[0] = 21 00:28:39 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:28:39 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r1) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 674.599950][T17426] IPVS: ftp: loaded support on port[0] = 21 00:28:39 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x20000600, 0x2f0, 0x160, 0x258, 0x160, 0x258, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @ECN={0x28, 'ECN\x00'}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'sit0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00'}}, {{@ip={@dev, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r2, 0x4, 0x80000000002c00) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x4e23, @multicast1}}) [ 674.942851][ T27] audit: type=1804 audit(1579652919.980:385): pid=17415 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/113/file0/file0" dev="loop3" ino=367 res=1 00:28:40 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80247008, &(0x7f0000000000)) 00:28:40 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:40 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:40 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 675.406298][T17445] IPVS: ftp: loaded support on port[0] = 21 00:28:40 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x3) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x40000000000000a1) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r1, 0x0, 0x0) dup(r2) read$FUSE(0xffffffffffffffff, &(0x7f0000002480), 0x2314432e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 00:28:40 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x5}, 0x8}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x422000, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40851}, 0x4004040) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000240)={0x4, 0x82f, &(0x7f00000001c0)="fa6d4312e4a2e41fc1", &(0x7f0000000200), 0x9}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 675.575623][T17449] IPVS: ftp: loaded support on port[0] = 21 [ 675.930930][ T27] audit: type=1804 audit(1579652920.970:386): pid=17472 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/114/file0/file0" dev="loop3" ino=369 res=1 00:28:41 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:28:41 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'team0\x00', &(0x7f0000000140)=@ethtool_channels={0x1}}) 00:28:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:41 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) [ 676.476315][T17486] IPVS: ftp: loaded support on port[0] = 21 [ 676.961099][ T27] audit: type=1804 audit(1579652922.000:387): pid=17495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/115/file0/file0" dev="loop3" ino=371 res=1 00:28:42 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:42 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) r2 = msgget$private(0x0, 0x2) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000880)=""/4096) r3 = getpid() setpgid(r1, r3) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000000)={0xe0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="cc74858c8cfa66b846008ee0deee39560e0f00d348b809000000000000000f2376430f01c10f23f8b9910b00003e660feeafce45102260e322742274420fc732665808000f00d045d2e0", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f00000002c0)={{0x7, 0x8}, {0x5, 0xe0}, 0x2, 0x1, 0x7}) r8 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r8, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r9, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r9, 0x4, 0x80000000002c00) r10 = accept$inet6(r8, &(0x7f0000000440)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000500)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 00:28:42 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r0, 0xfc0004) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) recvmmsg(r3, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x0, &(0x7f0000004a80)={0x77359400}) 00:28:42 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:42 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @default}) [ 677.234154][T17506] IPVS: ftp: loaded support on port[0] = 21 [ 677.300300][T17511] IPVS: ftp: loaded support on port[0] = 21 00:28:42 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/crypto\x00', 0x0, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000380)=0x6, 0x4) 00:28:42 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:28:42 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 677.666975][T17523] IPVS: ftp: loaded support on port[0] = 21 00:28:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000040)) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r3 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000100)={0x1, 0x7, 0x4, 0x100000, 0xd49, {}, {0x4, 0x8, 0x1, 0x4, 0x8, 0x0, "2f58af93"}, 0x6, 0x2, @offset=0x401, 0xc0c3, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x40, 0x0) write$vhci(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="0359381c8a174e61049b9e3354aa08a40fbbd91e83f874eff671a8e357bcc9d3bb32fc7c27af324e0cde895fa6f1d8c5fd080ed7ca44e36030cfcadc4537f15627aa23929a661db070417590904ba343b698f15b66bcbc274c1f0c967d90afb996f124abd6cbe4531bc3867cda16dc101f1f15294965fa7f2a1ce520117a0728e96d2b8119275a4062693d0c2e"], 0x8d) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="a8a45f94", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf2502000000940004000c00010073797a3100000000da1b070008000400ff07000008000400000001000800030004000000080002000000400008000200010001000800030081000000080003004dd400000800020080000000000002000500000008000400800000000c00010073797a30000000000000010073797a31000000000c00010073797a31000000000c00010073797a31000000002b1963a5"], 0x3}}, 0x10) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="6400282244eb382b3e79411faa0000d9e124ad824bdce413632ea0c24f9f8ece5ff45ae2fed985025e8418cfbffc91cc2db3aeddabdd375d2359ce7030ba2b460e0b15c092449c33e8dbde3bc1beff21f33138fe258cfc433f6635f66299505ec774985ee4592acb7dd0f5", @ANYRES16=r8, @ANYBLOB="000226bd7000fbdbdf250d0000001800020008000200000000000400040008000100040000000c000700080002003f0000002c00068004000200080001000180000004000200040002000400020008000100feffffff0800010005000000"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x2084000) 00:28:43 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000480)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r1}) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$set_timeout(0xf, r2, 0x8001) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 678.134755][ T27] audit: type=1804 audit(1579652923.180:388): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/116/file0/file0" dev="loop3" ino=373 res=1 00:28:43 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) 00:28:43 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:43 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:43 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:43 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) dup(r10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r11) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) r15 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup(r16) getsockname$packet(r17, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000108000000160000000000000000", @ANYRES32=r18, @ANYBLOB="00000000000000001c001a8018000a8014000700fe880000000000000000000000000001"], 0x3c}}, 0x0) 00:28:43 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) [ 678.915845][T17568] IPVS: ftp: loaded support on port[0] = 21 [ 678.936359][T17571] IPVS: ftp: loaded support on port[0] = 21 [ 678.986826][T17573] IPVS: ftp: loaded support on port[0] = 21 00:28:44 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r0}) 00:28:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x10, 0x2, [@TCA_CGROUP_POLICE={0xc, 0x2, @TCA_POLICE_RESULT={0x8}}]}}]}, 0x40}}, 0x0) 00:28:44 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x80000000) [ 679.251071][ T27] audit: type=1804 audit(1579652924.290:389): pid=17562 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/117/file0/file0" dev="loop3" ino=375 res=1 [ 679.287710][ T21] tipc: TX() has been purged, node left! [ 679.482741][ T21] tipc: TX() has been purged, node left! 00:28:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:44 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') syz_open_dev$ptys(0xc, 0x3, 0x1) [ 679.663256][ T21] tipc: TX() has been purged, node left! 00:28:44 executing program 4: r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_mr_cache\x00') openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r2, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xce3c8e234ef9bc30}, 0x8000) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) [ 679.812684][ T21] tipc: TX() has been purged, node left! [ 679.993234][ T21] tipc: TX() has been purged, node left! [ 680.063654][ T21] tipc: TX() has been purged, node left! [ 680.070056][ T21] tipc: TX() has been purged, node left! [ 680.166619][ T21] tipc: TX() has been purged, node left! [ 680.173459][ T21] tipc: TX() has been purged, node left! [ 680.215867][ T21] tipc: TX() has been purged, node left! [ 680.230418][ T21] tipc: TX() has been purged, node left! 00:28:45 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:45 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x201000, 0x0) chroot(&(0x7f00000000c0)='./file0/../file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') syz_open_dev$ptys(0xc, 0x3, 0x1) 00:28:45 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:45 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000040)="40a8364703b1f9ede23ecc45d1215ac88d822b16a0a75494eff86f5401ad7cab7b1f6956a7bb6bc94fdc4a9dcdf1ff09b72da49d93047ade9dbef5afbe88d3415bb842c05c0c45cc5a49caf41835cf8952d7ba38ec84b73137ea033254e98ece8625b9293536161638b4faa7a545a57fe6ccbf3eba2737a51ea5112c8ec2053405bc4248f7b0842a52b8fb9eea2505f88f04f75963647422503046906840f17538c5e291ac4191df922581ddf7664e76f4cd087495a9190be2558bfb3afc1f646d81b82c8db72e50e7ffd5c52f26e447d555793470577dbed805f1aa2b45a3f15493ffa7199ac83db78650e48de0a4", &(0x7f0000000140)=""/71, 0x4}, 0x20) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:45 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) [ 680.452682][ T21] tipc: TX() has been purged, node left! [ 680.456810][T17616] IPVS: ftp: loaded support on port[0] = 21 00:28:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 680.498026][T17625] IPVS: ftp: loaded support on port[0] = 21 [ 680.511436][T17623] IPVS: ftp: loaded support on port[0] = 21 [ 680.523267][ T21] tipc: TX() has been purged, node left! [ 680.529506][ T21] tipc: TX() has been purged, node left! 00:28:45 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x2, 0x88, 0x9, 0x81}) 00:28:45 executing program 1: syz_open_dev$mouse(0x0, 0x80004, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x2, 0x8, 0x3f, 0x0, 0x0, "25277ef3"}, 0x0, 0x0, @fd}) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) socket(0x0, 0x0, 0x0) inotify_init() r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x30051, r2, 0x0) [ 680.588673][ T21] tipc: TX() has been purged, node left! [ 680.623164][ T21] tipc: TX() has been purged, node left! [ 680.644666][ T21] tipc: TX() has been purged, node left! [ 680.660045][ T21] tipc: TX() has been purged, node left! [ 680.681424][ T21] tipc: TX() has been purged, node left! 00:28:45 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r0}) [ 680.806769][ T21] tipc: TX() has been purged, node left! [ 680.816449][T17635] x86/PAT: syz-executor.1:17635 map pfn RAM range req write-combining for [mem 0x83ab0000-0x83ab0fff], got write-back [ 680.830722][ T21] tipc: TX() has been purged, node left! [ 680.877268][ T21] tipc: TX() has been purged, node left! 00:28:46 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r3, 0x4, 0x80000000002c00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r5, 0x1e96bd0f0535ce91, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000017c0)={'geneve0\x00', r7}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r11 = socket(0x100000000011, 0x2, 0x0) bind(r11, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r10, 0x1e96bd0f0535ce91, 0x0, 0x0, {}, [{{0x8, 0x1, r12}, {0x4}}]}, 0x20}}, 0x0) sendmmsg$inet(r1, &(0x7f0000004c00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="5483a190298f79481f5560dac5267f3fa58c0e1a678e4b8e6e7fcbd9d97eb7f83654ceb5f5ff632151f8cc37f9b079bdad11a04a806dde5f02fa82ed1633615fd98778e671876a29860d4537569c1bc223a4f22b873868c982ce9193e6fd0db0c990630df2e4b80cddda3a55bd6bf60b67c2041a46666a8b3f5f466bbf0f0caf44e1fd99c65bc671e17982b1f14d19841ed1dfc9fb28b107432c7d7cd27ed8d6c9c2b9e4119b3ac784bc314fb99867fa4d71468caa91af0fe769409aa8848ea3f08bc9ed0af66439c3a09cd9cc0c8937dc6aa80786886d1a806945f31b1a29a5adadc834eff4a82de2a323d7e8", 0xed}, {&(0x7f0000000180)="886b4664b4d18d01e4c1897a383e55ef47dab4800aae860918dfb5483cc5e60bdb8e7487a48624f69b3261ad886bdefeca365522bdd09b6522d1d403698b9506f489a04d2ce2b56221a7e6f5629ae10270ed392ee374", 0x56}, {&(0x7f0000000200)="9b2537c1d3dba6ea314b5ab3b3aa6056af512da4e5353d824e62a8b10d38e162d1562670f48386b64784c0e58008018977f303b5d69321e3b12b98a1d0e1badb0aa6f116a5854d57e3aa99bc6a8addbb15b005a0785693542a4ba9bc5151a9f64daed84c1848b1e3d28253e45d477071f5569860c66800297bce41da", 0x7c}, {&(0x7f0000000280)="967b2d9f15c2d024d58e852f34f215df7edc48e03ec83b8cd609c613acaa1217849013b347c2bb51d5bdd353040ac3158fcc0114ccb099540d4f87f719eb9fea67c9b3731ba5122914c4c47d026777906dbc42fe119eda0cbe49584038f26d1e0fd38e46674e229b1f680f04a465", 0x6e}], 0x4, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x67}}], 0x38}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000400)="532324dbca9169c936fd9ba6612daa2fa527edb9da85fd", 0x17}, {&(0x7f0000000440)="a15afa56afedb42e93403283fcab05802fe4b45ef7bc2578055ed4d0c91b21269411ea014d07a2bc3a7a384656d3e2251ad47888e095d55ac9124247e075379c69244aab4b140457", 0x48}, {&(0x7f00000004c0)="2e9515a744e9a7cddde7ecaf22721505d3274b8bfb63f658018d3a2e574c595db6d3c23c5eb25543020de632209985138fa1e4ee3fd147d1c01cbaad33aae6c554dc3289c8fb8753a7635cf8aa4903b4deb2cf7467a13b3109950f0b9ad6b7776650dfc8a60dee8854c7a96191f3d048e79dfef94d92a1ec1f83159ded9f8fb442b21316b4bfd9cf0e373ec66f80bf78d7bab0f79ef9f7f69e296d3af75c9cbe9e1366fb0f2397fc176412823222ef111fb3279ad262bd78363113ba3a2ee1437ad229", 0xc3}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="3478e362849b63171b23a59c04e7beaf03f3a33339d00a9b4f43903b434b53e3250ed1c6e244329861be17b12fd1fbceabc18d9119461f9be90c7314c94b21e6a0f2c874b8173ea5923721503f43526c1db032c8df66634816c8fbf7f691250bcdf9a9921b", 0x65}, {&(0x7f0000001640)="0338a623884810bb43f705384b90059afb3c584d4a1c29f2dd983b834ea05a3deb0f33ba1a9349e21c9c65d87d33f017e515612003516b4a5beabd1e6332041b5fca1db4fb440af611dae61135298f7b237927a6255ad46eae954e3d061b98bff3a88144b96a25389946de38e3411be372dd70acab665591c08d42cb6b2972ff226c092bc8d5d3b8e2bb4b198b1c1a8a9fec524f68b5d84583a4e009d0f570d547d6b8accd520647a5a98be90573a9bc77bcfc52d8899e39d0c511f40176ffd7e35ae5b41096d25e761a9e6658e5cfc3d2e7711ed35ed131983c9273df4617f4", 0xe0}], 0x6, &(0x7f0000001800)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@rr={0x7, 0x27, 0x9b, [@rand_addr=0x7, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty]}, @generic={0x7, 0x9, "39b8f7cb589fcf"}, @timestamp={0x44, 0xc, 0x45, 0x0, 0x4, [0x1, 0xad]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_retopts={{0x1cc, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0xa1, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @rand_addr=0x6a, @empty, @broadcast]}, @ssrr={0x89, 0x2b, 0xf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @multicast1, @multicast2, @loopback, @multicast2, @empty]}, @cipso={0x86, 0x55, 0x1, [{0x7, 0xe, "1ade86237431c7e97d43449e"}, {0x1, 0x12, "bf29271fb15d0f10e3cafb07baedd2ac"}, {0x5, 0x5, "a21192"}, {0x7, 0xe, "decb10d393b6db29bf2110ae"}, {0x7, 0x7, "2e60f666e2"}, {0x5, 0xd, "979ba0dca13d3a120ed179"}, {0x5, 0x4, '-q'}, {0x6, 0x4, "a301"}]}, @cipso={0x86, 0x1d, 0x3, [{0x0, 0x7, "8694b80e44"}, {0xa, 0x8, "30a50bbd8846"}, {0x0, 0x3, "fa"}, {0x7, 0x5, "8b486f"}]}, @timestamp_addr={0x44, 0x24, 0x40, 0x1, 0x3, [{@multicast1, 0x4}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x14}}, {@multicast1, 0x6}]}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4c, 0x92, 0x3, 0x6, [{@remote, 0x6}, {@broadcast, 0x2000}, {@empty, 0x1}, {@loopback, 0x1ff}, {@multicast2, 0x6}, {@empty, 0x8}, {@multicast1, 0x80000000}, {@empty, 0x40}, {@multicast1, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0xa, 0x3, 0x0, [{@rand_addr=0x1, 0x6223}, {@loopback, 0x6}, {@loopback, 0x101}, {@rand_addr=0x7, 0xcace}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @cipso={0x86, 0x5c, 0x1, [{0x7, 0xd, "926bc4e0acbc4a67b530e5"}, {0x0, 0x12, "fa837fcceaccdabd15b5cdeb9108ba7e"}, {0x1, 0x12, "994c72fbac3fbd108bcdd03294c2e9f7"}, {0x6, 0x4, 'DB'}, {0x5, 0x3, 'Q'}, {0x5, 0xb, "0c9d2f2d8704da2546"}, {0x0, 0xd, "8f2d31c34a6dd1d65653c2"}, {0x7, 0x6, "0c0c8a45"}]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x67, [@empty, @rand_addr=0x7, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2]}]}}}], 0x300}}, {{&(0x7f0000001b00)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001b40)="051b20396168f9fa7feee5cf299a0fc6e662a69d829d6a801e634122b350692a813268157938bf92484a730666eb183be9e6a18a9735239943e3c671c29f32949960052811f8585b73140d31b729611b17b0552008fae4a00024bf245a370507e93f2d19d1136c81493789b34433641897e0a8ac06210bd2f658b24c0972b5d3a1c07609c997eb90a86ba8155029cb2c5f85f4adb9f1a713d11665466e1d06f2b03e1f6a07f7907ba316762f033a7e546199", 0xb2}, {&(0x7f0000001c00)="4887ef259cb886e2c2296b788a812a069e93427b030ba556e89a31b3c57c58b1242a2abf085c9e768efb4ec5549b759b67d6007d8affabd06e61be9cd1b296bb84ddf50bebc15af14738178b997a5f6a1aeb198219fe96c27164035814e1c72e7f0cf8aed3173a171ffd56f688d61498409e0d9befec4cf4d03acc7f75943c1beaacc70cac96715bccb843ff016590a739b47007a57d9ad5cb5b09e519d139ba68637f031852346a7683ec09efd2c887aa76d28409ffc3e2c6586c0659c3e2fb945e7585ce792f", 0xc7}], 0x2, &(0x7f0000001d40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xef}}], 0x18}}, {{&(0x7f0000001d80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000040c0)=[{&(0x7f0000001dc0)="0651b8a5714e15536c764c8937c734471df8a95ed5c8795dfd0950a1bc", 0x1d}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="e7d5ef5d538dbcf61c2e", 0xa}, {&(0x7f0000002e40)="ebe4c17ee084ffae9668e347309e9a5d956b039f27e2fe2c3369d0be2e0217c6c7a739c40a214b6fbb34ed896f5517a72f554b112bde9f0f04fda6c716f7735038b37d033a717814b61da8bc1f9adc459c7a16766cb15b13dd03487c11f57e8a7fce4161306617e9f9", 0x69}, {&(0x7f0000002ec0)="efc2fdd7bbd6e526707e1679a637adc3ca9d439e66bea387a04e83cf5eff0a6cbd3ecf89955986f74e9890927fda2fc838e813a236eb6babb05f8efd1fd1e1908cee860c926b37a89851c5df46deec59f106c700a5b81035958e7646d1ae8f0bec9c4d", 0x63}, {&(0x7f0000002f40)="d991a7236a37e90e88f208f72b323a2a3538f876767bf790a988d867c482ff59fa261db7757f927d480165cbf1a9786f11fbe9b3eee5486e4a83ce068cf70185d6cf2ec1d3f66a6d6de06322d7646892bcf606223a79b5d0a548da2a36650c7797ac3eec87f0b3a64c9c1c23afe706d7d1d53ccb26d9ea3459f1c76497a572db569081cdff94c695c7aa376fcf382926b35b26f227c614e97b02948987408eff167c81be595287c92c6928288059d766a2f19e633020fa441625776f07a658555a353820827abe18571db353049c57f4c8baa8cd5c47bb1f1a6ae0f699616b1b71e761b0f6a9655da6", 0xe9}, {&(0x7f0000003040)="2a7ccdb79410ee35cecb18e7b7108f97f339a30394e4f3a4916df680835551985a784047e245cc2458f435f38e5c7f40", 0x30}, {&(0x7f0000003080)="7c1e18baf1aedc94bd3a557996095f0b57cc38b96c227cef1210d1d4ef5280b6c84163aedae0244ae5411370f612273ab9c73c97191bf2908c46402b2661f0618129f59133329568f135e489a018e0e3abf8786aecb842470225afbcb9e2decd11bea7c5991eb496e05187e1a1cd838a345a3714807b96fca9dcf849d2cc64a42cc5db3e241e5b30e5a7aa04ab504fe7c8c3219ecd2e158675529cbf3fd0afaf2278ced03d73351ea10c2d1debbf3f59d65994a6b035399767d477b89098a1176e6a346b03e13a4b049b2b605e801930ad7da24d7899f09052c096f59707e552b3dd048f04ae7503c6aa82aed3355af8478a35337673f06c01ec41932022f0d1c63f30de5db6d8ce64bbc74592e3cd9a9628cf7848eeceae764dc644ffa39bcb430065897f4c695adb6b01d79ceff839c6fdd6f12421b2d2d9f12db0be30f211134b6e6001510500187e4e3857589b1a96b9216c07ae2a2511790d4c4d221839ddd21530e06c4ac090038b7bae625a4dde0da85ab47f6722e1641f8d6d98ce08610389f8e877e6046a8a401b213635f76123cbfd799ed32bd52d81d43a115cc67e74020d25bee1bbd2116fc06e27d78780f8b49af6175e6a7793d491b591321baf66da61a645fbce5f120be687c9c1c7caca912693caf523c60730b5e89e0f184629ff61a7cb21b9bdbce9be75f1df4cf5a47b68bf25a9ba1aec22f1b5798eaf527dc355b5f13208c41f9f9598bd79e49980e7fe3aa572f7e8cf9cbedff44ee90c7e8a7f6ef1532b54a9e7f66e7b71525f54ee9b584b645012ebfb99cbd593fbcdabf07b83911832562e42c60a36703af3591792b8f586f88f75fd8ecf06831839af74131be443e76067f2a455ad2e7006168c82535c5b5dd161d87acd2e18228f42bb833bd8ca4d63f5d415a095d388d09d9aa214db08724aaab5667c1197b62057b4fe2f0e06c560bab722ed1bf508bef7deefc56806e3e182ce28a24cf4e84627bd4eb9abad3fbbff74755f381b6676e67b5bdc3d42a5ab575bdeb3ec6dee8da508b645eefadacb700bdb053786d7dc67c8cd8fbc51960c597b288f25a002c4c374b9dcf5434ac647090db1f5d26409e624738bee8999dd3bd72f2d3ad4e74fceecebdf74f07792142ffa3ef824fb67afcb03195f82a5eceb9e7ffe54ce242f64e3f34ace4e2bfb949acece25cedb8503de67ef74fe191f97c263e8fb0837792437754990c4ebb457bb90719ca11a400927bc02e992b93426abf247f17871706ca00bcebdb736c9d3397469c568df1f6534e0a4eeaaa33e91a5924693a6e6d33efe9bf319db21f098e20dbf182c2e7042c3bcad5934183f6e0704440555d3dbd428bf5b102996e76cfd7c8bfc9ad3f6ee8271ce20ce8fa3da8de20e2d417c6affde64d3c341ac2feb737d14e8e3ce1258a38254191ad0084d4546ed62fe054bde75ed8b717724a77b19e95066ac20fb795e6bd13b5fbbde9bd9bf9ee41182cbe447cbb986bde8abe9215ff8ef019fb1e1f480b5d598b77ec2ca18994e116b25661073ce3a183f61d5aa1370dda0c3c9abcda218f38868171d864f475cd4205848599459217dc238be2c5b2162dfa1b86123711abc88adba51159a84c086ae98cb8896ae5515e7621c1d1a6db944d8c55f08f956330dc922c46c044afdc1368b10e1b871bd2100d28158b0c8b7cd993febd1b69179116b96ee27b113433065dde555dea0f040947f31125cb273755ce967567c1bb76dfaf8bfe6cbaba31e2916b171be4a986d328477ef2e78e1b6111a05a2f23fdb358b56e552ef8eac9f0425c757d3905ade7b8abf6f3362e26bbcfd2ace3b56915458a775a3bc36454ef248b8c717167f7a1aba531138f7ba4a886847402408fb2c694007c7d44b65de8f45ba97396fafb063278a9ecf4f1f25edd3ee33a02f20d12599ddfe393810df64873e65aa985b3e4fb0212b38451ac1de067cbce483e2bb5bfe10ee5a95f54a2f70a54c03e60a331bc1ea4b5493a9bced5d64cea2f530fb01d2009b1b6e3bdd733ca85252c7a55e095ebc923b2918d846396977d02c70d7409895e541abd0ee46be77601b475564c6c3527e994eb45d716e05a257c732aa75bb2b235a4e2be4e6c88a732539d2ed37cd3234509113833d8f4a9216acf43bacc3290a36c11ec8895018a1950b1bfc262439f21107badb1046e883042cc5721de991c4b438b7b5469126e9294b7f283cc5a4f22eb8d11945e0cb2a9537e40e1ef4483520663937b58747ab13e749a75c55b384dcbd2f34f1e8e83deb538980b8b16dd08c324d2570cc48dbbf11a74479a0b3c64e9fe431dbdde5aa37e5f7161dea8ae0c91c579c8dc24e47756b40cb66441f6fe64a9795fb10642502d87ec1b1de8c02e5a2a415e2536ed89cdd0e705dd67c140bf80fffa71f0a4b6a464f0e7527e50cda97fe38318f92fdd1f1aa3310ffc4f006a38b72a7a7e1e97bd8cf021f17d9ec035ad463f63cf79c50addc190d92d84591139203aa45d183ca59479c10fb3a377e4e52490e4d700203d3cdf40e2e1bdad2ed8eb8077522cf320f1d8793144ceb06543820b9f59cc724f56d59f24ffcee7727ae139faee8a204e0b97a21fcac709dd2d6fb2ff75289752ea5169295e476ad011d4a51ba2939eaef1dd5fe41a7a313895c335ab83fbbce4631050a7821a0336e9d0a229a9b8332506600ebef446ffd94eed77a93a5fcc1b65f11d170fbc3d88467df04d50373507197aa0b6e0cf4ba4c2926dab6a89e94b288e2e93c7c5c5204c892e8d0870e07bcae34093ad5b64d1cd87486e585b4e3c6859ebf97521d52f459dd3fae4b7781b3ac053120ed1f85fcedbbe24cf4e4cf850beac409632e80ac16c1c05b0b9a9181a9ddec0e2df3b4cdf106405398244b6fb750facd8e75619726998278c5402f74aa0e8ca3135d85a3dcd5767fd63d168874e44ae693e63abbb2aa8fbe97f48e56a0e3151d73563da20c95dc29210ddbd7cef0485330fc02b056148b79896836696952dabc9f1a38cccaa79b6a5cbf4506eb44fa3834b9aace646d7a433c44e893b94fef9c3dd5d9ea24e49b4884c4cfb179a2c590e17327cfad33b845be3b34a5c57d0619a51b2911bb1c664c80165b9918f3ffbff2e8b2ea811a0ec3f393f11e324193560c088e9f2a395f31ac461faf0128d4bd012455324db3516c90bc99dbdca28949771c39a991e7a08df5c1e2c27e134a5090d36a1c91e9cb4771f7bc4e47bdc8510c48d124c2f9152e33a777a0f206b4682239ecc3cc98264a9e036a9a7e2d77e0da680d5fcf572815759632daa7bb0d519319001116837d58685116e68b94fc24d397400e1ea8e7875ae8a26a70ad75ed620569cfa6b6dbadadeb662373dfeb828aaf4a55f96562fb7c8c3b035e7880f6967208c785d21cbd398ecf638d7f5846233a0de3ee1d62160a603a56edab9feb8ab5fd88fec49284ea88a5882c9a9e71017e46fecadc2a0acf3369dabc5713ea90531d465c0dd790866b05786f1735a76205710e1ddbd34e7ec1da23233db9b5f740772caa4cd4fab5de9785b0ed17192dfeb84309c747f7695173f9ecae12850c50a0a18995bca30145327a6c8a8156454a2093426ca074e606a9453130f945ad5e4d99b7aaca9c3d3b6426d4fc41891e6f55c537537eabff82c9f0393dc5cafd2d5d673d0e06748cf74adfdfd8dbfa711916eeccf9d0723c37d721d1509d5f52534457d0de04f221ec6a4b485cbba3e017d25bd6e60973d1f85b1e746ead79f7eb4671ee7cdd273cab01e611ea1c94531b16e49cfb51f2fb50174348d765ec2c5df5bf8e7edcfa0b98b7da3902c81241c7570a1ddbeeb491c65f747874edcf6e032f9d125556b372059dd32c9713b305c820e8edf7773350cb71f1bc694f6a600dd3d67c971f0f936755937312d9f78ad12a9c11469558bf84901027757df88d54cd6576c10d06339df73876f2c7b8a136625bbdf0e13cb95cdf4b6e6c4a743ff734a1ae512f9307d824dc86c587064e3bfd77d216dc76e25cea654ea9b942ad74a1a37989bf0f68985da692c3873ce637d6ee4edd9cfb356fb9c9f22a296bcddb35a7d798414269f9861edf9aa1aaa823780650e50d3799988d5c52fdc5deddcdda9ff4fc31a8763c93da4cec4e88e2054b15c9169153be6f85a8a11e3cafae542d2c681a53b9441136a2d844fb38836c6c1468750537e2ad032888afef2b17ab97fec1f8899ba0f8ead35463f6787eb95828027451d240ae09fb4cad8eaa260d8fa5ba0ab5b1c21f2fff7115af73a46df1c2f4deae296fcebd423f12fd64ac88592960a4ca80e0650cbcaac6e77f77d3539841a1cbdc3a9c78b38f8add580cbe7cbe69958067a8bfd54e62a413ad7ab106527d819fae55e2fc4719407a7f46c668a8c4a610915579e19a5266c3e64166b7ab6bc1812860db914a54a548938d86d860840a809d4167e9255374806fb6ed6f7813780c2748133eb74fd9df4e08f5bd2fb01a824b72febf62589386e44d339312f273a7312b402ccd1711b64cb5406c8824cf8a1e4a094e65817d18aec9c442f926398c90f11b3307f375a44e8bc7c43cf36c6727244cf94c854353d043ea076de5cb6c5b94fc175e4101ddee63c42b46a5df9c8d7d41941ae66841e1c63cf12ca10bfdb002d96378d6d602dcd19a2d7f40d0d9b9c227a9f74508253f2c049276054e585c4640d9853198955682a67166ed98543de1d870a44ba33de2202ca66ab6e1c8d1331ab192b7b20e73ba4d8782e99c903315aa756f59f2370450716279ee59fed015e68a0910d05e503b0fcb2e6c79c8b4c65713083c1c5de9c9efe29650664739fa21b258919ee8c066eb8e1dc9430b14006defc57cd7e02e8a066d8f468d9165a75d630d0b12d53459efd70c9bb18210c989e7bf909e4e9c838c2fba65c1cbc08d03d2408fabe9e689ff6b1a91677bf58a773a12a194204c7104cd142201a401bfb1a94b494a22319e1d89fb6a1674e39827d6644a9089c0f3aedaf45d36325bfc03ea36392218ef36f3695a46f5c541c2397c3bbdd20f85493dae95f44608bb67c64f31a735333deac402546f8eeaf85531142ee927101410dbcf73db3e6a95ecead3bc52d94e64efb0d261756c928bf1631922a86726b2e1ac107c6197c60001d3edb4825757e48da99bc31db9d9df3522a335d0f84fd6248fa70dd0385503513e0ba39219756aa846ae4b2bd1cef0f9cf7015fca44b62716c3d0b9f69f161f6fcb40805f65627f4f2ae3136571ee6de89f8b673cef9169a119a42cd1ddae2eb5bd33c65d832db235becb3c5e55e0d27762926b5101a9fd4f9777f929d8fc408c82e89ec81e228422f337e2fa44c17ff7f1301dfd02f6f6431307b6e12489f23c5f5ee7600dc3f005f37fec4e8547d644b696bb452d0e1b379ec9093d285b65df5406fb162209b4d0d7aa2025c6d2c086012d475fb057727f131e71fdbe97ef56d8f5630c61574d83b22745277cce8d68005b92593bb14a1e1dc736c721c956554dcf0f8aa43f74d0e2b514c3a518928aacb32bca89684e82020a011761520200fa7d4cd664fd17d95f594a5247637dbc2e35647d0fb96974fb1642df4a2020aaa6128c80a1806b0f9ef27a82f9c070c6c6c0efb3dfba698576c9d8a352734cd69930986d21f3425663f07bb96d1a139ff631059c3c2fbca06f23c1a0d1f592edacebac49ed0808b631741c29eb28f31f78eaa61ccb06d2eafbe790bc009f374638c1f14b504885f3b3ecc2df12211280b84858cc49d60cb2f1a9cbf90a8", 0x1000}, {&(0x7f0000004080)="8cf8169d395ae01f937df70fc80f2d9708e204d1ae929f1b219da3a65d2dddb1ac5b1f972ca494b1ed9bfe93be81a6cbd1d9e6ba8709", 0x36}], 0x9, &(0x7f0000004180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0xb1, 0x0, 0xd, [0x401, 0x8, 0x5, 0xffffffff, 0x7]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xd8}}, {{&(0x7f0000004280)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000047c0)=[{&(0x7f00000042c0)="daf921ee6652228850341a8a5663155c56709e6301d5a944c3cd73103f119922df45a3f629ce2d6a4279521d0de9fd18289ff0ca5f0f0042edc96fb6aab300a88be60094a1b7f3a560dde0f5d02aa7e87d6d1900ee0dcc9f99fa7e0ce908d30e6dfc47e95ebfa0c1bbb7e3e0821e9dd058a95d4109303d0d54589e261b86d3d1d85c21f464e7faf1c1d39a5142efbd5dacf1b38c2b4f0790d5c52c5cad", 0x9d}, {&(0x7f0000004380)="469bb948d9c3f9876959b1f568ff023814542c6c92ad1e366af49bcff5eee810d40f5142fbe3a37e99b09ea67c0581ff19624d516d6d680d737ad1936b187a64d8e08b6e571152529acfc15b489ff890e22868a3c9eba9d6cc23dc1d98ed55e4e84314c5b4d3e50a07de12c28b10f75848a52cde97fcd60aa970d42c006c84356cfe446cc950a726d9b9611935b54974e5c39beac72564c4b9f4de7f11afec07c38ac7b8d57716b13bdcf117e647ba0c15f7f4fbd29c5e8cfccc7a6b2af85e745210779fd30d41f106d9013aa2baa90d0dd10ca1ac20bb6bc7adf4feeda178ccab27", 0xe2}, {&(0x7f0000004480)="dab1c9706b9961c5cd1505c9670782c0145428a0804ca6114be332c03910c74130d866cc13915a4dd0585beecb21460d7723c4b783f6718510e1836ea04d4309cb07ff56fe7192dfbefd15a8dcf25513aa764399bb4d424dda325fb0c6bd6ce99a11fdbe6116d0272a9a2030aab97228de1b7505cb4f6ce11b69e3519a6745e14cdcb1e00846444e4ccc23c678dcd7cde4601b07acfea91782c947d0241893cf7c7e1ff51d00032770d7d56aa98e404b44b05473e2893529ef176b2464f9cb80fc11aa2e6a1aaf3f9143522b8f9457a69270c872b02db08616e5950636e65a", 0xdf}, {&(0x7f0000004580)="aec01757d1cf3f54b5e4f07478747c5205bf7ae9404b3bdd8952b0c7366fda8afde419cb01", 0x25}, {&(0x7f00000045c0)="a06b9bf2c331e01c9e92df214414c576a1ebc9fba83ab4b9b40581751dd0b93460a0da3affd50dd071614b1f7a6321dec55736b57f05ad38df7c9b63789022e13a2dcce2577347d85c57f4258d19b38fd671c9d0563c0d9b3816330d90310b38df516453e9bcf02ae7c2eabdc4165a0de1bce9f29335216684cfb7c0b76ce4547d387d06f9f2ff8347a57cd83c32365da03217bad8ba7162facba6527bae9881e3a91d7585013789f299c6b16c1ca2d4b0b5f618e6529d964a23", 0xba}, {&(0x7f0000004680)="d4217ffa938c08c2b72ad2ddce0a87b39c95762b953f55492a8c9d78a78472b9c17e6e2d3a32147d5725fecf1f9543583d5375c0b3295d3ec91ca32bbe20931ef695b0c24dee9b8f5bd39f44f1c299ddb1d3f27d2b3354c73b4791577b84f7078bcfd18b99e0c5cd459840b68180eca0152f2d867117790d0d16ffd64b6285c2350c2feb9663d7629fc019ff8d7099511a08ef8c6191edc131251049c7f055ea5b2fb8583d784b916b91363cb963da1fdb153ef918622c941a9457f7fb53450b946eb5fbacdd30000a58e61e08c52945c84e", 0xd2}, {&(0x7f0000004780)="86c010c4faffd945170eb7fa304c057c246dce8331b4fcb619e8a055e1f8", 0x1e}], 0x7, &(0x7f0000004840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x13, 0xec, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x8f, [@empty, @empty, @multicast1]}]}}}], 0xc8}}, {{&(0x7f0000004940)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000004bc0)=[{&(0x7f0000004980)="62cd8caaac68e3fa6279b300db5006c16cd69f8520f20c16858a6a223ad578ef0856e3477850c4d8ec727561f9be67289c1ef882b136b2c0d4086ec809246f3a1c41fee65170821c6a892c5ff23e2772e531200f0e516f7c18010d0fa3c5a3cdc0130ed321a2a386b230d0fe8c5a69a5414769d898e1fb3be060fe4eda7a5b662670255fec0f3921a6515d87dda0a5a0e85a35935dc2cf383b78144ed31d218120a07a9dfea3ace7b455", 0xaa}, {&(0x7f0000004a40)="19f063d9e552af033b94334cb00a4e918a9a5bb26d99453a1b81c5eff9499c26ee6cf3def9272b1e13a4c59d3d6445ba9da412932ae6e3658e1055b95b88063f6b0cffb9f1df1d7d9bbb69953e", 0x4d}, {&(0x7f0000004ac0)="ff954dd2250d8df630e72f83e7d4552f927b81188d0f0fa558c7de3becfdaae9c4ecd4e6646d42085582c2a9e26e52d94302629c0598db73dfa7ff187dbea4553325b5ca498c5b6f7ee1a6339c9d75ef5ea629e6f438a4b711656be2d608ac48ac8e1f70e8a0bee68de73c5e09ffee7d6ee92ec4967d4470b889fef5ab95722d7751212d984e348133b7a6a85a5b98ccfdff8b5ec778a854f400f3f342c0adb7ca58e385566a88f11b866ba65c1a8a6e393a940f9589bfdf0c863ad177dbbec18c2f971240fd3434473754710e466893963dfca77aee2bc4b1f165c6e0aafa65290fa312cc74f5835445b02479c5974bdc6c0b38c841b0076d", 0xf9}], 0x3}}], 0x6, 0x4000) 00:28:46 executing program 1: syz_open_dev$mouse(0x0, 0x80004, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x5, 0x2, 0x8, 0x3f, 0x0, 0x0, "25277ef3"}, 0x0, 0x0, @fd}) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) dup(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) socket(0x0, 0x0, 0x0) inotify_init() r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x30051, r2, 0x0) 00:28:46 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000006c0)={0x1, 0x7, 0x68b, 0x0, 0x5, 0x8, 0x7}, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0xb5, 0x8, 0x4, 0x4, 0xffffff86, {}, {0x2, 0x1, 0x1b, 0x6, 0x0, 0x4, "c8eb5995"}, 0x0, 0x0, @offset=0x5, 0x9e65866a, 0x0, 0xffffffffffffffff}) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f00000000c0)=0xfffffff9, 0x4) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000100)={@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x9, 0x18e, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @bcast}) getsockname$netrom(r2, &(0x7f0000000180)={{}, [@remote, @netrom, @remote, @rose, @default, @rose, @null, @default]}, &(0x7f0000000200)=0x48) [ 681.198687][T17651] x86/PAT: syz-executor.1:17651 map pfn RAM range req write-combining for [mem 0x83c00000-0x83c00fff], got write-back 00:28:46 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:46 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x20, 0x80000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) unshare(0x40000000) 00:28:46 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:46 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @default}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000000)={0xe0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="cc74858c8cfa66b846008ee0deee39560e0f00d348b809000000000000000f2376430f01c10f23f8b9910b00003e660feeafce45102260e322742274420fc732665808000f00d045d2e0", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = dup2(r3, r5) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xf5a2, &(0x7f0000000040)='bond_slave_0\x00', 0x1, 0x4, 0x100}) 00:28:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:46 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) [ 681.945323][T17673] IPVS: ftp: loaded support on port[0] = 21 [ 682.023801][T17672] IPVS: ftp: loaded support on port[0] = 21 [ 682.096766][T17679] IPVS: ftp: loaded support on port[0] = 21 [ 682.114001][T17683] IPVS: ftp: loaded support on port[0] = 21 00:28:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 682.813085][T17694] IPVS: ftp: loaded support on port[0] = 21 00:28:48 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000027bd7000fedbdf250400000005002d0040000000050033000000000008003200ff7f00000a00090009abf2cd68490000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4081) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080080}, 0x80) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f00000009c0)={0x0, 0xb, &(0x7f0000000980)={&(0x7f00000007c0)={0x14, r8, 0xffff}, 0x14}}, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcsa\x00', 0x280483, 0x0) r10 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r10, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r9, &(0x7f00000006c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000580), r11}}, 0x18) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc4, r8, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x30008851}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r5, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r5, 0x4, 0x80000000002c00) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000240)={r5, r1}) [ 683.122993][ T27] audit: type=1804 audit(1579652928.170:390): pid=17702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/121/file0/file0" dev="loop3" ino=384 res=1 00:28:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:48 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:48 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:28:48 executing program 4: r0 = socket$inet(0x2, 0x80000, 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0x200, 0x2, 0xa0, 0x20, 0xc, r1, r2}, {0xf1, 0x9, 0x8, 0xfffffffffffffff7, 0xf401, 0x175, 0x6, 0x6}, {0x5, 0x10000, 0x200a, 0x63}, 0x400, 0x6e6bb5, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x1c}, 0x4d2, 0xff}, 0xa, @in6=@remote, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0xb15e}}, 0xe8) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 683.612447][T17711] IPVS: ftp: loaded support on port[0] = 21 [ 683.698038][T17717] IPVS: ftp: loaded support on port[0] = 21 00:28:48 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80000, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x40, 0x78, 0x7, 0xfffa, 0x18, "0698cc86fd471415"}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000140)) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 684.066769][ T27] audit: type=1804 audit(1579652929.110:391): pid=17728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/122/file0/file0" dev="loop3" ino=386 res=1 00:28:50 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f000001c4c0)=[{{0x0, 0x0, &(0x7f00000196c0)=[{&(0x7f0000019280)="9910fe73edce7553eadd099b6f8b34844eddfca38490908106d4a33d2f6d08fa", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f000001a900)=[{&(0x7f0000019900)="8f", 0x1}], 0x1, &(0x7f000001a9c0)=ANY=[@ANYBLOB="2400000009000032000000fe8000000000000000000000000000bb0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'], 0x25}}], 0x2, 0x0) 00:28:50 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:50 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r2 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @bcast, r1}) 00:28:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:50 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:28:50 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:50 executing program 1: [ 685.716355][T17751] IPVS: ftp: loaded support on port[0] = 21 00:28:50 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0xe0003}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="cc74858c8cfa66b846008ee0deee39560e0f00d348b809000000000000000f2376430f01c10f23f8b9910b00003e660feeafce45102260e322742274420fc732665808000f00d045d2e0", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket(0x3, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000280)=0x1, 0x4) r6 = dup3(r4, 0xffffffffffffffff, 0x81c1b94f423e58cb) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x80, 0x0) bind$ax25(r7, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) io_uring_setup(0x499, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x325}) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0\x00') ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r1}) [ 685.787385][T17755] IPVS: ftp: loaded support on port[0] = 21 00:28:50 executing program 1: [ 685.831374][T17759] IPVS: ftp: loaded support on port[0] = 21 00:28:51 executing program 1: [ 686.141145][ T27] audit: type=1804 audit(1579652931.180:392): pid=17761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/123/file0/file0" dev="loop3" ino=388 res=1 00:28:51 executing program 1: ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x141, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff05, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ff000a000200cd4c70a290afaaaa"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) io_destroy(0x0) chroot(0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x4, 0x0, @scatter={0x1, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)=""/34, 0x22}]}, &(0x7f0000000240)="dd550241", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0xc070d3f500000000}) timer_getoverrun(0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) lstat(0x0, &(0x7f0000000980)) 00:28:51 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 687.212569][ T27] audit: type=1804 audit(1579652932.250:393): pid=17802 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/124/file0/file0" dev="loop3" ino=390 res=1 00:28:52 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:52 executing program 4: r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x16200, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)="0abf9edefd926ef380bd25654be56caf56973b6e1246c93d22c862cdba919b1dd00e2b61c42ab1f72943c5d5ef35b8623a7fae508960269b6ac480616d8e3fd1354b968af839a30c31d09e878b80185c938de35b310f33259932") r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) syz_mount_image$bfs(&(0x7f0000000180)='bfs\x00', &(0x7f00000001c0)='./file0\x00', 0x6000000000000, 0x9, &(0x7f0000000a00)=[{&(0x7f0000000200)="47e16bfce98edca5b7347bfc088c4e6e14f7d20af8626f43fe250cd797eac16c5e9c15e7115672871b9c2620a0947c2347fa06973152c5fb1af80b0e8933a67d9f026134588d3232847ac2a69a079391a965f7786c4ebc3f85892bf1cef7b694990182de72a8e3d28d9d33fa7b1ccee200128f5b59bd3d1894aea7275cd807443cd7960ea69be5b12e6223f83a5d5c2118b11a77be700d51d2e6a626d3c465504e1ef2dcd26f9f76cc028ed77a5f66243b786460b1dee25838ed02eeed41b94f6a7e312e7d9e21c8", 0xc8, 0x40}, {&(0x7f0000000380)="664eda0b3a56c1de3720afd930012a2eb95e62aacaf0a1ab21e003c1e47d38790b2655b6d5f2f56f4785793613c3e2c03d2204295b3426063028848604e27139c03a185c6051d2f36a2173a95d63df8c03420f685874d8228ce526c395092e147dea94ffdae7aa1d3fac", 0x6a}, {&(0x7f0000000400)="c959ce3f0515edea2e52b54bb4210287ea5e06e081d043262c328b4c4cebafde6613ffbd66e71e3c1d4c22306dbc71b1b56be0a2804dd70ba80cae16424ee23385be19191caea4c6e3b4576d6bd70ea811775965a977ffca9ad1844a490fb0e2315bc4d7ad6782b4", 0x68, 0x5}, {&(0x7f0000000300)="2ccc5ed1c2a66d547dd6a93f0b3dc6de24846668a3b107aa0ba808528296462cc2198150f95fec710f24cda53dad8bcc9bf2", 0x32, 0x80000001}, {&(0x7f0000000480)="ee49582085cfe75ed6d93b65522641723b507a962c5ee2db65c4cb04250a8236902909b319db2390ef159b5e582b5e7b5e070f05a7f50129a420931bff1a9da7b2ff61f4", 0x44, 0x5}, {&(0x7f0000000500)="4deeb6e2ac22fcea0e3ea67acf04a77a13cb6b9d1318e2eccee1172add14d38164bf1dd55cece814fc036e84d3ede2863805bf2334bfd9bb61e282e95f756e00650c2a13b436e39dcc598799c7c2532a9ce9fd2c49a12a3a8948e8cbb710de1437a7afd46ce7feea0ada6fdc69058b982df2c27034d917dbf275a85b9da9811633f1aea6fde12a755277b40b3e06b594340b877752c50eed3dd96e80de24a5bb45b6", 0xa2}, {&(0x7f00000005c0)="1ec3d0bf1d36ab8e4e94085f2b015fc53ce612b16ee052879e8dace009539aa73f78abb9cd754f0867e0febcd2a175b60e91be94ba481d03f127f96f784a7974314b09a02e10dd12307790903640b2796bf6cf0d63fae2715220c976d8b42a8fadc9c96b41d95c4d6ecebaa491a035641965fc30a4f69ce95a51e4d327dbc4ac0c041c543849fa8895e8a25c61cf594dbc3e86e0333fb579a32633cc9222b94764259251b7e94723f1f251d64a4012b24a441b98a2a9fe48dc96bbb78ab138baf212419af616f40221d5028ab79c20ed91c4ce", 0xd3, 0x300000}, {&(0x7f0000000880)="8126038bd1dbbb5b5a1068346f0efac82e4fe6e6042c20ebe186026b40b3942569085ccf715e2c99f84054600b99068a724b32d57c303b2925c6aeaa58e9668caa741110a86e42d6891c48d53ccd7720c1c2c9ccd40bd67d7b74e3a3853e8a3dc7106853da93f726376b4fc80f992f4cf20e91a6364bcd5a9a8efd4e22554435cee3cb7e145ef4a20e19b2c9f65f64b8c031d4af5f94279f457d3eaf74b041f5f50c3661c2fc4061f470fac1f3dc8775fc308fde8830950b69d4a753b4f363006370d50142be672a01c75ab59341cee6ccf31624ae269c7a0d593635d9d49e73d3354f5058c4131f3f1cbdcab479aad399777f1ad21def566e787ab3", 0xfc, 0x81}, {&(0x7f0000000980)="1697bcc6d0bf619b7852b3d53d88e60eba3a30c95a75755f83c331accb1b406d9df4e23f0c23ec696cfc3650a392a5b73c153d780c77fb10e006ee885d560c45599941b5bef3a06cc91e40a3866686b8030beb589f4f3a83e3ca59", 0x5b, 0x380000000}], 0x12, 0x0) r4 = getuid() write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x10001, 0x8) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r4}) 00:28:52 executing program 1: ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x141, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() tkill(0x0, 0x9) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff05, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ff000a000200cd4c70a290afaaaa"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) io_destroy(0x0) chroot(0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x4, 0x0, @scatter={0x1, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)=""/34, 0x22}]}, &(0x7f0000000240)="dd550241", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0xc070d3f500000000}) timer_getoverrun(0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) lstat(0x0, &(0x7f0000000980)) 00:28:52 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:28:52 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 687.344248][T17809] IPVS: ftp: loaded support on port[0] = 21 [ 687.386817][T17811] IPVS: ftp: loaded support on port[0] = 21 [ 687.422658][T17813] BFS-fs: bfs_fill_super(): No BFS filesystem on loop4 (magic=e2b6ee4d) 00:28:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 687.454285][T17820] IPVS: ftp: loaded support on port[0] = 21 00:28:52 executing program 1: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x141, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff05, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0000ff000a000200cd4c70a290afaaaa"], 0x28}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) io_destroy(0x0) chroot(0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) io_cancel(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x7, 0x0, @scatter={0x1, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)=""/34, 0x22}]}, &(0x7f0000000240)="dd550241516a79", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0xc070d3f500000000}) timer_getoverrun(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x0, 0x0) lstat(0x0, &(0x7f0000000980)) getgroups(0x0, &(0x7f00000003c0)) r7 = open(0x0, 0x8060, 0x0) fcntl$setlease(r7, 0x400, 0x0) 00:28:52 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) sendto$rose(r1, &(0x7f0000000040)="c23aeb1f56e27e1ce287297a950c202d96f8c4597d2888c5bf7fcf4ed9f81956d1b65959aa11bdd9eabdc43c6c7097d20fff4598b1ae615ada54b7099dd6112ff95f38c4a918e7f14a9f0956c44a74e3ad3f06e04d3353baf1", 0x59, 0x1, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x40) 00:28:53 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x980000, 0xf0, 0xfffffff7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0950, 0x6, [], @value64=0x4}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) openat$cgroup_subtree(r2, &(0x7f0000000380)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r5 = socket(0x100000000011, 0x2, 0x0) r6 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000240)={0x9c0000, 0x401, 0x80000000, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x990a64, 0x1, [], @value64=0x80}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="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"], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r9, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, @NL80211_ATTR_REG_RULES={0xc, 0x22, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}, @NL80211_ATTR_REG_RULES={0x24, 0x22, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x76}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x24008890) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r4, 0x1e96bd0f0535ce91, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r10, 0x1, 0x6, @dev={[], 0x3e}}, 0x10) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000100)=""/26, 0x1a, 0x40010040, 0x0, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) 00:28:53 executing program 1: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 00:28:53 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x401, 0x4000) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:53 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) [ 688.621286][T17859] IPVS: ftp: loaded support on port[0] = 21 [ 688.690562][ T27] audit: type=1800 audit(1579652933.730:394): pid=17836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16785 res=0 00:28:54 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:54 executing program 4: syz_init_net_socket$ax25(0x3, 0x5, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x4400, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x8, &(0x7f0000000600)=[{&(0x7f00000000c0), 0x0, 0x40}, {&(0x7f0000000100)="6d021c5eeffa56e7dd79e9a9baec5512a5cb928ce79f7c3a95e1d1905cf21294ff3c1166a0d71b37747db075d779716b2005c9cb9db86328ac381e445df032ecbf1afcb25a86bfcf03d0af0a0d38656d908f55f35c13ded910d993f39a575ed1fcb83c8f1d71649e8ba47c562df7ce049ca21d80e8dbf0f0c161cb86ef43837d151c0146ec07c2c5c193420d993d581ad0a13d4892963df2e46de2aa826330e71a73839aabc2ba7fbe454896811a963de54e63f082883055dec1149abee6f26f7a3a9f28ce4ed2498b0726d355680a18712261", 0xd3}, {&(0x7f0000000200)="901c94f0d667bcf653608fdb9359c2bca21fa9863022ce7ffe8d14c7bf14651565c5b9c4c6a28de82cce5d49273577047a28e08a1744025137b2ff8e943f7b5bb3", 0x41, 0x8e5c}, {&(0x7f0000000300)="a74228add10137179db01bc7cce0978dd31ccd32088608c06cba2206a43c5df08c587439c7f6d23cbde3ff503d3b009743b07d3c05e916ab029989964d94ae1491ac3ac0ea29a9f7a6a4ead74d11ed88bec4d9bb029860cf232977432bdae8b2c0376d8b186b6846543068f9ce369de8d093c970e31fad2678bfb9234762323e5649bf917e88d8546c98dc6bf6eed3a53bb18360723eca270b38ff18c54790b941094a88c60bd0d3bcedd5e72ebf97ce8541ba31973e9c2467a745da27f5e2371cefba13", 0xc4, 0x92}, {&(0x7f0000000280)="211be13f014d2cda0949129fdc197e76d3fdab680c497a4abf4c17b0be", 0x1d, 0x3}, {&(0x7f0000000400)="fedebc811ab9608158adac5fe1577b641ba0e66233d5569cb783fd13a9ade9fcc2ecab2c4ae8f1f93b0408fe5f744f072b96f963ca3d76a9fd7f2b84e16972f8fb45760d34f8ef9aacde55371bb5ea40fe9dd24faab4a837e93805d1e2767fa4ee9f4c55e966bb5d477b050ec18e9efd963e4a27239d2a9bc0e1db6cd81307f61e27a077d78565f8aeb628c9d1064cf2ddcc2edd74af0219d5d297fc573bc632f1a11e627a4014e4890a410a829250fc69a851650fe1e8a8f313ef0987a95b3f314dce05", 0xc4, 0x9}, {&(0x7f0000000500)="acef52dadc1e7f124b68e0d96cf93e83cd0b63c4e19e52eafbc9b9b625d43a5d91db666477c11ce36ac058ac0222644ad35594124627f23beac4f9eb407f0ce879c18afb631966e9d5f33d1a393179cb4a9de6c99f365d3103f723abbe58add65ea3844042be7f8fcad5d11814c8ba0396132633646c41fcbe1d8e041937e6abfae22a90a770ffbf9fedbf0f349cfe150737a94a29bb59", 0x97, 0x7}, {&(0x7f00000005c0)="012b", 0x2, 0x9}], 0x1004000, &(0x7f0000000780)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@uid={'uid'}}, {@huge_always={'huge=always'}}, {@huge_never={'huge=never', 0x3d, '/dev/autofs\x00'}}, {@mode={'mode', 0x3d, 0xc00000000000000}}, {@gid={'gid', 0x3d, r1}}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x37, 0x38, 0x32, 0x34, 0x61, 0x66, 0x32], 0x2d, [0x63, 0x1b, 0x62, 0x34], 0x2d, [0x61, 0x65, 0x30, 0x38], 0x2d, [0x62, 0x66, 0x65, 0x35], 0x2d, [0x63, 0x5b, 0x66, 0x63, 0x66, 0x62, 0x66, 0x31]}}}]}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x200800, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@ipv6_getnetconf={0x2c, 0x52, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x40}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x3}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040001}, 0x4008041) 00:28:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 689.012072][T17867] IPVS: ftp: loaded support on port[0] = 21 [ 689.080239][T17869] tmpfs: Bad value for 'mpol' [ 689.112217][T17875] IPVS: ftp: loaded support on port[0] = 21 00:28:54 executing program 1: 00:28:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="91ce00000000000000000200000008000100", @ANYRES32=r5, @ANYBLOB="04000200"], 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r8 = socket(0x100000000011, 0x2, 0x0) bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r7, 0x1e96bd0f0535ce91, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r12 = socket(0x100000000011, 0x2, 0x0) bind(r12, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r12, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r11, 0x1e96bd0f0535ce91, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x4}}]}, 0x20}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r17 = socket(0x100000000011, 0x2, 0x0) bind(r17, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r17, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c3cd00006d0c0dce4b31b3bb347c8e812c10ba8ffe5159179f319c7497360f50090fdde57896cc91b6119e1fc3158a7b0044236ed4eae901546c7cf3396dfd0db8ad68cab2172508ea1b20a26f14a6e4984b6ab78d6427a98138057796bc249b178a606b4887494b", @ANYRES16=r16, @ANYBLOB="91ce00000000000000000200000008000100", @ANYRES32=r18, @ANYBLOB="04000200"], 0x20}}, 0x0) r19 = socket$nl_generic(0x10, 0x3, 0x10) r20 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r21 = socket(0x100000000011, 0x2, 0x0) bind(r21, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r21, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r19, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r20, 0x1e96bd0f0535ce91, 0x0, 0x0, {}, [{{0x8, 0x1, r22}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x198, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0xfc, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r18}, {0x78, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x44004}, 0x80) r23 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELUID(r23, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:54 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:28:54 executing program 1: [ 689.870762][T17901] IPVS: ftp: loaded support on port[0] = 21 00:28:55 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x40000000000008, &(0x7f00000001c0)=0x0) io_submit(r2, 0x2, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)="100000400400"/16, 0x40000010}]) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x103, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x4400, 0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x800, r3, &(0x7f0000000200)="476b6e463f2cc25e156b117e6c7142c5cee4652a6654e41fdd1baecac1617548ca3a5392fab479baf18c3e4257c07655b276db72d136c6c1d903f6a2302088202d5b4f8f3c5e55207a7881164d4afa407ddea2c1c5f5644d60f800f7df44ce606e157544444f9b4b274fed46eb6ac4121bedf247719a1f727f39ee023f1c43751c414c54ed2ce8cf5394b36bd926132c7adb4d0639fad43495b9618ed0f9497544ed88cded641b02e21bbeda30984161b8635e43045aa1acb1126690a0119c80b4dd073597", 0xc5, 0x8000, 0x0, 0x3, r4}]) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @local, 0x34d64d89}}, 0x0, 0x0, 0xd, 0x0, "8137679108724a5b8c812993e6cafe0c4d904bf486b29396d4ff6152be6dc9f25db49ec5eb0e5e9b7a99ffcc9e11d79a8e2b2549a5b7dc055246233ae9399086f010074910c43c9d9467bf5b868b7ad0"}, 0xd8) 00:28:55 executing program 1: [ 690.216410][ T27] audit: type=1804 audit(1579652935.260:395): pid=17885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/126/file0/file0" dev="sda1" ino=16729 res=1 [ 690.316535][ T27] audit: type=1800 audit(1579652935.280:396): pid=17885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=16729 res=0 00:28:55 executing program 1: 00:28:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:55 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:55 executing program 1: [ 690.912433][T17926] IPVS: ftp: loaded support on port[0] = 21 [ 690.975257][ T21] tipc: TX() has been purged, node left! [ 691.023000][ T21] tipc: TX() has been purged, node left! [ 691.049033][ T21] tipc: TX() has been purged, node left! 00:28:56 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 691.073546][ T21] tipc: TX() has been purged, node left! [ 691.112485][ T21] tipc: TX() has been purged, node left! 00:28:56 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000001780)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x86, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) sendto$netrom(r1, &(0x7f0000000040)="0eb6d1368220aa2d6498ee76e257ad0ca76c955de4a003a18d8656133e8e33a89a1713daf0d7db4b66307145755f2a52d283e93e0074e721a1792b6d835f8092b87cc61eae10afa54035e5778e573f1ef4f50088aacb19c4dbd64b92d9497082d459ee9a68f5c0ebbc8ecba24a2d3c153e6953f7781e2e9fb7491b61b307d569a581e633e367b80e9bc80c117a07ac035e2d9b64c589c27504075dea70da25e8f90fb3c8b331c01b9c2082560c3bcb85b5d16260dcdde610d1f42684e5a28bd69530ea49c493cc6bab8b679ae1f78bc2fe63b1f165870702824cba3fc66b433b1bdeb464fe0c77ab42f5275599", 0xed, 0x24008080, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @default, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 00:28:56 executing program 1: [ 691.145578][ T21] tipc: TX() has been purged, node left! [ 691.248169][T17941] IPVS: ftp: loaded support on port[0] = 21 [ 691.273517][ T21] tipc: TX() has been purged, node left! [ 691.295088][ T21] tipc: TX() has been purged, node left! [ 691.362873][ T21] tipc: TX() has been purged, node left! [ 691.385107][ T21] tipc: TX() has been purged, node left! 00:28:56 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000040)=0x6, 0x4) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 691.431840][ T21] tipc: TX() has been purged, node left! [ 691.473027][ T21] tipc: TX() has been purged, node left! [ 691.512309][ T21] tipc: TX() has been purged, node left! [ 691.542906][ T21] tipc: TX() has been purged, node left! [ 691.592069][ T21] tipc: TX() has been purged, node left! [ 691.607583][ T21] tipc: TX() has been purged, node left! 00:28:56 executing program 1: 00:28:56 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:56 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) [ 691.649361][ T21] tipc: TX() has been purged, node left! [ 691.661059][ T27] audit: type=1804 audit(1579652936.700:397): pid=17935 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/127/file0/file0" dev="loop3" ino=392 res=1 [ 691.686674][ T21] tipc: TX() has been purged, node left! [ 691.824138][ T21] tipc: TX() has been purged, node left! 00:28:56 executing program 1: 00:28:56 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xee00}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x604402) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f00000000c0)) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000040)={0x0, 0x3}) [ 691.890954][T17956] IPVS: ftp: loaded support on port[0] = 21 [ 691.992904][ T21] tipc: TX() has been purged, node left! 00:28:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(0x0, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 692.717048][ T27] audit: type=1804 audit(1579652937.760:398): pid=17979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/128/file0/file0" dev="loop3" ino=394 res=1 00:28:57 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:57 executing program 1: 00:28:57 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x980000, 0x3, 0x5, r0, 0x0, &(0x7f0000000040)={0x9909db, 0x8, [], @value64=0xfff}}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000000c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000d400000050451f0fee5b19a2960e3aab6ffbcb27ca9e62017fb90b3bc5d31912b24c0a467e5b336d9b75697c6f71f70963a5039578982e57a9f1a2ff265a6fdd8b56f88abe4430e7e885f64007f0df5603a2f0ebf8d9726559307ae35991cfdbd8f5fc3d00ab77e1a986e8528a9311eb7b011ed78ab00e8a68046d47cdb4c0fcc024f5b28afb3b33c29189cbc67466576e7c425722f10572352aac2862737f520b7e06c32b4b36b7aa44516410c213a078716837059f8450b015b19e77f87aa92e4ae5f5de3c4f6f40f36f1e24ea4dc46190d4d120a35d89"], &(0x7f00000001c0)=0xf8) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:28:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 692.958784][T17990] IPVS: ftp: loaded support on port[0] = 21 00:28:58 executing program 1: [ 693.003166][T17991] IPVS: ftp: loaded support on port[0] = 21 00:28:58 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xffff, 0x50801) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x100000000, 0xffff2828}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) r4 = socket$isdn(0x22, 0x3, 0x23) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x10041, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup3(r4, r5, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f00000000c0)=0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0xb0b1, 0x2602) ioctl$SG_SET_DEBUG(r9, 0x227e, &(0x7f0000000240)) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r8, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="09140000", @ANYRES16=r10, @ANYBLOB="0153ff0008000000f45963440c5eb58ecbc4231f65b3ddf7a7501da39f40"], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080026bd7000fedbdf25060000000500210e0eea4314c9e01d9446fb5c000100000006001e003c040000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20) fcntl$setstatus(r8, 0x4, 0x80000000002c00) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000000100)={0x7, 'syzkaller1\x00', {0x80}, 0xf1f2}) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0xfffffffffffff801) 00:28:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(0x0, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:28:58 executing program 1: 00:28:58 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:28:58 executing program 1: [ 693.462403][T18007] IPVS: ftp: loaded support on port[0] = 21 00:28:58 executing program 1: 00:28:58 executing program 1: [ 694.164333][ T27] audit: type=1804 audit(1579652939.210:399): pid=18015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/129/file0/file0" dev="loop3" ino=396 res=1 00:28:59 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:28:59 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) 00:28:59 executing program 1: 00:28:59 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:28:59 executing program 1: 00:28:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(0x0, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 694.506797][T18036] IPVS: ftp: loaded support on port[0] = 21 [ 694.586005][T18041] IPVS: ftp: loaded support on port[0] = 21 00:28:59 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r2, 0x4, 0x80000000002c00) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x7ff, 0x2, 0x2, 0xb, 0x0, 0x3ee}, 0x20) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, [], [{0x1ff, 0x8, 0x81, 0x100000001, 0x1, 0x2}, {0x1, 0x7f, 0x1, 0x1f, 0x2, 0x80000001}], [[]]}) 00:28:59 executing program 1: 00:29:00 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r4, r5/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) 00:29:00 executing program 1: [ 695.180033][T18063] IPVS: ftp: loaded support on port[0] = 21 00:29:00 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000040)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000040)="5ca5e02fe389f0", 0x7) fcntl$setstatus(r1, 0x4, 0x80000000002c00) pivot_root(0x0, &(0x7f0000000180)='./file0\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b71, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = syz_open_dev$vcsu(&(0x7f00000007c0)='/dev/vcsu#\x00', 0x6, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000800)) r5 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) recvmmsg(r5, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002c40)=""/45, 0x2d}, {&(0x7f0000000080)=""/168, 0xa8}, {&(0x7f0000000140)=""/24, 0xffffff01}, {&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/235, 0xeb}, {&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000003c0)=""/133, 0x85}], 0x7, &(0x7f0000000500)=""/4096, 0xfffffffffffffebb}, 0x3}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000001500)=""/171, 0xab}, {&(0x7f00000015c0)=""/26, 0x1a}, {&(0x7f0000001600)=""/17, 0x11}, {&(0x7f0000001640)=""/61, 0x3d}, {&(0x7f0000001680)=""/131, 0x83}, {&(0x7f0000001740)=""/156, 0x9c}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/10, 0xa}, {&(0x7f0000002840)=""/236, 0xec}, {&(0x7f0000002940)=""/174, 0xae}], 0xa, &(0x7f0000002ac0)=""/158, 0x9e}, 0x9}], 0x2, 0x100, &(0x7f0000002c00)={0x0, 0x989680}) 00:29:00 executing program 1: [ 695.660249][ T27] audit: type=1804 audit(1579652940.700:400): pid=18057 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/130/file0/file0" dev="sda1" ino=16820 res=1 00:29:01 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:29:01 executing program 1: 00:29:01 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:29:01 executing program 1: 00:29:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x0, 0x0) [ 696.029546][T18083] IPVS: ftp: loaded support on port[0] = 21 00:29:01 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x2, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000080)) [ 696.075761][T18086] IPVS: ftp: loaded support on port[0] = 21 00:29:01 executing program 1: 00:29:01 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r0, 0x8, 0x1, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r6 = getgid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) lchown(&(0x7f0000000000)='./file0\x00', r5, r6) write$FUSE_ATTR(r4, &(0x7f0000000100)={0x78, 0x0, 0x8, {0x4, 0x80000000, 0x0, {0x4, 0x0, 0xf8bb, 0x5, 0x7fff, 0x100000001, 0xbbf1, 0x9c96, 0xfffffffe, 0xfffffeff, 0x5, r5, 0x0, 0x1, 0x270}}}, 0x78) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:29:01 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:29:01 executing program 1: 00:29:01 executing program 1: 00:29:02 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) clone(0x2012600, &(0x7f0000000040)="1b2c122eaaa12101b8a42528773624a7716dad67d8dd8abb3e0d5ab258d82678", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="2d98c5685260e297f0febc3ce414240ade214fb8a1a9af9e9e11a7d9f20a07060a14ab27cd4b4422b9c70763ff771297c8810002d35ab551f0e986bbcd49a02fb125bccf3d5057d57e982e1060ae554c71e2e49c411d7cd8197501717cd29eafae6780f51f6406fceeede1519f148401c26777bed3dc845d5ddad4c60e4fb661652a77edf326c57259b951fc900519182c5ce170bab394fa") [ 696.919162][T18116] IPVS: ftp: loaded support on port[0] = 21 [ 697.222353][ T27] audit: type=1800 audit(1579652942.260:401): pid=18103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="loop3" ino=398 res=0 00:29:02 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:29:02 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x6) r2 = open(&(0x7f0000000100)='./file0\x00', 0x410000, 0x70) openat$cgroup_subtree(r2, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000040)) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:29:02 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_proto_private(r3, 0x89e1, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080), 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c066b812000f00d8f040fe0e0f01bb0e0000000f20c035100000000f22c00f20c035010000000f22c0c7442400b0000000c744240200400000ff2c24b8e35d2f8aef66bafc0cecc46269a94a000fc75d80b9680900000f32", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) dup3(0xffffffffffffffff, r6, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) sendmmsg$unix(r7, &(0x7f0000004080), 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) mount(&(0x7f00000007c0)=ANY=[@ANYRESDEC], &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x100000, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="148520866feffb2661c12fd1091a6daae588ca0a89d8cee7fe6b9270d0cc1c96119df5e71e65ee36739c9ebacd5865260eb1b0bca8a4eef2663691714244e64074012128071ddfb0866d53a263de6dee2d0bf5cf9dee", 0x56}, {&(0x7f0000000480)="91c905ed0e2a71aeb5f602b06d152b4ac40966e20b8b7ea6aec6165e367346450befceafbfa235ffc549c96006ecef0f5bb419b93002210aead8c9f4efe45dd2dc5504231f798ffc1400322324dc4445a5915c17688312c922c07aebe917fc1e652cfeb1be60a9e5f9f9acbee490e2f118ac7363b105f139420acc7c3d9ed2c4928167891ad162a8b5b119f2bb5fd1707f0700000017af01728631941801af8c7f3ba627b3a4a6239318cb81cd33a7b0c34e905b1e38d9bf5a11793a66eccdafc4b09a0c70e289ae6ddbf4418f1fd9e81a0155f1338094a1b0b30f76da80d4a935f9524d1b02cf212873ab8d2c29690d1efdfda5afb1b023", 0xf8}], 0x2, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x17, 0x8000}, 0x2000c880) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x43732e5398416f1a}) close(r8) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)) 00:29:02 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:29:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x0, 0x0) [ 697.899548][T18143] IPVS: ftp: loaded support on port[0] = 21 00:29:03 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x100, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa71d}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x66}, @NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x2c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xa9}]}, @NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x402, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x25}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1b}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0xe00, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELCHAIN={0x84, 0x5, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x3c0}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x149103, 0x0) ioctl$CAPI_INSTALLED(r2, 0x80024322) 00:29:03 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) [ 698.031424][T18151] IPVS: ftp: loaded support on port[0] = 21 00:29:03 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) getsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) [ 698.245648][T18163] IPVS: ftp: loaded support on port[0] = 21 [ 698.312676][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 698.318477][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 698.370830][ T27] audit: type=1804 audit(1579652943.410:402): pid=18149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/132/file0/file0" dev="loop3" ino=400 res=1 00:29:03 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x4687c2, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000100)={0x2a, 0x3, 0x0, {0x3, 0x9, 0x0, '/dev/bsg\x00'}}, 0x2a) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x1060, 0x1, 0x5, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x50ed}, 0x1, 0x6, 0x1, 0x200, 0x26, 'syz1\x00', "db73df9d48dd30e248f5615a9862e5837f54368f910884cf8c588b8103b2916d", "4e8d696fe8231d69a45ba873b3c7466ef4d9955f6f0d6df8a5656417cf1bccb9", [{0x4, 0x3ff, {0x2, 0x7}}, {0x3, 0x1, {0x3}}, {0x1, 0x8965, {0x3, 0x401}}, {0x9, 0x0, {0x1, 0x1}}, {0x9, 0x61, {0x1, 0x3}}, {0x800, 0x0, {0x1}}, {0xc7b, 0x0, {0x3, 0x401}}, {0x3, 0x0, {0x0, 0x80000000}}, {0x7, 0x2, {0x2, 0x2}}, {0x8000, 0xfff8, {0x2, 0x7236}}, {0xff, 0x0, {0x3}}, {0x101, 0xfff8, {0x1, 0x2}}, {0x1f, 0x80, {0x0, 0x8}}, {0x20, 0x401, {0x2, 0xffff8001}}, {0x800, 0x1, {0x0, 0x4}}, {0x80, 0x5, {0x3}}, {0x0, 0x7, {0x2, 0x6}}, {0x7fff, 0x3, {0x3, 0xd49c}}, {0x14d, 0x9239, {0x1}}, {0xaa2, 0x83d, {0x0, 0x3ff}}, {0x1f, 0x40}, {0x0, 0x0, {0x0, 0x4}}, {0x40, 0x7, {0x2, 0x4}}, {0x1, 0x8482, {0x1, 0x1}}, {0x3, 0x7, {0x2, 0xfffff801}}, {0x4, 0x4, {0x2, 0x8}}, {0x4, 0x40, {0x3, 0x2d}}, {0x7ff, 0xff80, {0x3, 0xf948}}, {0x0, 0x7, {0x2, 0x1}}, {0x5, 0x5, {0x1, 0x25}}, {0xef8, 0x2c2}, {0x100, 0x4e, {0x1, 0x7}}, {0x2, 0x0, {0x0, 0x4}}, {0x4, 0x3f6, {0x0, 0x5}}, {0x3ff, 0x6, {0x2, 0x7}}, {0x3, 0x1}, {0x8, 0x101, {0x2, 0xd9da}}, {0x8, 0x1000, {0x2, 0xfffffffd}}, {0x1, 0x7ff, {0x1, 0x9}}, {0x3, 0x5, {0x3, 0xe449}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x2, 0x8, 0x400, 0x1000, 0x1, 'syz0\x00', "d271dbab3bf3ae0623a9c61fd9d8542a192d06fcf1f3bd3d7bf2be8299f5d0b4", "e1d1287aedd12c51897127ae9140eb4f32169625a0867abad7849c418ca5ad2a", [{0x0, 0x4, {0x1}}, {0x2, 0x90d, {0x2, 0xeb03}}, {0x4, 0x6, {0x3, 0x7}}, {0xffff, 0xfc4, {0x0, 0xf7d}}, {0xfff, 0x73f, {0x1, 0x928b}}, {0x3f, 0x71, {0x1, 0xa4}}, {0x4, 0xff00, {0x3, 0xfffffffe}}, {0xe3d, 0x100, {0x3, 0x8000}}, {0x800, 0x7ff, {0x2, 0x2}}, {0x6, 0x7, {0x3, 0x80}}, {0x101, 0x2, {0x3, 0x1}}, {0x5, 0x9, {0x0, 0x3}}, {0x2, 0x7, {0x3, 0x9}}, {0x0, 0x9, {0x3, 0x9}}, {0x0, 0x1, {0x3, 0x2}}, {0x2, 0x1, {0x0, 0x2}}, {0x9, 0x9487, {0x2, 0x81}}, {0xb04, 0xff, {0x1, 0x7}}, {0x9, 0x1, {0x3, 0x5}}, {0x200, 0x9, {0x0, 0x1}}, {0x5, 0xb9d1, {0x3, 0x101}}, {0x5, 0x5, {0x2, 0xff}}, {0x7d11, 0x146, {0x2, 0x9}}, {0x864, 0x0, {0x2, 0x1199}}, {0x1ff, 0x0, {0x0, 0x2}}, {0x1, 0x0, {0x1, 0x80000001}}, {0x7, 0x101, {0x2, 0x7fffffff}}, {0x7, 0x101, {0x3, 0x1}}, {0x7, 0xd4c, {0x3, 0x6}}, {0x8, 0x5241, {0x3, 0x80}}, {0x7, 0x4, {0x2, 0xff}}, {0x1, 0x0, {0x1, 0x1f1}}, {0x40, 0x1, {0x3, 0x3ff}}, {0x9, 0x0, {0x2, 0x2}}, {0x7be5, 0x2, {0x2, 0x62}}, {0x2, 0x2, {0x2, 0xcab0}}, {0x6, 0x11f, {0x2, 0x9}}, {0x7f, 0x80, {0x3, 0x10000}}, {0x1f, 0x3, {0x1, 0x2}}, {0x2, 0x8000, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x1f}, 0xff, 0x4, 0x7f, 0x80, 0x28, 'syz1\x00', "138e60cd520add04a032604e803ebe11fd00d3e5a479d8bf24b3faa149d60e1f", "3d0715e96864cac1033457e488c648342cb24570d574de75dea73b3b4c4b2e02", [{0x5, 0xe737, {0x0, 0x99}}, {0x1, 0x9, {0x0, 0x6}}, {0xfffd, 0x93d4, {0x1, 0x7}}, {0x7, 0x5, {0x1, 0x2}}, {0x52, 0x0, {0x0, 0x2}}, {0x7f, 0x80}, {0x8001, 0x1, {0x3, 0x8}}, {0x7, 0x4, {0x1, 0x6}}, {0x4, 0xe00, {0x1, 0xfffffff7}}, {0x9, 0x101, {0x3, 0xfff}}, {0x8d08, 0x81, {0x3, 0x81}}, {0x8, 0x7, {0x0, 0xad}}, {0xfffe, 0xdba2, {0x2, 0x40}}, {0xa2e, 0x6, {0x1, 0x3}}, {0x0, 0x8, {0x3, 0x8000}}, {0x9, 0xbb09, {0x3, 0x6e}}, {0x6, 0x5, {0x3, 0x2}}, {0x5, 0x0, {0x1, 0x20}}, {0x6, 0x7, {0x0, 0x3}}, {0x6, 0x6, {0x0, 0x836}}, {0x3f, 0x2, {0x2, 0x800}}, {0x81, 0x7, {0x1, 0x3ff}}, {0xfa64, 0x4, {0x3, 0xfffffff8}}, {0x8, 0x0, {0x1, 0x7fff}}, {0x0, 0x5, {0x3, 0x3}}, {0x1, 0x9, {0x0, 0x1}}, {0x7ff, 0xfff, {0x2, 0x7}}, {0xfffa, 0x800, {0x3}}, {0x101, 0x7, {0x1, 0x32}}, {0x200, 0x1, {0x0, 0x800}}, {0x1, 0x6, {0x2, 0x20}}, {0x6, 0x200, {0x1, 0x101}}, {0x7, 0x80}, {0xbc1c, 0x4, {0x1, 0x7}}, {0x8, 0x0, {0x2, 0x8}}, {0x81, 0x800, {0x3}}, {0xc961, 0xffff, {0x3, 0x400}}, {0x0, 0x2, {0x0, 0x5}}, {0x8, 0xdc4c}, {0x3, 0x800}]}}}, {{0x254, 0x1, {{0x2, 0x8001}, 0x4, 0xc, 0x100, 0x3, 0x4, 'syz0\x00', "2759cfa0e2fd98c2d77ba051cfe4606af6544d255e244b26a598c43ad43c30d0", "8f3e6f54c0fe88a0a2a35e43646a09b87ba3e9b7f02202d4c2b35df39cf95ebc", [{0x1, 0x4, {0x1, 0xb62}}, {0x1f, 0xfffc, {0x0, 0x7fff}}, {0x40, 0x1ff, {0x3, 0x3}}, {0x100, 0x1, {0x1, 0xff}}, {0x2, 0x3ff, {0x3, 0x80000001}}, {0x4, 0x800, {0x2, 0x7}}, {0x9, 0x5, {0x1, 0x7}}, {0x0, 0x9, {0x2, 0x3}}, {0xc30e, 0x2, {0x1, 0x4}}, {0x1, 0x81, {0x1, 0x2}}, {0x8, 0xf07, {0x3, 0x9}}, {0x0, 0x101, {0x3, 0x401}}, {0x1153, 0x8, {0x2, 0xb72}}, {0xcf, 0x3, {0x3, 0x1}}, {0x8, 0x401, {0x1, 0x400}}, {0xa8, 0x1000, {0x1, 0x1}}, {0xff01, 0xd2c1, {0x3, 0x2cef}}, {0xb93, 0x3, {0x1, 0xffffffff}}, {0x4, 0x2, {0x0, 0x40}}, {0xffff, 0x6, {0x2, 0x2}}, {0x408, 0x8001, {0x0, 0x5}}, {0x1, 0x8, {0x1, 0x31}}, {0x100, 0xfff, {0x1}}, {0x9, 0x0, {0x3, 0x7ff}}, {0x3, 0x100, {0x3, 0x3}}, {0x9, 0x5, {0x0, 0x7b18}}, {0x7, 0x7, {0x3, 0x7}}, {0x7c, 0x1f, {0x3, 0x7}}, {0x101, 0x0, {0x3, 0x9}}, {0x524c, 0x9, {0x0, 0x1000}}, {0x2, 0x6, {0xe374ed03037c80d0, 0x7}}, {0x8, 0x0, {0x3, 0x8001}}, {0xffff, 0x1, {0x3, 0x3}}, {0xaf, 0xfe9b, {0x1}}, {0x9, 0x1, {0x2, 0xb7f}}, {0x800, 0x400, {0x1, 0xcb9}}, {0x5, 0x29, {0x3, 0x7}}, {0x1, 0x5, {0x2, 0x3}}, {0x0, 0xffff, {0x3, 0x7}}, {0x0, 0x9, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x80000001}, 0x2, 0xa0, 0x9, 0x400, 0x19, 'syz0\x00', "b04e1fd485f54d417c8745b3618bb34681981bf4c20dddf2b470403ca1bb2d04", "e8b8683fd29d75b16cdec980336623cec7e3551196f260e70db6ed492b26d208", [{0xfffe, 0x0, {0x3, 0x8c61}}, {0x2, 0x4, {0x1, 0x6}}, {0x7, 0x3, {0x3, 0x7}}, {0x0, 0x5b96, {0x1, 0x3ff}}, {0x0, 0x7ff, {0x2, 0x35}}, {0x1ff, 0x974, {0x1, 0x6}}, {0xfff, 0x5, {0x2, 0x5}}, {0x5, 0x800, {0x0, 0x2}}, {0x400, 0x6, {0x1, 0x1}}, {0x5, 0x8001, {0x1, 0xffffff10}}, {0x1f, 0x3, {0x0, 0x101}}, {0x1000, 0x9d8, {0x1, 0x6620}}, {0x4, 0x6, {0x0, 0x6}}, {0x6, 0x4, {0x1, 0x3}}, {0xc0a6, 0x1a0, {0x2, 0x800}}, {0x2, 0x8, {0x1, 0x89f}}, {0x9, 0x9, {0x1}}, {0x9, 0x7ff, {0x2, 0xffffffff}}, {0x26d, 0x0, {0x1, 0x4}}, {0x3, 0x9, {0x0, 0x6}}, {0xd2d, 0x800, {0x2, 0x4}}, {0x200, 0x7, {0x0, 0x10001}}, {0x6, 0xfff, {0x1, 0x2}}, {0x5, 0x3, {0x3, 0xdf3}}, {0x7, 0x1, {0x0, 0x2}}, {0x8, 0x0, {0x1, 0xe7}}, {0x40, 0xfbff, {0x2}}, {0x9, 0x2, {0x3}}, {0x0, 0x401, {0x1, 0x17d}}, {0x4, 0x20, {0x2, 0x1}}, {0x8000, 0x2, {0x0, 0x1}}, {0x7, 0x1, {0x0, 0x7}}, {0xfff, 0x40, {0x0, 0x8}}, {0x2, 0x2, {0x6, 0x4}}, {0x8, 0x6, {0x0, 0x4}}, {0x4, 0x1, {0x2, 0x5037}}, {0x7, 0x6a1c, {0x3, 0x8ae9}}, {0x1, 0x6, {0x0, 0x8}}, {0x80, 0x2c00, {0x1, 0xffffffff}}, {0x2, 0x6, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x8000}, 0x2, 0x8, 0x4, 0x5, 0x1a, 'syz1\x00', "17c0fb873d9e45a82675417176782bc3305cdd80741573f3024ef6a61126a4d4", "bed29d2733993f69f56ae3ab5965756c4de44ee9c09d9e06f4085d07106022c6", [{0xfff, 0x9, {0x0, 0x6}}, {0x3, 0x401, {0x0, 0xd5b9}}, {0x1, 0x17, {0x2, 0xfffffff9}}, {0x5, 0x80, {0x3, 0x100}}, {0x6fd8, 0x1, {0x2, 0x55}}, {0x3, 0x6, {0x3, 0x1}}, {0x46, 0x3f, {0x3, 0x7fe5d316}}, {0x9, 0x7, {0x2, 0xffffffff}}, {0x0, 0x101, {0x1, 0x3}}, {0x0, 0x1, {0x3, 0x7}}, {0x80, 0x38ff, {0x2, 0xfffffffb}}, {0x20, 0x3, {0x2, 0x3}}, {0x0, 0xc67, {0x2, 0x496}}, {0x173d, 0x5, {0x1, 0x10000}}, {0x4, 0x7, {0x0, 0xffffffff}}, {0x9321, 0x7f, {0x2, 0xbbd}}, {0x7, 0x0, {0x3, 0x9}}, {0x8, 0x101, {0x0, 0x7}}, {0x3, 0xffff, {0x3, 0x8}}, {0x5, 0xfffa, {0x0, 0x7f}}, {0x1, 0x8000, {0x3, 0xff}}, {0x5, 0x2, {0x3, 0x6}}, {0x8f, 0x8001, {0x2, 0x7}}, {0x9, 0x4, {0x2, 0x7}}, {0xe9c, 0x77, {0x0, 0x7fffffff}}, {0xc70, 0x5, {0x3}}, {0xf798, 0x1, {0x2, 0x8000}}, {0xbe, 0x200, {0x3, 0xfffffffe}}, {0x9, 0xfffe, {0x2, 0x6}}, {0x400, 0xfff}, {0xb0bd, 0x401, {0x3, 0x78b}}, {0x4a8f, 0x0, {0x2, 0x556d}}, {0x8ec6, 0x80, {0x1}}, {0x4d50, 0x7fff, {0x3, 0x200}}, {0x4, 0x3, {0x3, 0x7}}, {0x9, 0x1000, {0x3, 0x400}}, {0x6, 0x4, {0x3, 0x1}}, {0x1000, 0x2}, {0x3, 0x8, {0x1, 0xfff}}, {0x5, 0xc42, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x40}, 0x52, 0x9, 0x1, 0x40, 0x3, 'syz0\x00', "2f3f9bf629706215f4296c3bd2c6ee3c118ff41706ac2aee671dbe676697cc73", "c36dbd9cfe79d7973817acd5a53d4b2689cdc8e27c60eb8849626eba3968c777", [{0x1000, 0xe7d9, {0x2, 0x4}}, {0x2, 0x401, {0x3, 0x57}}, {0x200, 0x1ff, {0x2, 0x4}}, {0x3ff, 0x40, {0x1, 0x7}}, {0x20, 0x7ff, {0x3, 0x6}}, {0x5, 0x400, {0x3, 0x2}}, {0xfffa, 0x8, {0x1, 0x10000}}, {0x1ff, 0x200, {0x0, 0x1}}, {0x2, 0xd59, {0x3}}, {0x3f, 0x4, {0x0, 0x2}}, {0x6}, {0x6, 0x5, {0x2, 0x1ff}}, {0x3, 0x2, {0x4a6e9eb8ed7e0d1e, 0x2}}, {0x7, 0x2, {0x2, 0x7f}}, {0x5, 0x81, {0x3, 0x3}}, {0x9, 0xd9b2, {0x3, 0x4}}, {0x0, 0x6, {0x0, 0x10001}}, {0xdaa, 0xff, {0x1, 0x81}}, {0x4, 0xe6fc, {0x3, 0x18000}}, {0x100, 0x6, {0x2, 0x6}}, {0x2, 0x0, {0x1, 0x395a}}, {0x1, 0x5c7c, {0x1, 0xfff}}, {0x1000, 0x101, {0x2, 0x5}}, {0x3ff, 0x3, {0x0, 0x2}}, {0xfff7, 0x3, {0x1, 0x7}}, {0x7fff, 0x1000, {0x2, 0x81}}, {0x81, 0x2, {0x1, 0x343}}, {0x8, 0x1, {0x1, 0x8000}}, {0xc9e2, 0x2, {0x1, 0x8000}}, {0x0, 0x6, {0x0, 0x4}}, {0x8, 0x100, {0x2, 0x100}}, {0x6, 0x9, {0x2, 0xb8}}, {0xffff, 0x81, {0x3, 0x1}}, {0x1, 0x7, {0x3, 0x7fff}}, {0xf84, 0x6, {0x1, 0xff}}, {0xbde3, 0xb, {0x2, 0x3}}, {0x4, 0xffff, {0x2, 0xf6}}, {0x6, 0x2, {0x1, 0x1}}, {0x1, 0x8e8b}, {0x9, 0x1000, {0x3, 0x9}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x40804}, 0x20040000) [ 698.472678][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 698.478547][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 698.562671][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 698.568497][ C0] protocol 88fb is buggy, dev hsr_slave_1 00:29:03 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040), 0x4) 00:29:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x0, 0x0) 00:29:03 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @dev, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a45228", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote}}}}, 0x0) [ 699.441240][ T27] audit: type=1804 audit(1579652944.480:403): pid=18198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/133/file0/file0" dev="loop3" ino=402 res=1 00:29:04 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r5) 00:29:04 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) 00:29:04 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000180)={0xfb, &(0x7f0000000080)="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"}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) 00:29:04 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:29:04 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:29:04 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) [ 699.671918][T18208] IPVS: ftp: loaded support on port[0] = 21 00:29:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x0, &(0x7f0000000540)) [ 699.772469][T18218] IPVS: ftp: loaded support on port[0] = 21 [ 699.784145][T18219] IPVS: ftp: loaded support on port[0] = 21 00:29:04 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) sendmsg$kcm(r1, &(0x7f0000002380)={&(0x7f0000000040)=@llc={0x1a, 0x189, 0x8, 0x42, 0x0, 0x0, @dev={[], 0x3d}}, 0x80, &(0x7f0000001200)=[{&(0x7f00000000c0)="ecaa9d30726c778145dc60ce18da2423bfbafa6dc29e1f87233d60afbfd4333a10aead25a98e2ac3d50dd688924bca3f8a9efd1ea4b0a38e3e269ac2f7560eee35e893799be48b8df28f943178", 0x4d}, {&(0x7f0000000140)="6a8f0ae5a653fa62e55a76f0a2c95eb652d405093fb1df1bba535700305d5243d982ca143b74bcfc628941a1cf41e97b4b0b37da3f5559c538686225c111a81e1d5ff0873634e5c4", 0x48}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="9d9fca2484d9bef1cdb964319bfc44b46cc41b1acd95b64ccb78bf84391737de847d0a1519aa86bb1541c20bf26cc521856bf16971828cb5e1132cbd74ef0797ec4ae96d2cb7f82c48a3fab4aaf3e80f13614df5058db042ebc609f3cc0d675dad235333fbcd005e8b2ba651c9f9957d91647ff9c61b18e2b88959b5390c10b18c5d6a206620b61e52b25cb0683ba8dc1cde562ad000949da68144b65f2cbca4e7a5d98d0f173744400297266103bb9defc6c7a4916ab77373507bbac3f82392570d59017f35faee8e9eaa46b6e4ffe3e90141e970862c1d7e35b98f8b9f0a869e647d9538ad21ce644238c5aa57d461c0fdf559d0550cc05eb52fbc668e18ac93592391816f22447d02f5636528533d6463eebf443cfbddec7e21f2512c54922236391ecad61f992dd14c97dc9fa2402b666f3580eec463ad06c156b3e77370b0fb9ac37b1d283da06aac9aaedf088287907d64e4711dbafd68ea7213a1d2255337904f5216bec0652eca705cb2d5d8e8bdb275436a67bda1570ebcc90bdd44b15a73b1c95f8bc885c95188c0edb865a4b3f2eff961e1ea1cc9726a45a69378fb2623f25f1408e2a93110468d4fb751e1020994057f05c30580e068e2ba8bc7eadb7165d404d62ef5b92cdb89dbd348b516c8536f42d41a75b1dc0af575b9321df9afee0e191557e1534390171eead5c529027ab4dc5ec45ca269d287a1ade250f5e588d26b39984d5045c3edde8b83f4fde92e7628c31ca6635d6b5408f2b1f4b638f4c984eedaf9a6d178f38189a7d5fbb90432064adb96905a8d38abe08bbb7672a70fbf441e28e56f237b74f91c8fce5b8b4bb1510d01920f56484389a62151b5023ea263ea74629a866f57553fe96e525de408638a3925b3038794915956f3d3cb1fca267cff636201288f2c63afa2c4e53455146ddbb187c677c784a4af8d201ea6f28e298d167e1d5e2db5a7da481b29800f57f4a8b224dc54f5ad64753535046105dd90eeacd1a96178381d2b6ad53780ede78eb84f6f65e8998d60a520372e74256027cdd16244469e51d51174237fefa3b7bbd8260aa2bdd4c2d17a9eb61292eb219fc6f4c8cbd5433f9ca9179977f289dfade9c90a08bc1170e2914dff6963711651bb50a9135053ebdbb236a0a87bf5a26c10b2355d18fe07280b5390f1b253d4af1ece5505e40d0ca088b0cf42fc1c80a2d357a1d5b194218d76b35fddfb6df5cf10f7f5747f9b81ee091011f93e3a7f4f699554ebb3c3ea7776238d1c3403a1915b85bc8fa32ad4bcbfc52953bae42dd483c0ba15e99c00dc5f4a663f025c93b5d7884b35a680490b352df10590c4ac8b92788991be315209de6a976d403ed0bc227223818e2acd952227aa786fc8c37ee8fd689bb43fbce9779f1c9e960cb56d580ad72f53a0ff31139710309056107cf13f3ba7ebd9174dfc35678294f88560ece86d97f27425a4d48433bb9198ae271fa65cab85610b2a781a7c6e7cc8b8d56715a494e3905a26f959a16fab388b8b03975b9e89098609d56125afc2904c83c053434d7c02d3cd520ecd45ce1018315288a1dda792ef5d966e39a2ae36b4cef2181b8fb43c17168a60e1d605be8a9c326e63497c714c75a54105da7e2d1579f53b0e486d3c6bc0732f27bf227fdf3721b513f53a83b69032326d3813fe0255b9f2e4358ae2b98faabad5b1f154699447e7de94782f266b5dea2f30a7f3ae20ee2dfff8e914703c7830c87c76a3c909e2d676ab1520832389f5f3ca429545c2e14afe912ae0a26b8b3c8550f4ab79901edfd14ff6d745aebe34b6b7221e7f9e92705d9ad5a180f196175ee792ecec2e1310c5c18c9fd99bd9098894c06f289dd3f150be23be7e37944d51fd5b63577124d67b8c2e71f0ff47308816950b60585d66dba23ddbdf977ef8e11453794c24aacaf500213fd44e6b08216030efafde251a537720e62f99752fe62c2c8ee39e97fd21d8a1251fa8638ac945471b1046eddb81b39d684dfeac45ea80d0209a252b2b992646756577130420da12f72efd0676bbf80247243f410274695593a0d6ac5bc896caac6f2f430a97d01fe7237a8c3d5b5d2ff91d307c6ee46e6a274218b64319b2bbd38be75f054dfc7f1834248f9e6519d5e9dc43e9b249aeae706ac8839b60e72e2abd02b5f17c88ac876051186a1477cf40e37bdcb039467bcfaa12171b021bcb28aa5e5c2d849f2662a90fa1369254eb5935fbc38481f85d84ed109a3c8c05fddfa7f6d6b0ece80911d0af7bfb05ce2d2da204975761186ca5885198990ec67b5428dbcde57b750cd9da390d1762e87447e3a8d29ec4b2f8de16cf8582c6d9d82b10a8b3f19e62f4e5634ab33b910568fb4b180205f9747ed3a713dd497a0abd23722260d1f5ac111da45a786f7915291a42b785e049eeea2a298086a753628bf2a4baad7aa422a00a6293eec8eb7cd2e1c2fa8f25e09d8faa8355e8ef87d8cf7c6fc2728149639b7fa03854c48b87ef2793ff1687c46f7b5e5056daa294a09d8b790f7556eb5cacb1c524bb67d1eacae7ba68bc8aa26ddc161ca838f7fe8da7f6ab40660ce0e1392af099401613eb2f3c64228f25a9fb42ef6b8be517e1a7746f7dbef1b64ec48ea347cf5b99ceb7e69f4a32325c00e09483a2ef8f4d4bfba672dc61384d0e8437ec441ac1f533e367fc46bef32ccc0d62f907ed4ad2d8ef874de2bdb15b338521217be9c1d640e9975662a5f605effac54c5687202fc8bf7659fb92498a1c8f80de2c047ab9ebb7e59dbbf01b41e648265d414e256e6f9a54fd68aec0a64179de9a094f9bd91e7449ba8b19ea93a6d1b084a8f9900fa08da1f28a2685596b27b89ff070316aa324401c7b1b085c01198435a4cc64edead2fd559ea6033761d767aa5c56cc969b97e7c2caba11e9c040f04d87727f83fe9b973917fe72545bc1540091a8e594542e87c52727af4b7a4a087c42a6dc5ac9cfbfbb23c428dc2129137714fa2a4a31b79050b266713a65fd34f86cca6abb81fce2a4a10024aee4ad68f5d4bb5aa3c41b3c89eeb81172948a54e2ff5b36c411ff0b125ba2ec78cbf3700b08a824dc26c449bd49a542335391090f3116264edb3dc93f4d3955e2eef90b96fcd28326fdf5ec185d93eaaaa38835082fc59d8880670b0e7888d597b7f32101964f668756e3e138a63b4c84593958f4698fd261b3f7a05a623e0b88f69bb614cf5b3421140989ed0a8c2b7ecee9fb60b3cdb9ab756147b23fdbecfe09123628901c3bdd0313ec400d24874c264c02912ae2fe20f8268a8c7c7835b60c604a52e0763a6b00d07d5934a72352f1ea6bd75679986d6c23aaf68899a8f8ae16c9a9b4976b67e1b8f752ba3a4bec4c9d8863cdef9dbeeacf430a5f28bc5c9712aefa1c27323ca64ce49c0c5e8bc71bc1c4849d0db259316c11e7ca54c4f153ceb4447b3f7249af413b7035eac796730ee3dc96edc006839b34c67b3a5c91f8e23450de8db0f405c2dd14717f9656c3827cae868b20ce22a468c87a96e1f92fdb757923f1bbd16ce86351cd6cb4a2a519ec29efe1223f76de31c4f6589680097b5ad4de2b66124b4b4e03ff5844fb82bbe80d9bf08afce18b6284805317470e4ec728652d87a4625afe03a35b1cd24630707877b58aab77581154eecdcbc8c604e70be0c6bc1d9441e115a6670cdc87bde4f24b7186dbf8a2c3077fb9008e7aaa8a5c4887e43c91ad40251190f5aa11324b6e7618855539df0e95f9be71adc4b448e5b99a853956d2910ec571127c9d875f366c9cab30d83d86fb9a7fb3e68970c1552d83a10687b831380f799f3f3c5c4af7eb579a3b196efc5e345dc7e9bf8685f7d7c037f2be14ece62ced75c18e2cdaa11b494932f1e7667f14962e7a042b785169e12fe4e95e2d56818b08758383bd74d559b5cdd078fabff4b9e480961525f4d213bd4903c09b7a69388be911138a8ceb04794150148a9b3c553b32f58e52e4e01f1688f2cda4c0186afebad04356f7ed02b6070c6d69778b79f2d4c6683107c7de3de18e5890b78f3b5224021ff8509bb2277014359c4354b2f002773dd1b34e80929ae5828fcd94aa38ce77760a3d2a0132599dd95f7f01fe8fffbd485bdb8ab1f58869251f1bb9800b98fac64572c8b8ba7e60e05f0e87fb271fdde8da40aca708ab015597baa3bed2a4d1f54717cfc5f00e2a32aeb9d2b8714e550605fe8e56bf7cf410c1b7988049138748ea53e7757f22c1011f4c0fe94a0dd33d27f7c84d85f07ed58472de9f5d4a3cc8af155f1b3a6050fb46f8ab467d5c4338c739b447a2650e0be82faabb50578e79f2bbe2931a41e4378617b5c6c983cc4663691a9bf97e042e28fc1bd2abfeb5723cd97000ed382c5a961e57f9642e9646bc79e9a9d422ef6fbf36e3401b97eeb29220e8e91db4c0c01c870f26bb5ca05cf3d67b01c573bb62389b9c98ae73be604b6da3d97d742648060f21abf2461d3f9e6f6bb1a694b49bdc03da1ed1d62f2dc0d391155c6ce07b7a0de88449d19de1d2263984d54fbf41f5057593d7aedcc2db26b13283014dc45d1673a34d4c4e5b518f9fb30182bb6a58c04ac8628380a0747b1613abf95b02a5bb760a2d0dc7cf2da3ed6caed5f55310e5bd2166e79533739393737e5e2d04d11ff29186e6bafe1edd990022c219813455714b85bab88d2fb2914f83bcd40b6a1c8c71a510de1371c97c1a85d855d01eb3042b8858b0a6e77eb263ceeb666aad3d92494db0292dc3a5ba9fe4d7975ab118a95f6fe7b153ba91d39f76a59bea2fb3f0c7c0b2ad13a76434a53221745b3b86bf9b10cd6f2be9dedbf543158745fe74f0d7cba30111442b8cba626f42ca081e7a2066c38974378c7221b9b2021d12687ccdf2973e603488b1cef7ebc571320a493ba94bf195326dd861f5e9845b854ab865954fecae7529a644cd6883dd92f1c1ac72c4c359997b91d10c9e5b1bea59bfd9c71fcbdc7cff2d0c9b151f7a1e5f3c81a227d40d42f65ca8ea0fb6546197e0e44043cf6f74203b9b1f7fb3c4bf74dec43558db0216eda2890f4df5c83b060de399dbc0bd8cbd0950cb78cc96c2039cd6852c58c867583efb3d47da751c2e9c4e385c96d79db0cc38534cc1ebdc8bdcef938978d94322c1f40035d3dd535d5e27bcb21f798d6fd9750484b08319d96f401e4f2b9fce8af74ee71759fa72f14d891fdc14d394037ad5744744b04119479cd580153eeab52b79f28fcad8e86018df4efc0946ee20354643a922c154f5a99864e04ad1811d71ce82b7ace2f8423104974aa8e46cae6f9ed4b04cbcf721e366d954af371b190324b9f3b089ecb49db4f28f0461c8042d3766c03a381ec57790aff64d8caf0e158a787c90998807e485533f09a6337b7a31f8aa50ac5ad72ab8931d06ab952653be9c6c4410db33182b1084b42d92b5a0a40ccbb74d8885ce70661a7c3539a2d0b549267b7251390dcae44dfc866c55c5edd1329bea5ad94f0336cd8f0a6b31244a968151920bce1c63d64e8896b6dc23e4b719b70732c4a8e4e174404f2c1ebe5d32d98f1ba0a64b1450fd629d684aa47d273de778ad771cd5e2cf82fc52476649c0dab1f1edd463954cffaed9e4a45410518aea7cf192c087c60050c4d8c1bfabecde93517545bd6a4a11f4f135b5c3a4f0f613e769b8de41d2077591c348a3b2b45cf64a31e7f8ae09da65f463a7d36594fbbdb9a867d404777c033bee3b25e6ea69de4ca19b926928ee57811460dc0d763eeec3a4d1428dd144d53b130cdc701a7c06d5f6123dc0", 0x1000}], 0x4, &(0x7f0000001240)=[{0xf0, 0x84, 0x7fffffff, "8af0d4dd4da82387ad4367e6a2a6485f968f32f6f83567ae6cca68a199d28dbab0f2b95a3e7cc8fdaffc8786fc813bbe9046063d042aa6cd43ca4a461107e99352bcb2509e8459663332ace1f30e40a842bfa232cc0c356e8ad5fe6f521e3d7dd041a9c5caf6a746e1c501b204a64ac6553178a720ad1e7fba9681c68e7dcac4f71fc5d9f1fba699554624673dd950b97c39e679dd34b137c4309d62ad2be486dcb976b1c37b2d03aabb49f185d9b642fd1de6da0a953e1d17faf80c38637984ce2f1f184fa98e21c6f45ed4a619c046230181c3f15c2382698f0d2b33424a"}, {0x38, 0x10a, 0x0, "21e706d6d6dad8792942e983aab0216739fdf6d9791614b7b7e795d8612414d8a936"}, {0x1010, 0x10d, 0x2, "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"}], 0x1138}, 0x800) 00:29:04 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) 00:29:05 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x21, 0x1, @thr={&(0x7f0000000040)="ba65d4bdcb0da04ea37a7897082cf4ea9b8e9423354eff3d7935abfeba38357ba42de896271001c53f5eabcf388a11888bcd10a888e205977c59e6b39d8fcc132b3a9b67b7fa749da30aa5d9c3c10907c56c20137caef5cc4d36271cec334d9bdd5cdb2a26706ad69a8399b86fd27c69f182fd96f94cce2d33f89bf2a90390076f390a0bd20e48043f70a04869e3a5eb748efd5a02e5cc5512e340bb07630b98a5f6eaaca98ac5bf36baffd96b509e5c3ec9de8d7c9dc980652a3148b1b9445fd8a838b9b249b1179c685e976c1a7f65e7063727fe5d45dd75714e1bdb25e7d686d66a70562ea1ebf5a0636b8e5d691aebfa8c8809", &(0x7f0000000140)="e34a2d38a26fc4e3f67bfaaf93796547d6605edacd53bf50e785387464b2b4343a35cfd5505ff3295d7dd0c159d11785e238b07568bcc56d7417ccbb179527b10102f2a388a3fa377ffd01a8d9238933"}}, &(0x7f0000000200)=0x0) timer_getoverrun(r1) 00:29:05 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) 00:29:05 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) accept(r0, 0x0, 0x0) [ 700.862682][ T27] audit: type=1804 audit(1579652945.900:404): pid=18252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/134/file0/file0" dev="loop3" ino=404 res=1 00:29:06 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:29:06 executing program 4: r0 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 00:29:06 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:29:06 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r2, r3/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:29:06 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) accept(r0, 0x0, 0x0) 00:29:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x0, &(0x7f0000000540)) 00:29:06 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) accept(r0, 0x0, 0x0) [ 701.234825][T18273] IPVS: ftp: loaded support on port[0] = 21 [ 701.254873][T18274] IPVS: ftp: loaded support on port[0] = 21 [ 701.272206][T18275] IPVS: ftp: loaded support on port[0] = 21 00:29:06 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) 00:29:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x8, 0x5, 0xfffffffffffffffe}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000002c0)={0x1f, "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"}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd36}], 0x1, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000}) 00:29:06 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) [ 701.502287][T17336] tipc: TX() has been purged, node left! [ 701.521747][T17336] tipc: TX() has been purged, node left! [ 701.539297][T17336] tipc: TX() has been purged, node left! [ 701.569510][T17336] tipc: TX() has been purged, node left! [ 701.636891][T17336] tipc: TX() has been purged, node left! [ 701.678629][T17336] tipc: TX() has been purged, node left! [ 701.699678][T17336] tipc: TX() has been purged, node left! [ 701.712104][T17336] tipc: TX() has been purged, node left! 00:29:06 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) 00:29:06 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000900), 0x10) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) [ 701.852719][T17336] tipc: TX() has been purged, node left! [ 702.002720][T17336] tipc: TX() has been purged, node left! [ 702.092730][ T27] audit: type=1804 audit(1579652947.130:405): pid=18294 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/135/file0/file0" dev="loop3" ino=406 res=1 [ 702.143098][T17336] tipc: TX() has been purged, node left! [ 702.149341][T17336] tipc: TX() has been purged, node left! [ 702.243630][T17336] tipc: TX() has been purged, node left! [ 702.253068][T17336] tipc: TX() has been purged, node left! [ 702.275041][T17336] tipc: TX() has been purged, node left! [ 702.311189][T17336] tipc: TX() has been purged, node left! 00:29:07 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:29:07 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000900), 0x10) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) [ 702.512712][T17336] tipc: TX() has been purged, node left! [ 702.655830][T18321] IPVS: ftp: loaded support on port[0] = 21 [ 702.672707][T17336] tipc: TX() has been purged, node left! 00:29:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x0, &(0x7f0000000540)) 00:29:07 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)) 00:29:07 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:29:07 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:29:07 executing program 1: clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000900), 0x10) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) [ 702.740140][T17336] tipc: TX() has been purged, node left! 00:29:07 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) 00:29:07 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001380)=""/6, 0x6}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f00000017c0), 0x331, 0x0) [ 702.901911][T18337] IPVS: ftp: loaded support on port[0] = 21 [ 702.914767][T18338] IPVS: ftp: loaded support on port[0] = 21 00:29:08 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0xeb07) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000580)=0x24a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d300000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x138}}, 0x0) [ 703.416090][ T27] audit: type=1804 audit(1579652948.460:406): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/136/file0/file0" dev="loop3" ino=408 res=1 [ 703.584826][T18354] devpts: called with bogus options 00:29:08 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) 00:29:08 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) [ 703.959843][T18362] IPVS: ftp: loaded support on port[0] = 21 00:29:09 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:29:09 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) 00:29:09 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 704.238083][T18375] IPVS: ftp: loaded support on port[0] = 21 [ 704.252819][T18377] IPVS: ftp: loaded support on port[0] = 21 00:29:09 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') gettid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0xeb07) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000580)=0x24a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000}}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d300000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001006d643500"/240], 0x138}}, 0x0) [ 704.581961][ T27] audit: type=1804 audit(1579652949.620:407): pid=18373 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/137/file0/file0" dev="loop3" ino=410 res=1 [ 704.582577][T18383] devpts: called with bogus options 00:29:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) 00:29:10 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) 00:29:10 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:29:10 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 00:29:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 705.448521][T18402] IPVS: ftp: loaded support on port[0] = 21 [ 705.465274][ T27] audit: type=1804 audit(1579652950.510:408): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/138/file0/file0" dev="loop3" ino=412 res=1 00:29:10 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:29:10 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) [ 705.663306][T18410] IPVS: ftp: loaded support on port[0] = 21 00:29:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) [ 705.734136][T18413] IPVS: ftp: loaded support on port[0] = 21 00:29:10 executing program 4: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 040'], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757064c74e652064656661756c7420757365723a"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 00:29:11 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r0, &(0x7f00000005c0)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x90) [ 705.939127][T18421] encrypted_key: master key parameter 'user:' is invalid 00:29:11 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) [ 706.237779][ T27] audit: type=1804 audit(1579652951.280:409): pid=18430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/139/file0/file0" dev="loop3" ino=414 res=1 00:29:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x0, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:29:11 executing program 0: unshare(0x40000000) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 706.804436][T18445] IPVS: ftp: loaded support on port[0] = 21 00:29:12 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) [ 707.047859][ T27] audit: type=1804 audit(1579652952.090:410): pid=18449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/140/file0/file0" dev="loop3" ino=416 res=1 00:29:12 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000000), 0x200) ftruncate(r2, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x519000, 0xa601, 0x2012, r2, 0x0) 00:29:12 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x4, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', r6) 00:29:12 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) 00:29:12 executing program 0: unshare(0x40000000) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 707.254924][T18457] IPVS: ftp: loaded support on port[0] = 21 00:29:12 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x0, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 707.383101][T18466] IPVS: ftp: loaded support on port[0] = 21 [ 707.430403][T18471] IPVS: ftp: loaded support on port[0] = 21 00:29:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) signalfd4(r2, &(0x7f0000a71ff8), 0x8, 0x0) 00:29:12 executing program 4: perf_event_open(&(0x7f0000000440)={0x0, 0x52, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x8800) sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) 00:29:13 executing program 4: r0 = shmget(0x1, 0x1000, 0x4, &(0x7f0000005000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000080)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xe) sendfile(r1, r1, &(0x7f0000001000), 0xffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:29:13 executing program 0: unshare(0x40000000) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) 00:29:13 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000900), 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) [ 708.339776][T18501] IPVS: ftp: loaded support on port[0] = 21 [ 708.370045][ T27] audit: type=1804 audit(1579652953.410:411): pid=18485 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir081207262/syzkaller.vjxX5I/141/file0/file0" dev="loop3" ino=418 res=1 [ 708.471007][ T27] audit: type=1800 audit(1579652953.410:412): pid=18485 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="loop3" ino=418 res=0 00:29:13 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="a60fb2392d6710fa931dc72f916cfad45c70d66e049824351c925ad7eb8e704f0c16e8a915cfe56240a033bc1b27f31ac38fe4256444f779d142e3648e625d77410b743b16070c489851d30c01b4c047f7a44b300b6e1f8c3eae71c88a137b9427181fcf3777dace472cd8cb01d2c3b68aed8a3fdf8900592b88c630927bc08041d6da0c250bdf9530114a3939854c7a17c93ef1ffda6f4eb01a980ae4521ddaf8658f1ad0083c7a9130f9f1", 0xac) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd, 0x5}, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) 00:29:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000016, 0x0, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 708.702395][T18513] IPVS: ftp: loaded support on port[0] = 21 00:29:13 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) clock_adjtime(0x2, &(0x7f0000000140)={0x9, 0x5, 0x4, 0x0, 0x800, 0x4, 0x8, 0x9b9, 0x8, 0x0, 0x3, 0xfffffffffffffffe, 0xb, 0x8, 0x33, 0xfffffffffffffffe, 0x6, 0x1, 0x0, 0x8000, 0x3, 0x401, 0x5, 0x1, 0x7, 0x6}) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x6, 0x0, 0x4, 0x5110, 0x55a, {r3, r4/1000+10000}, {0x1, 0xc, 0x7, 0x1, 0x3, 0x5, "67ce8f5a"}, 0xfffffeff, 0x3, @planes=&(0x7f0000000280)={0x0, 0x0, @fd=r0, 0x5}, 0x2, 0x0, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000000340)='posix_acl_access\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff) [ 708.999357][T18502] ================================================================== [ 709.007505][T18502] BUG: KCSAN: data-race in file_remove_privs / new_sync_write [ 709.015399][T18502] [ 709.017740][T18502] read to 0xffff888076b259c4 of 4 bytes by task 18498 on cpu 0: [ 709.025381][T18502] new_sync_write+0xf6/0x4a0 [ 709.029985][T18502] __vfs_write+0xb1/0xc0 [ 709.034235][T18502] vfs_write+0x18a/0x390 [ 709.038614][T18502] ksys_write+0xd5/0x1b0 [ 709.042860][T18502] __x64_sys_write+0x4c/0x60 [ 709.047562][T18502] do_syscall_64+0xcc/0x3a0 [ 709.052112][T18502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 709.058205][T18502] [ 709.060550][T18502] write to 0xffff888076b259c4 of 4 bytes by task 18502 on cpu 1: [ 709.068275][T18502] file_remove_privs+0x1cf/0x2b0 [ 709.073223][T18502] __generic_file_write_iter+0xd2/0x380 [ 709.078894][T18502] generic_file_write_iter+0x28c/0x38c [ 709.084360][T18502] new_sync_write+0x388/0x4a0 [ 709.089137][T18502] __vfs_write+0xb1/0xc0 [ 709.093394][T18502] vfs_write+0x18a/0x390 [ 709.097645][T18502] ksys_write+0xd5/0x1b0 [ 709.101902][T18502] __x64_sys_write+0x4c/0x60 [ 709.106509][T18502] do_syscall_64+0xcc/0x3a0 [ 709.111016][T18502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 709.119852][T18502] [ 709.122182][T18502] Reported by Kernel Concurrency Sanitizer on: [ 709.128362][T18502] CPU: 1 PID: 18502 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 709.137156][T18502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.147217][T18502] ================================================================== [ 709.155303][T18502] Kernel panic - not syncing: panic_on_warn set ... [ 709.161905][T18502] CPU: 1 PID: 18502 Comm: syz-executor.4 Not tainted 5.5.0-rc1-syzkaller #0 [ 709.170594][T18502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.180664][T18502] Call Trace: [ 709.183961][T18502] dump_stack+0x11d/0x181 [ 709.188310][T18502] panic+0x210/0x640 [ 709.192222][T18502] ? vprintk_func+0x8d/0x140 [ 709.196832][T18502] kcsan_report.cold+0xc/0xd [ 709.201542][T18502] kcsan_setup_watchpoint+0x3fe/0x460 [ 709.207037][T18502] __tsan_unaligned_write4+0xc7/0x110 [ 709.212426][T18502] file_remove_privs+0x1cf/0x2b0 [ 709.217386][T18502] ? drop_futex_key_refs.isra.0+0x5c/0xb0 [ 709.223136][T18502] ? __rcu_read_unlock+0x66/0x3d0 [ 709.228294][T18502] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 709.234208][T18502] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 709.240117][T18502] __generic_file_write_iter+0xd2/0x380 [ 709.245674][T18502] ? generic_write_check_limits.isra.0+0x168/0x1c0 [ 709.252296][T18502] generic_file_write_iter+0x28c/0x38c [ 709.257766][T18502] new_sync_write+0x388/0x4a0 [ 709.262461][T18502] __vfs_write+0xb1/0xc0 [ 709.266751][T18502] vfs_write+0x18a/0x390 [ 709.271012][T18502] ksys_write+0xd5/0x1b0 [ 709.275376][T18502] __x64_sys_write+0x4c/0x60 [ 709.279981][T18502] do_syscall_64+0xcc/0x3a0 [ 709.284590][T18502] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 709.290504][T18502] RIP: 0033:0x45b349 [ 709.294416][T18502] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 709.314125][T18502] RSP: 002b:00007f602d364c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 709.322544][T18502] RAX: ffffffffffffffda RBX: 00007f602d3656d4 RCX: 000000000045b349 [ 709.330524][T18502] RDX: 000000000000000e RSI: 0000000020000440 RDI: 0000000000000003 [ 709.338502][T18502] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 709.346481][T18502] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 709.354464][T18502] R13: 0000000000000c16 R14: 00000000004ccff5 R15: 000000000075bfd4 [ 709.364242][T18502] Kernel Offset: disabled [ 709.368685][T18502] Rebooting in 86400 seconds..